Privacy & Legal Policy
Last updated: October 23, 2026
At Sumigyan, we understand the critical importance of data protection and legal compliance in web development services. This comprehensive policy outlines our commitment to protecting your intellectual property, maintaining data security, and ensuring compliance with Indian data protection law while delivering exceptional digital solutions, including WhatsApp and AI automation services that process data through Meta's platforms and AI providers. To request deletion of your data, see our Data Deletion page.
Information Collection
- Personal identification information
- Business and company details
- Project requirements and specifications
- Payment and billing information
- Technical data and analytics
Client Project Data
- Website and application source code
- Database structures and content
- User interface designs
- Project documentation
- Development environment data
Data Security
- SSL/TLS encryption protocols
- Secure data storage systems
- Regular security audits
- Access control mechanisms
- Data backup procedures
Legal Compliance
- Digital Personal Data Protection Act, 2023 (India)
- Information Technology Act, 2000 and its Rules
- Meta Platform and WhatsApp Business policies
- Consent-based processing and opt-out on request
- Retention and deletion periods stated below
Intellectual Property
- Code ownership rights
- Design asset ownership
- License agreements
- Copyright protections
- Trade secret safeguards
International Operations
- Service providers may process data outside India
- Meta, hosting and AI providers may store data abroad
- Transfers only to providers bound by confidentiality and security terms
- Transfers are made in line with the DPDP Act, 2023
- Cross-border service delivery
Service Agreements
- Project confidentiality terms
- Data handling procedures
- Service level agreements
- Maintenance responsibilities
- Support terms and conditions
Your Rights & Choices
- Email us to access your personal data
- Email us to correct inaccurate data
- Email us to delete your data or withdraw consent
- We respond within 30 days of verifying your identity
- Complaints: see Grievance Officer below
WhatsApp & Instagram Data
- Data: phone number, name, profile details, message content, delivery status
- Instagram: account ID, username, posts, comments, messages and insights
- Purpose: customer support, lead follow-up, content posting, reporting
- Processed through Meta's WhatsApp Business Platform and Instagram APIs
- Meta's own privacy policy applies to data held by Meta
WhatsApp Opt-in & Opt-out
- Messages are sent only to people who have given permission
- Our forms include a consent checkbox before we contact you
- Reply STOP at any time to stop receiving WhatsApp messages
- We stop messaging after STOP and keep a record to honour it
- You can also email contact@sumigyan.in to opt out
AI Processing Disclosure
- Some customer messages are processed by AI (LLM) providers to draft replies
- Instagram content may be created or suggested with AI and reviewed by us or the client
- Message text needed to answer may be sent to the LLM provider
- AI output can be wrong; important cases are handed to a human
- We do not sell personal data or use it to train our own models
Data Retention & Deletion
- Website enquiries and leads: kept up to 24 months, then deleted
- WhatsApp / Instagram messages and logs: kept up to 12 months, then deleted
- Billing and invoice records: kept as required by Indian tax law (up to 8 years)
- Deletion on request within 30 days: see Data Deletion page
- Backups are overwritten within 90 days of deletion
Third Parties We Use
- Meta Platforms (WhatsApp and Instagram)
- Cloud hosting and database providers
- LLM / AI service providers
- Analytics tools (e.g. site traffic analytics)
- Razorpay and card / UPI networks for payments
Legal Framework & Compliance
Confidentiality Obligations
We maintain strict confidentiality of all client projects, source code, and business information. Our team members are bound by comprehensive non-disclosure agreements.
Project Intellectual Property
Upon project completion and full payment, clients receive full intellectual property rights to custom-developed code, designs, and other deliverables as specified in the service agreement.
Data Processing Agreement
When acting as a data processor for clients' projects, we process personal data only on the client's documented instructions under a written agreement, and apply reasonable security safeguards as required by Indian law.
Data Fiduciary & Legal Entity
This website and these services are operated by Sumigyan, Office No. F-1, 101/B, Prabhatam Heights, F2, Raisen Road, Patel Nagar, Bhopal, Madhya Pradesh 462022, India. For our own website enquiries and business contacts, Sumigyan is the data fiduciary. When we run WhatsApp or AI automation for a client, the client is the data fiduciary and we act as data processor on their instructions.
Governing Law
This policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000. Courts at Bhopal, Madhya Pradesh have exclusive jurisdiction, subject to any rights you have under applicable law.
Grievance Officer
For any privacy question, grievance, or to exercise your rights (access, correction, deletion, withdrawal of consent), write to our Grievance Officer at contact@sumigyan.in, or call +91 92034 58469. We acknowledge requests within 72 hours and resolve them within 30 days.
Third-Party Services
We use Meta (WhatsApp and Instagram), cloud hosting and database providers, LLM/AI providers, analytics tools and Razorpay for payments. Data is shared with them only as needed to deliver the service, and each provider processes it under its own privacy terms.
Need Legal Clarification?
Our legal team is available to address your concerns about our policies