Privacy Policy

1. Introduction

DEVARC LABS PRIVATE LIMITED (“Company”, “we”, “us” or “our”), operating under the brand name DevArc Labs, is committed to protecting the privacy and security of personal information provided by users, customers and visitors (“you” or “your”).

This Privacy Policy (“Policy”) explains what information we collect, how we use and protect it, and your rights in relation to your personal data when you access or use our websites, applications, software, platforms and other digital services (collectively, the “Services”).

By accessing or using any of our Services, you acknowledge that you have read, understood and agree to the practices described in this Policy. If you do not agree, please do not use our Services.

2. Information We Collect

We may collect the following categories of information depending on the Service you use:

2.1 Information You Provide Directly

• Name, email address, phone number and other contact details
• Account registration information including username and password
• Billing and payment information (processed through authorised payment gateways)
• Communications you send to us, including support requests and feedback
• Any other information you voluntarily provide through our Services

2.2 Information Collected Automatically

• Device information (device type, operating system, browser type and version)
• IP address and approximate geographic location
• Usage data (pages visited, features used, session duration, click patterns)
• Log data (access times, error logs, referring URLs)
• Cookies, pixels and similar tracking technologies (see Section 6)

2.3 Information from Third Parties

• Information received from payment processors regarding transaction status
• Analytics data from third-party service providers
• Information from social media platforms if you choose to connect your account

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, maintain and improve our Services
• To create and manage your account
• To process transactions and manage subscriptions
• To communicate with you about your account, transactions, updates and support
• To send service-related notices, security alerts and administrative messages
• To personalise and enhance your experience with our Services
• To analyse usage patterns and improve functionality
• To detect, prevent and address fraud, security issues and technical problems
• To comply with applicable legal obligations, court orders and regulatory requirements
• To enforce our Terms of Service and other applicable agreements

4. Legal Basis for Processing

We process personal data on one or more of the following legal bases, as applicable under the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023 and other applicable laws:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose
• Contractual necessity: Where processing is necessary to perform our obligations under a contract with you or to take steps at your request before entering into a contract
• Legal obligation: Where processing is necessary to comply with applicable laws or regulations
• Legitimate purposes: Where processing is necessary for our legitimate business purposes, provided such purposes do not override your fundamental rights

5. Sharing of Information

We do not sell your personal information. We may share your information in the following limited circumstances:

• Service providers: With trusted third-party vendors who assist us in operating our Services (e.g., payment processors, hosting providers, analytics services), bound by contractual obligations to protect your data
• Legal requirements: When required by applicable law, court order, governmental request or regulatory authority
• Business transfers: In connection with a merger, acquisition, restructuring, sale of assets or similar corporate transaction, subject to applicable law
• Protection of rights: To protect and defend the rights, property or safety of the Company, our users or the public
• With your consent: In any other circumstances where you have provided explicit consent

6. Cookies and Tracking Technologies

Our Services may use cookies, web beacons, pixels and similar tracking technologies to collect information about your browsing activity and preferences.

Types of cookies we may use:

• Essential cookies: Required for the basic functionality of our Services
• Analytics cookies: Help us understand how users interact with our Services
• Functional cookies: Remember your preferences and settings
• Marketing cookies: Used to deliver relevant content and measure effectiveness of communications

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our Services.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy applicable legal, regulatory, accounting or reporting requirements.

When determining the appropriate retention period, we consider the amount, nature and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process the data and applicable legal requirements.

Upon expiry of the applicable retention period, or upon your valid request for deletion (subject to applicable law), we will securely delete or anonymise your personal data.

8. Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, loss or destruction.

These measures may include:

• Encryption of data in transit and at rest
• Access controls and authentication mechanisms
• Regular security assessments and monitoring
• Secure development practices

While we take reasonable measures to protect your data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of your information.

9. Your Rights

Subject to applicable law, you may have the following rights in relation to your personal data:

• Access: Request information about the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete personal data
• Erasure: Request deletion of your personal data, subject to applicable legal obligations
• Withdrawal of consent: Withdraw consent where processing is based on your consent, without affecting the lawfulness of prior processing
• Grievance redressal: Lodge a complaint with the Company's Grievance Officer or the relevant data protection authority
• Nomination: Nominate an individual to exercise your rights in the event of your death or incapacity, where applicable under law

To exercise any of these rights, please contact us using the details provided in Section 15. We will respond to your request within a reasonable time and in accordance with applicable law.

10. Children's Privacy

Our Services are not directed at children under the age of 18 unless expressly stated otherwise for a particular Service.

We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child without verifiable parental or guardian consent, we will take reasonable steps to delete that information promptly.

Where a Service is accessible to children, verifiable consent from a parent or lawful guardian will be obtained before processing any personal data of such child, in accordance with the Digital Personal Data Protection Act, 2023 and other applicable laws.

11. Third-Party Links

Our Services may contain links to third-party websites, applications or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party services.

We encourage you to review the privacy policy of every third-party service you interact with. Any information you provide to a third-party service is governed by that third party's own privacy policy.

12. International Data Transfers

Your information may be stored and processed in India or in other countries where our service providers maintain facilities. By using our Services, you acknowledge that your data may be transferred to and processed in locations outside your country of residence, where data protection laws may differ.

Where such transfers occur, we will take appropriate steps to ensure that your personal data receives an adequate level of protection in accordance with applicable law.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, Services or applicable laws. When we make material changes, we will update the “Last Updated” date at the top of this page and may provide additional notice through the relevant Service or another appropriate communication channel.

Your continued use of our Services after the updated Policy becomes effective constitutes your acceptance of the revised Policy, to the extent permitted by applicable law.

We encourage you to review this Policy periodically to stay informed about how we protect your information.

14. Grievance Redressal

In accordance with the Information Technology Act, 2000 and the rules made thereunder, and the Digital Personal Data Protection Act, 2023, the details of the Grievance Officer are as follows:

If you have any concerns or complaints regarding the processing of your personal data, you may contact the Grievance Officer. We will acknowledge your complaint within 48 hours and aim to resolve it within one month from the date of receipt.

If you are not satisfied with the resolution, you may approach the relevant data protection authority or other competent authority as per applicable law.

15. Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or our data practices, please contact us: