1. Introduction & Scope
Welcome to IGN Softwares ("Company", "we", "us", or "our"), headquartered in Nagpur, Maharashtra, India. We are committed to protecting the privacy, confidentiality, and security of all personal data provided by visitors, clients, software purchasers, and users of our website (https://ignsoftwares.in) and enterprise mobile applications.
This Privacy Policy outlines our standards, practices, and procedures governing the collection, processing, storage, transfer, and safeguarding of personal data in strict conformity with applicable Indian legal statutes, specifically the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000 (IT Act), and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
2. DPDP Act 2023 Statutory Alignment
Digital Personal Data Protection Act, 2023 Compliance
Under the DPDP Act 2023, IGN Softwares operates primarily as a Data Fiduciary in respect of information collected directly through our website, contact portals, course registrations, and commercial engagements. You are recognized as the Data Principal endowed with statutory rights under the law.
In cases where IGN Softwares is contracted to design, develop, deploy, or maintain custom software, cloud databases, ERP systems, or mobile platforms utilizing client-provided datasets, IGN Softwares acts strictly as a Data Processor on behalf of the client Data Fiduciary under a legally binding Data Processing Addendum (DPA).
3. Personal Data We Collect
We only collect personal information that is reasonably necessary to fulfill legitimate commercial, contractual, and technical support requests:
- Inquiry & Project Information: Name, professional email address, telephone / WhatsApp contact number, company name, geographic location, and specific software scope or project briefs submitted via our contact forms.
- Commercial & Billing Data: Business name, registered address, Goods and Services Tax Identification Number (GSTIN), invoicing contacts, and payment transaction references for quotation/invoice settlement. (Note: We do not store raw credit card numbers or UPI MPINs; payments are routed via authorized banking intermediaries).
- Course & Student Enrollment: Full name, academic background, contact credentials, and course selections submitted for software training programs.
- Technical & Usage Telemetry: Anonymized IP addresses, browser types, operating systems, session timestamps, and diagnostic error logs used solely for platform stability and performance optimization.
4. Purpose of Processing & Legal Grounds
In accordance with Section 4 and Section 6 of the DPDP Act 2023, personal data is processed solely for lawful purposes on the following legal bases:
- Consent: Where you have granted free, informed, specific, unconditional, and unambiguous consent through form submissions, newsletter opt-ins, or inquiries.
- Contractual Performance: Processing required to prepare official proposals, quotations, execute Software Development Agreements (SDA), issue invoices, and fulfill milestone deliverables.
- Legitimate Uses & Legal Compliance: Compliance with Indian taxation laws (GST Act), prevention of fraud, safeguarding network infrastructure, and resolving commercial disputes.
5. Data Sharing & Third-Party Disclosure
We do not sell, rent, lease, or monetize your personal data to any third party under any circumstances.
Data may be shared only under strictly governed circumstances:
- Cloud Infrastructure Providers: ISO/IEC 27001-certified hosting and cloud infrastructure providers (e.g., Hostinger, Google Cloud Platform, AWS) for secure server hosting and database replication.
- Authorized Payment Gateways: Reserve Bank of India (RBI)-licensed payment aggregators for processing digital payments and tax invoicing.
- Legal & Regulatory Mandates: Where disclosure is legally mandated by an order of a court of competent jurisdiction or authorized law enforcement agency under the IT Act 2000.
6. Statutory Rights of the Data Principal
Under Chapter III of the DPDP Act 2023, you hold the following non-derogable rights:
- Right to Access Information (Section 11): Right to obtain a summary of personal data being processed by us and the identities of third parties with whom it has been shared.
- Right to Correction & Erasure (Section 12): Right to request correction of inaccurate data, completion of incomplete data, or erasure of personal data that is no longer necessary for the purpose for which it was collected.
- Right of Grievance Redressal (Section 13): Right to have your complaints addressed by our designated Grievance Officer within statutory timelines.
- Right to Nominate (Section 14): Right to nominate any individual who shall, in the event of your death or incapacity, exercise your rights as Data Principal.
- Right to Withdraw Consent: You may withdraw your consent at any time by writing to privacy@ignsoftwares.in.
7. Data Security Safeguards & Retention
We deploy robust technical, physical, and administrative safeguards to protect personal data against unauthorized access, alteration, disclosure, or accidental destruction:
- End-to-end encryption in transit via modern TLS 1.3 / HTTPS cryptographic protocols.
- Role-based access control (RBAC) and strict session hashing on all admin management systems.
- Regular vulnerability assessments and automated patching of software dependencies.
Retention Period: Personal data is retained only for the duration necessary to satisfy the commercial, legal, taxation, or warranty purposes for which it was acquired, following which it is securely deleted or anonymized.
8. Statutory Grievance Redressal Mechanism
In compliance with Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and Section 13 of the Digital Personal Data Protection Act, 2023, IGN Softwares has designated a statutory Grievance Officer:
Appointed Grievance & Compliance Officer
Statutory Turnaround Timelines:
- Acknowledgment: Every complaint received will be acknowledged within 24 hours.
- Disposal & Resolution: Every complaint will be investigated and resolved within 15 calendar days from the date of its receipt.
- Escalation: If you are unsatisfied with our grievance resolution, you possess the statutory right to escalate your complaint to the Data Protection Board of India (DPBI).