Privacy Policy

1. About Us & Scope

Digital Product Solutions ("we", "us", or "our") is a registered MSME technology agency based in Korani, Thiruvananthapuram, Kerala 695104, India. We operate the website https://www.digitalproductsolutions.in and build custom software, web applications, mobile apps, business automations, and AI integrations.

This Privacy Policy explains how we collect, use, process, disclose, and safeguard personal information when:

• You browse our website, submit inquiries, or use our project cost estimators and calculators.
• You engage us for custom software development, mobile apps, web design, or digital transformation.
• You or your business uses our WhatsApp Business Solutions and Meta Platform integrations, where we act as a Tech Provider / Solution Provider utilizing Meta APIs (including whatsapp_business_messaging and whatsapp_business_management).

By accessing our website or using our services, you acknowledge that you have read, understood, and agreed to the practices outlined in this Policy.

2. Information We Collect

We collect information in three ways: information you provide directly, technical data gathered automatically, and integration data received through authorized third-party APIs.

A. Information You Provide Voluntarily

• Contact & Identification Details: Name, business name, email address, phone number, and physical office address submitted via our contact forms, booking links, or email communications.
• Project Inquiries & Specs: Requirements, estimated budgets, architectural goals, and technical specifications you share with us to quote or deliver services.
• Billing & Contract Data: Invoicing details, tax identification numbers (e.g. GSTIN), and payment confirmation records necessary for contract execution.

B. Automatically Collected Technical Information

• Device & Usage Data: IP address, browser type, operating system, device characteristics, language preferences, referring URLs, and pages visited.
• Cookies & Analytics: We use aggregated web analytics (Google Analytics G-W95558LF2R) and local session storage strictly to measure site speed, visitor trends, and performance.
• Support Chat Logs: Queries submitted through our live chat widget (powered by fastbots.ai) to answer customer questions about our development capabilities.

4. How We Use Your Data

We process personal information only for legitimate, transparent business purposes, including:

5. Data Sharing & Sub-Processors

We do not sell personal data. We only share information with trusted third-party service providers (sub-processors) who assist us in operating our services under strict contractual confidentiality:

• Meta Platforms, Inc.: Via the WhatsApp Business Cloud API for routing and delivering messages.
• Cloud Hosting & Infrastructure: Scalable, encrypted cloud servers (such as Vercel, AWS, or Cloudflare) for hosting web apps and API endpoints.
• Communication & Form Handling: FormSubmit and Google Workspace for handling lead inquiries sent to our corporate email.
• Statutory Authorities: If required by court order, law enforcement, or competent government authorities under applicable Indian law.

6. Data Retention Policy

We adhere to data minimization and do not keep personal data longer than necessary:

• Client Account Data: Retained for the duration of the commercial agreement and up to 5 years thereafter to comply with Indian accounting, tax, and legal requirements.
• WhatsApp Message Logs & Webhook Payloads: Transient messaging logs, delivery receipts, and payload metadata are retained on our servers for a maximum of 90 days for error diagnosis and delivery verification, after which they are permanently purged.
• Website Inquiries: Contact form inquiries that do not convert into active contracts are deleted or anonymized within 12 months.

8. Data Security Standards

We implement industry-grade technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction:

• Encryption in Transit: All website and API traffic is strictly routed over TLS 1.3 / HTTPS encryption.
• API Token Security: Meta Graph API access tokens and webhook secret keys are stored in encrypted secret vaults with restricted access.
• Access Controls: Role-based access control (RBAC) and mandatory two-factor authentication (2FA) for engineers and administrative personnel.
• Regular Audits: Ongoing code analysis and vulnerability assessments of our software architecture.

9. Your Legal Rights (DPDP Act, 2023)

Under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and international data privacy benchmarks, you have the following rights regarding your personal data:

10. Grievance Officer & Contact Information

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, the details of our designated Grievance Officer are published below: