1. Who we are
This website is operated by Incipit, which in this policy is also "we" and "us". You can reach us at info@incipit.in.
For personal data you send us through this website, we decide why and how it is used, so we act as the data fiduciary under India's Digital Personal Data Protection Act, 2023. When we build or run software for a client and handle personal data that belongs to the client's own users or customers, the client decides the purpose and we act on the client's instructions as a processor; the client's own privacy notice then applies.
2. What we collect
- Enquiry and contact forms: your name, business email address, organisation, phone number, the service and timeline you are interested in, the requirement you describe, and an attachment if you add one.
- Newsletter: your email address.
- Job and internship applications: what you submit through the careers route of the contact form, including any CV you attach. See the Applicant Privacy Notice.
- Client portal and client work: account details, project and billing information, support messages and documents you or your team share with us.
- Payments: the payment status and reference we receive from Razorpay. You enter card, UPI or bank details on Razorpay's payment page, not on this website.
- Messages: records of the emails you exchange with us.
- Technical and usage data: pages visited, approximate location, device and browser type and traffic source, collected by Google Analytics 4 only if you accept analytics cookies, plus server logs kept for security and fault-finding.
- Forum and survey replies you choose to post.
3. Why we use it
We do not sell personal data and we do not use it for advertising. We do not make decisions about you by automated means alone.
- To reply to your enquiry, prepare a proposal and start work you have asked for.
- To deliver, support, invoice and collect payment for services and to keep the records the law requires.
- To send the newsletter, only to people who subscribed, with a way to stop.
- To assess a job or internship application.
- To keep the website and client systems secure, to detect misuse, and to fix faults.
- To understand which pages are useful and improve them, using aggregate analytics.
4. Our basis for using your data
Where you give us data for a stated purpose, such as an enquiry or a newsletter subscription, we rely on your consent and on the situation in which you voluntarily provided it. You can withdraw consent at any time by writing to us; withdrawal does not affect what we did before, and some data may need to be kept where the law requires it.
We also use data where the law permits it without consent, for example to meet a legal obligation, to perform a contract with you, or to respond to a security incident.
5. Who else handles your data
We use a small number of service providers to run the website and the business, listed on the Third-Party Services page with what each receives. They process data for us and for no other purpose we have agreed to. We may also disclose data when the law, a court or a public authority requires it, or to protect our rights or the safety of others.
We do not share your enquiry with other companies for their marketing.
6. Where data is stored and sent
At the date of this policy the website application runs on Microsoft Azure in the Canada Central region and our database runs on Azure in the Central India region. Data you submit can therefore be processed outside India. Our email provider, payment provider and analytics provider also operate their own systems; their locations are set by them.
India's data protection law allows transfers abroad except to countries the Government restricts by notification. We will update this section if our hosting changes.
7. How long we keep it
We keep personal data only as long as it is needed for the purpose it was collected for and for any period the law requires, such as accounting and tax records. When it is no longer needed we delete or anonymise it. You can ask us to delete data earlier; see Your rights. Fixed retention periods for each type of data are described on the Data Retention page as we finalise them.
8. How we protect it
We use access controls, encrypted connections to the website, and restrict who can see client and enquiry data. No system is completely secure, and we cannot guarantee that data will never be accessed without authorisation. If a breach affecting your personal data occurs, we will tell you and the authorities as the law requires. See the Security Overview for how to report a vulnerability.
9. Your rights
Under the Digital Personal Data Protection Act, 2023 you may ask us for a summary of the personal data we hold about you and how it is used, ask us to correct or complete it, ask us to erase it, withdraw your consent, and nominate someone to exercise these rights if you die or cannot act. You may also make a complaint about how we handle your data.
The Data Rights and Grievance page explains how to send a request, what we need to confirm it is you, and how to escalate if you are not satisfied.
10. Children
Our website and services are for businesses and adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, write to us and we will delete it.
11. Cookies and similar technologies
We use cookies and browser storage for security, for signing in to the client portal and for analytics. Analytics is on by default and you can switch it off at any time from the Cookie preferences link in the footer. The Cookie Policy lists them.
12. Links to other sites
This site links to other websites such as LinkedIn and Instagram. They have their own privacy practices and we are not responsible for them.
13. Changes to this policy
When we change this policy we will update the version and date above. If the change affects how we use data you already gave us, we will tell you where the law requires it.
14. Contact
Questions or requests: info@incipit.in, subject line "Privacy".
Version 2.0, last updated 3 November 2026. Incipit: info@incipit.in.