Privacy Policy

Webczar Solutions ("Webczar", "Company", "we", "us", or "our"), led by Founder & Technology Director Subhadeep Chanda, respects your fundamental privacy rights and is dedicated to preserving the confidentiality of personal and business data entrusted to us.

This comprehensive Privacy Policy ("Policy") delineates how we collect, store, process, transmit, and protect data when you visit our website (https://webczarsolutions.com), engage our engineering and marketing services, communicate via email or WhatsApp, or utilize any digital software solutions developed by us.

Under applicable privacy frameworks—including the Indian Digital Personal Data Protection Act, 2023 (DPDPA), the General Data Protection Regulation (EU GDPR), and the UK GDPR—Webczar Solutions operates as the Data Fiduciary / Data Controller for personal data gathered directly via our digital properties and sales channels.

We collect personal and technical data to deliver exceptional digital solutions, ensure platform security, and maintain transparent business communications. The data categories we collect include:

• Direct Contact & Identity Details: Full name, business email address, phone number, physical corporate address, job title, and organization name submitted via contact forms, inquiries, or project briefs.
• Billing & Commercial Records: Tax identification numbers (GST/PAN/VAT), billing addresses, payment transaction references, and invoicing records. (Note: sensitive credit/debit card numbers are processed directly by certified PCI-DSS compliant payment gateways and are never stored on Webczar servers).
• Client Project Assets & Credentials: Wireframes, brand guidelines, API access tokens, code repositories, staging server credentials, and proprietary content shared under confidentiality for project development.
• Telemetry & Device Data: Internet Protocol (IP) addresses, browser type, operating system, device hardware profiles, referring URLs, pages visited, session duration, and clickstream interactions.
• Direct Communications: Transcripts, messages, and attachment history received through email exchanges, WhatsApp Business conversations, video conferences, or phone inquiries.

We obtain data through three primary mechanisms:

1. Direct Voluntary Submissions: When you fill out an inquiry form on our website, subscribe to our technical newsletter, request a project proposal, schedule a consultation call, or message us via WhatsApp or email.

2. Automated Digital Telemetry: When you browse our website, our server logs and analytics engines automatically log standard access telemetry, including timestamps, page performance metrics, and device diagnostics.

3. Authorized Third-Party Partners: In corporate engagements, we may receive professional business data from professional networking networks (such as LinkedIn), public business registries, or mutual referral partners.

We only process personal information where a valid legal basis exists under applicable data protection laws. Our processing operations are anchored upon:

Contractual Necessity: To evaluate project requirements, draft formal proposals, execute Statements of Work, build bespoke software, and fulfill contractual obligations.

Legitimate Business Interests: To protect our digital infrastructure from cyber threats, diagnose technical defects, refine our user experience, and analyze engagement trends.

Explicit Consent: Where you have granted unambiguous affirmative consent, such as opting into our newsletter or consenting to marketing communications.

Statutory Compliance: To maintain accurate financial books, comply with tax laws (GST/income tax), and satisfy lawful regulatory or judicial directives.

Our website utilizes cookies, session tokens, and local storage elements to provide a smooth, responsive browsing experience. Cookies are small text files placed on your device by web browsers.

Strictly Necessary Cookies: Essential for the core operation of the website, including language preference persistence (English / French) and secure navigation state.

Performance & Analytics Cookies: Anonymized analytics that measure audience traffic, identify popular case studies, and measure page load speeds without identifying individual visitors.

Managing Cookie Preferences: You possess the complete autonomy to manage or block cookies through your individual browser preferences (Chrome, Safari, Firefox, Edge). Please note that blocking functional cookies may affect certain interface conveniences.

By accepting this Policy or interacting with our digital properties, you acknowledge and consent to receive notifications, project status updates, service advisories, and promotional communications from Webczar Solutions through various channels, including but not limited to email, mobile push notifications, SMS, RCS (Rich Communication Services), WhatsApp, or any other digital communication platforms.

We utilize these channels to deliver project proposal estimates, service alerts, milestone deliverables, technical advisories, and curated insights regarding modern software engineering, AI innovations, and digital growth strategies.

If you prefer not to receive promotional updates or marketing communications, you may opt out at any time by contacting us directly at info@webczarsolutions.com, replying 'STOP' to any SMS or RCS message, using the one-click unsubscribe link provided in our email broadcasts, or following the procedures outlined in our WhatsApp Communication Opt-Out Policy.

• Email Notifications: Service proposals, invoices, project milestones, and company updates (one-click unsubscribe available in all non-transactional emails).
• SMS & RCS Messaging: Automated verification codes, urgent project alerts, and rich interactive announcements (reply 'STOP' at any time to immediately cancel).
• WhatsApp Business: Real-time client collaboration, strategy consultations, and approved notifications in accordance with our WhatsApp Opt-In Policy.
• Opt-Out Processing: Requests are processed within 24 to 48 hours across all marketing platforms without charge.

