Privacy Policy

1. About us

Sunswift Software Solutions is a sole proprietorship owned by Nalla Santosh Choudhury.

GSTIN: 21AIFPC3020R3ZKAddress: Khata No. 24/54, Plot No. 106/219, Tankua, Near Govt. High School, Jeypore, Dist: Koraput, Odisha 764003, IndiaEmail: admin@sunswiftsoft.comPhone: +91 9517357666Website: https://sunswiftsoft.com

In this policy, “we”, “us”, and “our” refer to Sunswift Software Solutions.

2. Scope

This policy covers our website, business enquiries, quotations, customer relationships, website development, web application development, Android application development, and separately agreed maintenance services.

Sunswift Solar, ULA Data Management, and Expense Tracker appear on our website as portfolio projects. They are operated separately by Sunswift Solar and are governed by their own applicable policies. This policy does not govern their operational data processing.

Client-operated websites and applications are likewise governed by their operators’ privacy policies.

Future SaaS services will have appropriate notices and terms before launch. Our website does not currently provide customer accounts, paid SaaS subscriptions, or online checkout.

3. Information we collect

Enquiries and correspondence

Our contact form collects your name, email address, optional telephone number, service required, and message.

We also receive information you choose to provide by email, telephone, WhatsApp, or during project discussions.

Customer and project information

For an engagement, we may handle customer contact details, business information, requirements, contracts, project files, source code, designs, approval records, and support correspondence.

Billing information may include invoice details, GST information where supplied, payment references, and transaction confirmation.

Please do not submit passwords, OTPs, UPI PINs, or unrelated sensitive information through our contact form.

Website technical information

Website hosting and security systems may process IP addresses, request times, browser information, requested pages, and similar information needed to deliver and protect the website.

With your consent, Google Analytics measures website visits and enquiries, including page views, interaction events, device and browser information, and approximate geographic information.

We do not intentionally send contact-form names, email addresses, telephone numbers, message contents, or customer project information to Google Analytics.

4. How we use information

We use information to:

• Respond to enquiries and prepare quotations.
• Deliver requested development and maintenance services.
• Communicate about projects, approvals, and support.
• Manage invoices and confirm payments.
• Protect systems and investigate security incidents.
• Measure website performance and enquiries where you permit analytics.
• Meet legal, tax, accounting, and regulatory obligations.
• Resolve disputes and establish or defend legal claims.

Contact-form information is not automatically added to promotional email or WhatsApp lists. Promotional communications require a separate opt-in where applicable, and you may withdraw that choice.

5. Contact forms and communications

Our contact form uses Hostinger’s server and email service to deliver enquiries to admin@sunswiftsoft.com.

We do not maintain a separate website database of contact-form submissions. Copies may nevertheless exist in our email mailbox, service logs, and provider backups.

The WhatsApp button opens an external conversation when you choose to use it. WhatsApp handles information under its own terms and privacy policy.

Our address may link to Google Maps. Opening that link takes you to an external service governed by its own policies.

6. Analytics and cookies

We use Google Analytics only to measure website visits and enquiries.

Analytics loads only after you accept optional analytics cookies. You may accept or reject analytics through the cookie controls and change your choice later through the website’s cookie settings.

Advertising personalisation, remarketing, and Google Signals are disabled. We do not use advertising trackers at launch.

Google Analytics user-level and event-level data retention is set to two months, with retention reset on new activity disabled. Aggregated reports may remain available longer under Google’s reporting practices.

Technologies necessary for website operation, security, and remembering your cookie preference may operate independently of optional analytics.

7. Providers and authorised access

We use:

• Hostinger for website hosting, contact-form processing, and business email.
• Google Analytics for consent-based website measurement.
• Microsoft OneDrive for customer project-file storage.
• Private GitHub repositories for source code and project collaboration.
• Our own computer systems for project work and storage.

Employees and freelance developers may receive access where needed for their work. Access is limited to authorised purposes and subject to confidentiality obligations.

We do not sell or rent personal information.

We share information only as reasonably necessary to provide services, use authorised providers, act with customer permission, or comply with legal requirements. Where necessary, limited information may also be shared with professional advisers for accounting, legal compliance, or dispute resolution.

8. Customer data and AI tools

We use test data during development unless a customer gives written authorisation to access live customer or end-user data.

Where we process information on behalf of a customer, we follow the customer’s lawful instructions and the applicable agreement. The customer remains responsible for determining the lawful purpose of processing and providing notices to affected individuals.

We use customer content, source code, credentials, or personal information with third-party AI tools only with the customer’s prior written approval. Approval is subject to appropriate safeguards and the agreed purpose; it does not authorise unrelated use or disclosure.

9. Payments

At launch, we accept bank transfers and UPI payments. Online checkout and SaaS subscription payments are disabled.

We may retain payment references and confirmations for billing, reconciliation, refunds, and accounting. Your bank or UPI service processes the payment under its own terms and privacy practices.

We do not ask for your banking password, OTP, or UPI PIN.

10. Retention and deletion

Our retention periods are:

• Enquiries that do not become customers: Twelve months after the last meaningful contact.
• Project files and customer correspondence: Twenty-four months after project completion or termination.
• Security and access logs under our control: Thirty days.
• Google Analytics user-level and event-level data: Two months.
• Tax, invoices, and accounting records: As required by applicable law.

We may retain relevant information longer for an ongoing support agreement, incident investigation, dispute, or legal obligation.

At the end of the applicable period, we delete information from active storage and empty relevant deleted-item folders. Residual backups and version-history copies expire according to provider settings and backup cycles. Provider-managed logs follow the provider’s applicable retention arrangements.

If retained information must be restored from backup, applicable deletion requirements will be reapplied where practicable.

11. Your requests and choices

You may contact us to request access to, correction of, or deletion of personal information, or to raise a concern about its handling.

Where processing relies on consent, you may withdraw consent. Withdrawal does not affect processing lawfully carried out before withdrawal. Certain requested services may be unavailable if necessary information cannot be processed.

We will respond within 30 calendar days after receiving sufficient information to verify and handle the request, subject to any shorter legal deadline.

We may verify identity proportionately. If information must be retained, we will explain what is retained and why. These commitments do not limit any rights available under applicable law.

12. Security and international processing

We use device passwords, software updates, two-factor authentication where available, private repositories, and access limited to authorised people.

No internet service or storage system can be guaranteed completely secure.

Our providers may process information outside India. We do not promise that all information remains in India. International processing remains subject to applicable legal restrictions and safeguards.

13. Children

Our development services are intended for customers aged 18 or above, including authorised business representatives.

We do not knowingly solicit personal information from children for these services. If you believe a child has provided personal information improperly, please contact us so we can investigate and take appropriate action.

14. Privacy contact and grievances

Nalla Santosh ChoudhuryProprietor and Grievance Contact, Sunswift Software SolutionsEmail: admin@sunswiftsoft.comPhone: +91 9517357666Address: Khata No. 24/54, Plot No. 106/219, Tankua, Near Govt. High School, Jeypore, Dist: Koraput, Odisha 764003, India

We acknowledge complaints within 48 hours and resolve them within one month, subject to any shorter applicable legal deadline.

You retain the right to approach an authority or forum available under applicable law.

15. Changes

We may update this policy as services, practices, or legal requirements change. Updates will display a revised date. Where required, we will provide additional notice or obtain consent before introducing a new processing purpose.