Privacy Policy

    Effective Date: 1st June 2026

    1. Introduction

    Hyperbyte Innovations (“Company”, “we”, “our”, “us”) respects your privacy. This Policy explains how we collect, use, disclose, and protect personal information of clients and website visitors in the United States, India, and other regions, in accordance with:

    • The California Consumer Privacy Act (CCPA) and CPRA amendments – USA.
    • The Digital Personal Data Protection Act, 2023 (DPDP Act) – India.
    • The Information Technology Act, 2000 and SPDI Rules, 2011 – India.
    • Applicable US state privacy laws (Virginia VCDPA, Colorado CPA, etc.) where relevant.

    2. Information We Collect

    The personal information that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point we request your information.

    Personal Information

    • Name, email, phone number, billing and shipping address.
    • Company name, job title, and project details.
    • Payment information processed via PCI-DSS compliant gateways.
    • Remote support session data when you authorize a session.

    Technical Information

    • IP address, device, browser, and operating system.
    • Usage analytics, cookies, and similar tracking technologies.
    • Diagnostic logs gathered during remote support (with consent).

    3. How We Use Your Information

    Deliver, support, and improve our IT and digital services.
    Process payments and send invoices, receipts, and service notices.

    Respond to inquiries and provide customer support.

    Send marketing communications only where permitted (opt-in for India under DPDP; opt-out for US under CAN-SPAM/CCPA).
    Comply with legal, tax, and regulatory obligations in the US and India.
    Detect, prevent, and respond to fraud or security incidents.

    4. Legal Basis (India – DPDP Act)

    We process personal data of Indian users based on your explicit consent or as necessary for legitimate uses such as performing a contract, complying with law, or responding to a medical or security emergency.

    5. Your Rights (USA)

    Right to Know what personal information we collect and share.
    Right to Delete personal information (subject to legal exceptions).
    Right to Correct inaccurate personal information.
    Right to Opt-Out of the sale or sharing of personal information. We do not sell personal information.
    Right to Non-Discrimination for exercising your privacy rights.

    6. Your Rights (India – DPDP Act)

    Right to access a summary of your personal data we process.
    Right to correction, completion, updating, and erasure of personal data.
    Right to grievance redressal through our Data Protection Officer.
    Right to nominate another individual to exercise rights in case of incapacity or death.
    Right to withdraw consent at any time.

    7. Data Sharing

    We share personal information only with vetted service providers (cloud hosting, payment processors, analytics), legal authorities when required by law, or with your explicit consent. We do not sell your personal information.

    8. International Data Transfers

    Personal data may be transferred between India, the United States, and other countries where our service providers operate. We use Standard Contractual Clauses and equivalent safeguards as required under the DPDP Act and applicable US laws.

    9. Data Security

    We use industry-standard administrative, technical, and physical safeguards including encryption in transit (TLS 1.2+), access controls, audit logs, and least-privilege policies. In the event of a data breach, we will notify affected users and regulators (including the Data Protection Board of India and applicable US state attorneys general) as required by law.

    10. Data Retention

    We retain personal data only as long as needed to deliver services, comply with US/India tax and accounting regulations (typically 7 years for financial records), and resolve disputes.

    11. Cookies & Tracking

    We use essential, analytics, and (with your consent) marketing cookies. US users in California can use the “Do Not Sell or Share My Personal Information” link, and Indian users may withdraw consent via our cookie banner.

    12. Children's Privacy

    Our services are intended for adults and business users.

    We do not knowingly collect personal information from children under the age of 13.

    If we become aware that such information has been collected, we will take reasonable steps to delete it promptly.

    13. Grievance / DPO Contact

    Data Protection Officer – Hyperbyte Innovations

    1st Floor Chimes Tower, Vakil market, A-01, Sector 28, DLF Phase IV, Gurugram, Haryana 122002

    USA Support: Remote, serving all 50 states

    Email: privacy@hyperbyteinnovations.com

    Phone (India): 0124-497-417

    Phone (USA): +1-855-444-0720

    We respond to verifiable privacy requests within 30 days as required by CCPA/CPRA and the DPDP Act.

    14. Changes

    We may update this Privacy Policy. Updates will be posted with a new “Last updated” date.