Privacy Policy

1. Overview

This Privacy Policy explains how Spoolit Techno ("we", "us", "our") collects, uses, discloses, and safeguards your information when you visit spoolittechno.com or use any of our services, including Discovery Calls, custom project quotes, and (when launched) the Edu Hub SaaS product.

By using our website or services, you agree to the practices described here. If you do not agree, please do not use the site or services.

2. What We Collect

We collect three categories of information:

2.1 Information you give us

• Contact details — name, email address, phone number, company name (when you fill a form or book a discovery call).
• Project requirements — anything you choose to share in a free-text field, on a call, or in a project quote form.
• Payment metadata — billing name, email, country, and the last 4 digits and brand of the card used. We do not collect or store full card numbers (those are handled entirely by Razorpay).

2.2 Information collected automatically

• Device & usage data — IP address, browser type, operating system, referring URL, pages viewed, time on page. Collected via standard server logs and the analytics tools described in §5.
• Cookies & similar — small files stored on your device. See §5 for details and controls.

2.3 Information from third parties

• Payment confirmations from Razorpay (success/failure, transaction id).
• If you choose to log in via a third party in the future (e.g. Google), basic profile data from that provider. This only applies to products where such sign-in is offered.

3. Why We Collect It

We use the information we collect to:

• Respond to your enquiry or book your Discovery Call.
• Deliver our services (custom software, project quotes, support).
• Process payments and prevent fraud.
• Send you transactional messages (order confirmations, call reminders, project updates).
• Send optional marketing communications (only with your consent — unsubscribe link in every email).
• Improve our website, content, and services through aggregated analytics.
• Comply with legal, tax, and accounting obligations.

4. Legal Basis (for EEA / UK visitors)

If you are in the European Economic Area or the UK, our legal bases under the GDPR are:

• Contract — to take steps at your request before entering a contract (e.g. booking a Discovery Call) and to perform the services you buy.
• Consent — for non-essential cookies and marketing emails. You can withdraw consent at any time.
• Legitimate interests — for things like preventing fraud, basic analytics, and improving the site, balanced against your rights.
• Legal obligation — to keep records required by tax and corporate law.

5. Cookies & Tracking

We use a small number of cookies and similar technologies:

• Strictly necessary — for checkout, login, and security. These cannot be disabled.
• Analytics — to understand aggregate traffic patterns. Currently minimal; we will expand this section when an analytics tool is fully wired in.
• Marketing — only if you opt in or where legally permitted. You can opt out at any time.

You can control cookies via your browser settings and (when available) our cookie banner. Blocking strictly necessary cookies will break checkout.

6. Who We Share With

We do not sell your personal data. We share it only with:

• Razorpay — to process payments and prevent fraud. Subject to Razorpay's privacy terms.
• Hosting & infrastructure providers — to run the website, store data, and serve content.
• Email service provider — to send transactional and (with your consent) marketing emails.
• Analytics provider — to understand aggregate usage.
• Professional advisors — accountants, lawyers, auditors under confidentiality.
• Authorities — when required by law or to protect our legal rights.

Each provider receives only the minimum data they need to perform their role.

7. Payments

All payments are processed by Razorpay. We never see or store your full card number, CVV, or card expiry — these go directly to Razorpay's PCI-DSS-compliant infrastructure. We do receive:

• The fact that a payment succeeded or failed.
• A Razorpay transaction / payment id.
• The last 4 digits and brand of the card, billing name, email, and country.

Razorpay acts as an independent data controller for payment data. See Razorpay's privacy policy for how they handle it.

8. Retention

We keep personal data only as long as needed for the purposes described in this Policy or as required by law. Typical windows:

• Lead / enquiry data — up to 24 months from last interaction, unless you ask us to delete earlier.
• Customer & project data — for the duration of the engagement plus 7 years for tax / accounting records.
• Payment records — 7–8 years per Indian tax law.
• Server logs — up to 12 months.

Aggregated, non-identifying analytics may be retained longer.

9. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data, subject to legal retention obligations.
• Object to processing based on legitimate interests.
• Restrict or port your data in certain cases.
• Withdraw consent for any processing based on consent (e.g. marketing emails).
• Lodge a complaint with a data protection authority.

To exercise any of these rights, email info@spoolittechno.com. We respond within 30 days. If you're unsatisfied with our response, you can lodge a complaint with the relevant authority — for Indian users, the Data Protection Board of India; for EEA users, your local supervisory authority.

10. Security

We use reasonable technical and organisational measures to protect your data, including encryption in transit (HTTPS / TLS), access controls on internal systems, and limited-staff access on a need-to-know basis. No system is 100% secure; if a breach affecting your data occurs, we will notify you and the relevant authorities as required by law.

11. International Transfers

We are based in India. Some of our service providers (e.g. global CDNs, email tools) may process your data in other countries. Where we transfer data outside India, we rely on appropriate safeguards — such as standard contractual clauses or equivalent mechanisms — to protect your information.

12. Children's Privacy

Our services are not directed to children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.

13. Third-Party Links

Our website may link to third-party sites (e.g. in case studies or blog posts). We are not responsible for the privacy practices of those sites — please read their policies separately.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect the change. Material changes will be highlighted on this page. Continued use of the website or services after a change means you accept the updated Policy.

15. Contact & Grievance Officer

For any privacy questions, requests, or complaints, contact us:

Spoolit Techno
📧 info@spoolittechno.com
🌐 spoolittechno.com

If you are in India, you may also reach our Grievance Officer at the same email with the subject line "Grievance Officer".

---

By using Spoolit Techno, you acknowledge that you have read and understood this Privacy Policy.