Privacy Policy
Effective Date: June 1, 2025
Last Updated: June 1, 2025
1. Introduction
Splendorsoft Solutions ("Splendorsoft," "we," "us," or "our") is a software development agency registered in India. We build websites, mobile applications, and custom software platforms for clients worldwide. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website (www.splendorsoft.com) or engage our services.
By using our website or submitting information to us, you acknowledge that you have read and understood this policy.
2. Information We Collect
2.1 Information You Provide
- Contact Forms: Name, email address, phone number, company name, service of interest, and project description when you submit an enquiry.
- Partner Enquiries: Business name, contact details, and partnership interest.
- Job Applications: Full name, email, phone number, cover message, and uploaded resume (PDF, DOC, or DOCX format).
- Email & Phone Communication: Any information you share when contacting us directly.
2.2 Information Collected Automatically
- Analytics Data (Google Analytics 4): Page views, session duration, device type, browser, operating system, approximate geographic location (city/country level), and referral source. GA4 is loaded only after you explicitly accept analytics cookies via our cookie consent banner.
- Security & Anti-Spam Data (Google reCAPTCHA v3): Hardware and software information, interaction patterns, and an automated risk score to distinguish humans from bots. This is governed by Google's Privacy Policy.
- Server Logs: IP address, request timestamps, HTTP headers, and pages visited. These are retained for security and debugging purposes.
- Cloudflare: Our website is proxied through Cloudflare for performance and security. Cloudflare may set cookies and process IP addresses per their Privacy Policy.
2.3 Cookies & Local Storage
| Name / Type | Purpose | Duration |
|---|---|---|
| csrf_token | Security � prevents cross-site request forgery | Session |
| form_ts | Security � anti-bot time gate | Session |
| spl_cookie_consent (localStorage) | Remembers your analytics cookie preference | Persistent |
| Cloudflare cookies (__cf_bm, cf_clearance) | Bot management and security challenges | Up to 30 minutes |
| Google Analytics (_ga, _ga_*) | Analytics � only set after you accept | Up to 2 years |
You can manage or delete cookies through your browser settings. Essential cookies (CSRF, Cloudflare security) cannot be disabled without breaking site functionality.
3. Legal Basis for Processing
We process your personal information under the following legal bases:
- Consent: Analytics cookies (GA4) are set only after your explicit opt-in.
- Contractual Necessity: Processing project enquiries, delivering services, and communicating about active engagements.
- Legitimate Interest: Website security (CSRF protection, rate limiting, reCAPTCHA), fraud prevention, and improving our services.
- Legal Obligation: Retaining records as required by Indian tax and business regulations.
4. How We Use Your Information
- Respond to enquiries and provide project proposals.
- Process job applications and communicate with candidates.
- Deliver, maintain, and support software projects under contract.
- Protect our website from spam, abuse, and automated attacks.
- Analyse website usage to improve content and user experience (only with consent).
- Comply with legal and regulatory requirements.
5. How We Protect Your Information
- Encryption in Transit: All data transmitted via HTTPS/TLS.
- Content Security Policy: Nonce-based CSP headers to prevent XSS attacks.
- CSRF Protection: Double-submit cookie with SameSite=Strict and HttpOnly flags.
- Rate Limiting: Throttled form submissions to prevent abuse.
- Input Validation: Server-side sanitisation and output encoding on all form inputs.
- File Upload Security: Magic-byte verification, MIME checks, extension whitelisting, and size caps. Uploaded resumes are emailed directly and never stored on our server.
- Access Control: Sensitive configuration and credentials are kept outside the web root and version control.
6. Sharing Your Information
We do not sell, rent, or trade your personal information. We may share data with:
- Email Service (Zoho Mail): Form submissions are delivered to our inbox via Zoho's SMTP servers. Zoho processes data per their Privacy Policy.
- Cloudflare: DNS, CDN, and security services. Data processed in Cloudflare's global network.
- Google: Analytics data (only with consent) and reCAPTCHA interaction data.
- Legal Authorities: If required by law, court order, or to protect our legal rights.
7. International Data Transfers
Splendorsoft is based in India. Our service providers (Cloudflare, Google, Zoho) may process data in multiple countries. Where data is transferred outside your jurisdiction, these providers maintain appropriate safeguards (Standard Contractual Clauses, certifications, or equivalent mechanisms).
8. Data Retention
- Contact/Partner Enquiries: Retained in our email system for up to 3 years, then deleted unless a business relationship is established.
- Job Applications: Retained for up to 1 year to consider candidates for future openings, then deleted.
- Server Logs: Retained for up to 90 days for security analysis.
- Analytics Data: Governed by Google Analytics retention settings (14 months).
- Project Data: Retained for the duration of the client relationship plus any legally required retention period.
9. Your Rights
Depending on your location (GDPR, DPDPA, CCPA, or equivalent), you may have the right to:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Correct inaccurate or incomplete data.
- Erasure: Request deletion of your data ("right to be forgotten").
- Restriction: Limit how we process your data.
- Data Portability: Receive your data in a structured, machine-readable format.
- Object: Opt out of processing based on legitimate interests.
- Withdraw Consent: Revoke analytics consent at any time by clearing your cookie preferences.
To exercise any of these rights, email us at [email protected]. We will respond within 30 days.
10. Children's Privacy
Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware of such collection, we will delete the data promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be indicated by updating the "Last Updated" date at the top. We encourage you to review this page periodically.
12. Contact Us
If you have questions, concerns, or wish to exercise your data rights, contact us:
Splendorsoft Solutions
Nashik, Maharashtra, India
Email: [email protected]
Phone: +91 90226 60067
US: +1 (516) 880-9989