Privacy & Data Protection Policy
Effective Date: January 1, 2026 | Compliant with Digital Personal Data Protection (DPDP) Act & GDPR Standards.
01 Information We Collect
Scriptika Solutions ("Scriptika", "we", "us") collects information necessary to deliver bespoke software development services, manage SaaS subscriptions, process project estimations, and communicate technical updates.
- Direct Inquiries: Name, corporate email address, phone number, organization name, project scope, and budget tier.
- Job Applications: Professional resumes, employment history, portfolio links, and contact parameters.
- Telemetry & Usage: IP address, device fingerprints, browser telemetry, session tokens, and referring UTM parameters.
02 Data Storage & Cryptographic Security
We enforce bank-grade security protocols across our entire cloud and database infrastructure:
All customer profiles, digital vaults (Will & Beyond), and uploaded documents are encrypted at rest and in transit (TLS 1.3).
Multi-tenant ERP databases enforce isolated schema namespaces preventing cross-tenant IDOR or data leakage.
03 Cookies, Analytics & Tracking Consent
We employ Google Analytics 4 (GA4) and anonymous session cookies to optimize platform UX and assess feature engagement. In compliance with data privacy regulations, non-essential cookies remain inactive until explicit cookie banner consent is provided. You may revoke consent at any time via your browser preferences.
04 Third-Party Processors & Sub-Processors
We do not sell, rent, or trade your personal data. We utilize vetted cloud infrastructure providers bound by rigorous Data Processing Agreements (DPAs):
- Hosting & Storage: Amazon Web Services (AWS) & Hostinger Enterprise Cloud.
- Transactional Gateways: Razorpay & Stripe (PCI-DSS Level 1 Compliant).
- AI & Inference: Google AI Studio / Gemini API (used solely for real-time prompt generation without model retraining on private client data).
05 Your Legal Rights & Data Officer Contact
You maintain the right to access, rectify, port, or request permanent erasure of your personal data from our systems within 30 calendar days.