PRIVACY

This Privacy Policy applies to all services, websites (rndtechnosoft.com), applications, and client portals provided by RnD Technosoft Pvt. Ltd. (“RnD”, “we”, “our”, or “us”).

Whether you are an individual browsing our agency portfolio, a prospective client inquiring about our engineering capabilities, or an enterprise customer engaging in custom software development, this document describes your statutory rights and our commitments under worldwide data protection laws, including the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and the Digital Personal Data Protection Act (DPDPA).

We classify collected information into three primary streams:

We deploy gathered data strictly for lawful, explicitly defined objectives:

• Fulfillment of Contracts: Delivering architectural designs, custom software codebases, mobile builds, cloud provisioning, and digital marketing campaigns.
• Customer Support & Technical Communications: Sending deployment notices, security advisories, invoice breakdowns, and engineering standup updates.
• Infrastructure Integrity & Threat Detection: Monitoring real-time traffic to mitigate bot intrusion, unauthorized brute-force attempts, and API rate-limit abuse.
• Compliance & Statutory Auditing: Meeting international financial, taxation, intellectual property filing, and corporate governance standards.

If you reside within the European Economic Area (EEA) or the United Kingdom, our processing is predicated upon:

We engage rigorously vetted third-party vendors (sub-processors) to maintain high availability and security across our digital ecosystem. All vendors operate under legally binding DPAs:

• Cloud Hosting & Compute: AWS (Amazon Web Services), Vercel, Google Cloud Platform (SOC-2 Type II & ISO 27001 verified).
• CDN & DDoS Mitigation: Cloudflare Inc. for edge caching, SSL/TLS termination, and web application firewalling.
• Transactional Communications: Resend, SendGrid, or AWS SES for transactional alerts and status updates.
• Payment Gateways: Stripe, Razorpay, or Wire Transfers adhering to PCI-DSS Level 1 compliance.

We treat data defense with military-grade rigor. Our technical countermeasures encompass:

We retain personal data only as long as necessary to achieve the specific purposes set forth in this document or pursuant to contractual retention agreements:

• Active Client Contracts: Retained for the contract duration plus statutory limitation periods (typically 5 to 7 years for tax and commercial verification).
• Prospective Inquiries: Retained for 24 months before automated purge unless a formal engagement commences.
• Server Logs: Cycled and purged on an automated 90-day rolling window.

Depending on your geographic jurisdiction, you hold enforceable privacy rights:

To exercise any of these statutory rights, please submit an official request to our Data Protection Officer at privacy@rndtechnosoft.com. We reply within 30 calendar days.

As a global digital engineering partner with headquarters in Vapi, Gujarat, India, and clients spanning North America, Europe, Australia, and the Middle East, data may be transferred to and maintained on compute clusters located outside your home jurisdiction.

Where cross-border transfers occur from the EEA or UK, RnD implements European Commission Standard Contractual Clauses (SCCs) alongside supplementary cryptographic safeguards to guarantee an adequate level of data protection equivalent to GDPR standards.