Privacy Policy

This Privacy Policy explains how Kavryx Dev ("Kavryx Dev", "we", "us", or "our"), a business registered in India, handles personal information in connection with this website, including when you browse the Website, contact us, submit a project inquiry, request a preferred appointment date, or interact with product information and related features.

Our registered address is Kannur, Kerala, India. Privacy questions and rights requests can be sent to build@kavryxdev.in.

This policy should be read alongside any separate privacy notice shown for a specific product, client project, recruitment process, event, or service. Where a separate notice applies to a specific processing activity, it will explain that activity in more detail.

The information we collect depends on how you use the Website and which features are actually enabled.

If you submit a contact or project inquiry, we may collect:

• Name
• Email address
• Company or organization
• Services you are interested in
• Project summary or other message
• Preferred appointment date and timezone, if provided
• Budget estimate and selected currency, if provided
• Correspondence you send us
• Other information you choose to include

Please do not submit passwords, payment-card information, sensitive personal information, confidential third-party data, or regulated data through a general contact form.

Our hosting and network providers may process technical information such as:

• IP address
• Browser and device information
• Operating system and language
• Referring page or source
• Pages requested and approximate interaction timestamps
• Error, diagnostic, and security logs

This Website does not use advertising cookies, and it does not embed third-party advertising or tracking scripts.

We may receive information from a third-party service when you choose to interact with an enabled integration, or when a service provider supplies technical, security, or fraud-prevention information.

Depending on the feature you use and the applicable legal basis, we may use personal information to:

• Respond to questions and project inquiries.
• Assess a requested project and communicate about potential scope, budget, or next steps.
• Process a preferred appointment-date request and coordinate a meeting.
• Operate, maintain, troubleshoot, and secure the Website.
• Prevent spam, fraud, abuse, unauthorized access, and technical attacks.
• Maintain internal records of inquiries and communications.
• Administer products or features you explicitly use.
• Comply with legal obligations and establish, exercise, or defend legal claims.
• Improve the Website and understand its performance where permitted and appropriately configured.
• Send marketing communications only where we have a valid basis and provide any required choice or opt-out.

We should not use inquiry information for unrelated purposes that are incompatible with the reason it was collected, unless permitted by law and explained to you where required.

The lawful basis for processing depends on the activity and the laws that apply to you and to the operator. Depending on the applicable regime, processing may be based on steps requested before entering a contract, performance of a contract, legitimate interests where permitted, compliance with legal obligations, consent, or another lawful basis.

Where consent is required, we will request it in the manner required by applicable law. You may withdraw consent where the law provides that right; withdrawal does not make prior lawful processing retroactively unlawful.

This Website uses one cookie, and only for people who sign in to the administration area.

• kavryx_session — set when an administrator signs in, so the session survives a page reload. It is marked HttpOnly so scripts cannot read it, SameSite=Lax so it is not sent on cross-site requests, and Secure in production. It expires after 7 days of inactivity or on sign-out.

It is not set for, or readable by, ordinary visitors. There are no analytics cookies, advertising cookies, or embedded third-party tracking on this Website.

We do not sell personal information as a standalone data-broker product. We may disclose information as reasonably necessary for the purposes described in this policy, including to:

• Hosting, infrastructure, database, storage, and security providers.
• Email, communication, scheduling, spam-prevention, or customer-support providers.
• Analytics providers, if enabled.
• AI/model providers, but only where an enabled feature or agreed project requires it and the relevant data-handling arrangements permit it.
• Professional advisers, such as lawyers or accountants, subject to appropriate confidentiality obligations.
• Government authorities, regulators, courts, or other parties where disclosure is required by law or reasonably necessary to protect rights and safety.
• A successor or transaction counterparty in connection with a proposed or completed business reorganization, merger, financing, or asset transfer, subject to applicable law.

We should limit access to information to what is reasonably necessary and use appropriate contractual and security measures where required.

Kavryx Dev works in AI and software engineering. That does not mean every inquiry or Website interaction is automatically sent to an AI model.

The Website's contact form stores what you submit in our own database and does not forward it to a model provider. Information you submit may reach an AI provider only as part of an agreed project, under that project's terms and data-handling arrangements.

For project inquiries, do not send personal or confidential information to an AI provider unless that transfer is necessary, authorized, and covered by the applicable privacy notice and provider terms.

The Website may be accessible globally, and some service providers may process information in countries other than the country where you live.

Where personal information is transferred internationally, we will use the safeguards and transfer mechanisms required by applicable law. The countries, providers, and safeguards involved depend on the actual infrastructure and service configuration.

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including responding to inquiries, maintaining business records, resolving disputes, enforcing agreements, securing the Website, and meeting legal obligations.

Retention periods vary by data category and purpose, and are set as follows:

• Project inquiries and the contact details you send with them: 24 months from your last message to us, after which the inquiry is deleted.
• Administration sessions: 7 days, then removed on expiry or sign-out.
• Security and server logs: 12 months from when they are generated.
• Backups: 35 days on a rolling window, after which the backup copy is overwritten and no longer restorable.

When information is no longer needed, it is deleted, anonymized, or otherwise handled in accordance with applicable law.

Retention runs from the end of the period in question, not from collection, so an inquiry you keep updating is not reset each time you write to us.

We use reasonable technical and organizational safeguards appropriate to the nature of the information and the risks involved. Depending on the system, safeguards may include access controls, least-privilege permissions, secure configuration, encryption in transit, protected secrets, backups, monitoring, and software updates.

No website, transmission, or storage system can be guaranteed to be completely secure. We cannot promise absolute security.

Depending on where you live and which laws apply, you may have rights to:

• Request access to personal information.
• Request correction of inaccurate information.
• Request deletion or erasure.
• Withdraw consent where processing is based on consent.
• Object to or restrict certain processing.
• Request a portable copy of information where applicable.
• Opt out of certain marketing communications.
• Lodge a complaint with a competent regulator or supervisory authority.

These rights are not absolute and may be subject to legal exceptions. To make a request, contact build@kavryxdev.in. We may need to verify your identity and clarify the scope of your request before responding.

If Indian data-protection law applies, requests and other rights will be handled in accordance with the provisions that are in force and applicable to the processing at the relevant time. The Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 have a phased commencement framework, so which provisions apply must be confirmed against the publication and processing dates.

The Website is intended for business, professional, and general audiences and is not designed to solicit personal information from children. Do not knowingly submit a child's personal information through the Website unless a lawful and specifically designed process permits it.

If you believe a child has provided personal information to us inappropriately, contact build@kavryxdev.in so we can assess and take appropriate action under applicable law.

The Website may link to third-party websites or use embedded or integrated services. Those third parties operate under their own privacy notices and terms. We do not control their independent privacy practices.

Review the relevant third-party notice before providing information directly to a third party.

If you contact us about a project, we may use the contact details you provide to reply and communicate about that inquiry.

If we send promotional communications, we will provide any opt-out mechanism required by applicable law. You can also contact build@kavryxdev.in to ask about marketing communications. Operational or transactional messages needed to respond to a request may still be sent where permitted.

We may update this Privacy Policy when the Website, our processing practices, our service providers, or applicable legal requirements change. We will update the "Last updated" date and provide additional notice where required by law.

This Privacy Policy and any processing of personal information described in it are governed by and construed in accordance with the laws of India.

The courts at Kannur, Kerala, India have jurisdiction over any dispute arising out of or in connection with this policy. Where data-protection law gives you the right to raise a matter with a supervisory authority in your own country, that right is unaffected.

For privacy questions, rights requests, or complaints:

• Operator: Kavryx Dev
• Registered address: Kannur, Kerala, India
• Privacy email: build@kavryxdev.in
• General contact: build@kavryxdev.in