Privacy Policy

This policy explains what personal data CohortIX collects, why we collect it, who we share it with, how long we keep it, and the rights you have under India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology Act, 2000.

1. Who we are

CohortIX is a sole proprietorship owned by Param Kalathiya, based at 217, KBC, Bapa Sitaram Chowk, Dabholi, Surat, Gujarat 395004, India ("CohortIX", "we", "us"). For the personal data described here, we are the Data Fiduciary: we decide why and how it is processed.

2. What we collect

When you book a call on our website

• Your full name, email address and phone number
• Your company name and website (optional)
• The services you are interested in, your budget range and timeline
• Your project message and the date and time you choose for the call

When you contact us directly

If you message us on WhatsApp, email or phone, we receive your name, number or email address and the contents of your message.

When you become a client

Billing details (such as business name, billing address and GSTIN), the contacts of people we work with on your team, and any content, files or system access you share with us to deliver the project.

Technical data

Like any website, our hosting provider automatically processes technical information such as your IP address, browser type and the pages requested, to deliver the site and protect it from abuse. We also use Google Analytics to collect anonymous usage statistics, such as pages viewed, approximate location and device type. We do not use advertising cookies. See our Cookie Policy.

We do not collect card numbers, bank passwords or UPI PINs. Payments are handled by your bank or payment provider.

3. Why we use it

• To reply to your enquiry, confirm your booked call and send you a booking receipt
• To understand your requirements and prepare a proposal or quote
• To deliver, support and invoice the services you engage us for
• To meet our legal, tax and accounting obligations
• To keep our website and systems secure and prevent spam or abuse

We do not sell your personal data, and we do not add you to marketing lists without your consent.

4. Our basis for processing

We process your data on the basis of the consent you give when you submit the booking form or contact us, and for legitimate uses permitted under Section 7 of the DPDP Act, including where you have voluntarily provided data for a specified purpose and where processing is needed to comply with law. You can withdraw your consent at any time (see section 8). Withdrawal does not affect processing already carried out.

5. Who we share it with

We share personal data only with service providers who help us run our business, and only as much as they need:

• Cloudflare, Inc.: hosts this website and processes booking form submissions
• Zoho Corporation (ZeptoMail): sends booking confirmation emails
• Google LLC (Google Analytics): measures how visitors use this website
• Google LLC (Gmail): our email inbox, where enquiries and booking alerts are received
• WhatsApp (Meta Platforms, Inc.): only if you choose to contact us on WhatsApp
• Project tools: during an engagement, tools agreed with you, such as code hosting, design, hosting or app store accounts

We may also disclose data where required by law, court order or a government authority, or to protect our legal rights.

6. Transfers outside India

Some of our service providers may process data on servers outside India. Such transfers are made in line with the DPDP Act, and not to any country or territory restricted by the Government of India.

7. How long we keep it

• Enquiries that do not become projects: deleted within 12 months of our last contact, or sooner if you ask
• Client records and invoices: for the duration of the engagement and afterwards for as long as Indian tax and accounting laws require
• System access and credentials you share for a project: removed from our side when the project or support period ends

Our website does not store booking form submissions in a database. They are delivered to our inbox by email.

8. Your rights

Under the DPDP Act you have the right to:

• Obtain information about the personal data we hold about you and how it is processed
• Have inaccurate or incomplete data corrected, completed or updated
• Have your data erased when it is no longer needed, unless we must keep it by law
• Withdraw consent you have given
• Nominate another person to exercise your rights in the event of death or incapacity
• Have your grievances addressed

To exercise any of these rights, email support@cohortix.in from the address you used with us. We will acknowledge your request and respond within 30 days.

9. How we protect it

Our website is served only over HTTPS. Access to enquiries and client data is limited to the people who need it to work with you, and we use reputable providers with their own security safeguards. No method of transmission or storage is completely secure, but we take reasonable security measures as required under Section 8(5) of the DPDP Act. If a personal data breach affects you, we will notify you and the Data Protection Board of India as the law requires.

10. Children

Our services are meant for businesses and adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has shared data with us, contact us and we will delete it.

11. Grievance Officer

If you have a concern about how your personal data is handled, please contact our Grievance Officer:

We aim to resolve grievances within 30 days. If you are not satisfied with our response, you may approach the Data Protection Board of India.

12. Changes to this policy

We may update this policy when our services or the law change. The date at the top of this page shows when it was last updated. Significant changes will be highlighted on this page.