Webczar Solutions adheres to a strict non-monetization policy: We DO NOT sell, lease, trade, or monetize your personal or business data under any circumstances.

We only share limited necessary data with vetted third-party infrastructure providers ("Sub-Processors") who operate under strict Data Processing Agreements (DPAs) and confidentiality covenants. These providers include:

• Cloud Hosting & Edge Infrastructure: Vercel Inc., Amazon Web Services (AWS), and Google Cloud Platform for hosting web applications and secure data repositories.
• Communication & Email Infrastructure: Google Workspace, Resend, or SendGrid for sending transactional project notifications and client correspondence.
• Analytics & Performance Monitoring: Google Analytics (with IP anonymization) and Vercel Analytics for tracking aggregated website telemetry.
• Compliance & Legal Authorities: We will only disclose personal data to regulatory or law enforcement bodies if mandated by a formal subpoena, court order, or binding statutory obligation.

Webczar Solutions serves clients across India, North America, Europe, the Middle East, and the Asia-Pacific region. Consequently, data may be transferred to and maintained on cloud servers situated outside your home country or jurisdiction.

Whenever we transfer personal data across international borders, we ensure adequate protective mechanisms are deployed in compliance with applicable law, including Standard Contractual Clauses (SCCs) approved by the European Commission, robust data encryption standards, and adherence to equivalent data security protocols.

We implement rigorous technical, operational, and organizational security measures to protect your data against unauthorized access, loss, alteration, or disclosure:

• Transport Layer Security (TLS 1.3 / SSL): All traffic to and from our web properties is encrypted using industry-standard TLS protocols.
• AES-256 Storage Encryption: Sensitive project files, databases, and credentials stored within our internal environments are encrypted at rest using AES-256 encryption.
• Role-Based Access Control (RBAC): Engineering access to client repositories and infrastructure credentials is strictly restricted to designated developers assigned to that project.
• Routine Vulnerability Assessments: We perform ongoing dependency audits, automated vulnerability scanning, and code reviews prior to production releases.

We retain personal data only for as long as necessary to fulfill the commercial purposes for which it was gathered, satisfy legal obligations, or resolve commercial disputes.

Inquiry Data: General inquiries and contact submissions are maintained for a maximum of 24 months, after which they are systematically purged.

Active Project Records: Client project source code, correspondence, and technical specifications are retained during the active contract and for a standard archive period of 36 months to assist with subsequent maintenance or upgrades, unless an earlier purge is requested by the Client.

Financial & Invoicing Ledgers: Invoicing and accounting records are maintained for seven (7) years in accordance with statutory Indian taxation and corporate compliance mandates.

Depending on your geographical location and applicable laws, you hold fundamental rights regarding your personal information:

• Right of Access & Confirmation: You have the right to request a formal copy of the personal data we hold about you and verify our processing activities.
• Right to Rectification: You may request the correction of any incomplete, inaccurate, or outdated personal data.
• Right to Erasure ("Right to Be Forgotten"): You have the right to request the permanent deletion of your personal records, subject to statutory retention obligations.
• Right to Restrict or Object to Processing: You can object to specific data processing operations, including direct marketing communications.
• Right to Data Portability: You may request that your personal data be delivered in a structured, machine-readable format for transfer to another service provider.
• Right to Withdraw Consent: Where processing relies on your consent, you may revoke that consent at any time without affecting the lawfulness of prior processing.

Our digital platforms, consulting services, and software solutions are strictly targeted at businesses, commercial enterprises, and adults aged 18 and older.

We do not knowingly collect, solicit, or store personal information from individuals under the age of 18. If we discover that a minor has provided us with personal data without verified parental consent, we will take immediate steps to permanently delete such information from our records.

Webczar Solutions reserves the right to periodically update this Privacy Policy to reflect evolving industry practices, technology advancements, or regulatory modifications.

Whenever material changes occur, we will update the "Last Updated" timestamp at the top of this document. For significant updates impacting client data rights, we will provide prominent notice on our website or notify active clients directly via email.

We encourage you to review this page periodically to stay informed about our data safeguarding measures.

In accordance with the Indian Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, as well as global GDPR provisions, our designated Grievance & Data Protection Officer is:

• Data Protection Officer: Subhadeep Chanda
• Role: Founder & Technology Director, Webczar Solutions
• Official Email: info@webczarsolutions.com / subhadeep@webczarsolutions.com
• Direct Phone / WhatsApp: +91 99882 21729
• Headquarters: Chandigarh · Mohali · Panchkula · Zirakpur (Tricity), Punjab / Haryana, India
• Response Timetable: We acknowledge all privacy inquiries within 48 hours and provide substantive resolution within 15 business days.