Privacy Policy

Stactualize Private Limited ("Stactualize", "we", "us", or "our") is committed to protecting the privacy, confidentiality, and security of our clients, prospects, and visitors. This Privacy Policy details our policies regarding the collection, processing, storage, and transfer of digital data in strict accordance with the Digital Personal Data Protection (DPDP) Act 2023 (India), the General Data Protection Regulation (GDPR) (EU/UK), and the California Consumer Privacy Act (CCPA).

1. Corporate Entity & Data Controller

The legal data controller responsible for personal and commercial data collected via this website and our consulting operations is:

2. Categories of Information Collected

We process only data necessary to fulfill commercial inquiries, execute consulting agreements, and deliver enterprise engineering services:

• Direct Inquiry Data: Full name, corporate email address, business telephone number, company identity, and project requirements submitted via contact or scoping forms.
• Technical Metadata & Telemetry: Anonymized client IP addresses (cryptographically hashed with rotating salts), browser user agents, and performance telemetry to detect abuse and ensure system availability.
• Client Project Artifacts: Architecture blueprints, requirements specifications, and project codebases provided under mutual Non-Disclosure Agreements (NDAs).

3. Legal Basis for Processing

We process personal and corporate data under the following lawful bases:

• Contractual Performance: To evaluate project briefs, formulate proposals, and deliver software development contracts.
• Legitimate Interests: To secure our web infrastructure against spam, DDoS attacks, and unauthorized access.
• Explicit Consent: Where users have opted in to receive technical advisories or architectural whitepapers.

4. Data Subject Rights (GDPR, CCPA & DPDP Act 2023)

Regardless of your geographic jurisdiction, Stactualize honors the following data rights:

• Right to Access & Portability: Request a complete copy of any personal data stored in our systems in a structured machine-readable format.
• Right to Correction & Erasure: Request immediate correction of inaccurate data or complete deletion of non-contractual personal records.
• Right to Withdraw Consent: Revoke consent for communications at any time with immediate effect.
• Non-Discrimination: We do not sell, rent, or trade personal or enterprise data to third-party data brokers or advertisers.

5. Infrastructure Security & Data Retention

All data in transit is encrypted using TLS 1.3 with strict HTTPS enforcement (HSTS). Data at rest is encrypted using AES-256 standards. Inquiry records are retained for a maximum of 24 months before automated purge unless converted into an active Master Services Agreement.

6. Contact Data Protection Officer

To exercise your statutory data rights or submit a privacy inquiry, contact our Data Protection Officer at privacy@stactualize.com or write directly to our Chennai corporate headquarters.