Privacy policy

1. Who we are

JB Software Solutions ("we", "us", "our") provides website development, mobile app development, custom software, desktop apps, SEO, AEO, GEO and workflow automation services. Our public website is https://jbsoftwaresolutions.com/. For privacy questions, email info@jbsoftwaresolutions.com or use the contact form.

This policy covers visitors and enquirers on our marketing site, people who message us on WhatsApp or email, and (at a high level) how we handle personal data shared with us during a client engagement. A signed statement of work, master services agreement or non-disclosure agreement may add stricter rules for a specific project. Where those documents conflict with this page on project data, the signed document controls for that project.

2. Scope

This policy applies to:

• jbsoftwaresolutions.com and pages we publish under that domain
• Our contact form, email and WhatsApp business conversations about enquiries
• Analytics and technical logs created when you browse the site
• Personal data you share so we can quote, contract, invoice or deliver services

It does not govern third-party sites we link to, app stores, payment gateways you use with your own customers, or products we build for you once those products are live under your accounts. Those systems have their own operators and policies.

3. Information we collect

3.1 Information you give us

• Contact and enquiry data: name, email address, company or project name, service interest, budget range, message text, and any files or links you choose to share
• Communication records: emails, WhatsApp messages, call notes and meeting notes related to your enquiry or project
• Business and billing data for clients: billing name, address, GSTIN where needed, bank or UPI details for receiving or sending invoices, and payment references. We do not store full card numbers on our website. Card payments, if used, are handled by the payment partner named in your invoice or agreement
• Project materials: credentials, content, customer lists, designs, source access and other materials you provide so we can deliver the work. We treat these as confidential under our engagement terms

3.2 Information collected automatically

• Device and browser data: IP address, browser type, device type, operating system, language and approximate location derived from IP
• Usage data: pages viewed, referrer, time on page, clicks and similar interaction events
• Cookies and similar technologies: see section 6

3.3 Sensitive personal data

We do not ask website visitors for sensitive personal data (for example health, biometrics, caste, religion or political opinions). If a project requires handling such data for your users, we will agree purpose, security and processing roles in writing before that work starts.

4. How we use personal information

• To respond to enquiries, assess fit and prepare quotes
• To enter into and perform contracts, deliver services, support you and provide handover
• To invoice, collect payment, maintain accounting and meet tax or statutory duties in India
• To improve the website, measure traffic and fix technical issues
• To send project updates and, only where appropriate, limited service announcements. You can ask us to stop marketing messages at any time
• To detect abuse, spam, fraud or security incidents
• To establish, exercise or defend legal claims

We do not sell your personal information. We do not rent enquiry lists to advertisers.

5. Legal bases and Indian law

We process personal data in line with applicable Indian law, including the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and we are preparing practices for the Digital Personal Data Protection Act, 2023 (DPDP Act) and its rules as they apply to our business.

Depending on the context, processing rests on your consent (for example submitting the contact form), performance of a contract or steps prior to a contract, our legitimate interests in running and securing an agency website, and legal obligations such as tax retention.

6. Cookies, analytics and similar tools

Our site uses:

• Essential technical storage needed for the site to load and function
• Google Analytics 4 (measurement ID G-RMGPE314SF) to understand aggregate traffic and page performance. Google may process data according to its own terms and privacy policy
• Fonts and CDN assets loaded from Google Fonts / Google hosts when you visit pages that request them

You can block or delete cookies in your browser. Blocking some cookies may affect analytics accuracy but should not block the core marketing pages. We do not currently run advertising pixels for retargeting on this site. If that changes, we will update this policy.

7. Who we share data with

We share personal data only when needed to operate the business or when the law requires it:

• FormSubmit (formsubmit.co) receives contact-form submissions and emails them to info@jbsoftwaresolutions.com. Their processing is governed by FormSubmit's terms and privacy practices
• Email providers that deliver and store business email
• WhatsApp / Meta when you choose to message us on WhatsApp. Your chat is also subject to WhatsApp's terms
• Google Analytics / Google for site analytics as described above
• Hosting and infrastructure such as GitHub Pages (or a successor host) that serves this static website
• Professional advisers (for example accountants or lawyers) under confidentiality where needed
• Authorities when required by Indian law, court order or a lawful request
• Subcontractors or specialists we engage for a project, only as needed, under confidentiality and instructions that match the engagement

If we use additional tools (project boards, cloud repos, design tools), access is limited to people working on your project.

8. International transfers

Our team primarily works from India. Some processors (for example form delivery, analytics or hosting) may store or process data on servers outside India. By using the site or submitting an enquiry, you understand that your information may be processed in other countries with different data-protection rules. We take reasonable steps to work with reputable providers and to limit what we send them to what is needed.

9. Retention

• Website enquiries: typically up to 24 months from last meaningful contact, unless a project starts or you ask us to delete sooner where we can
• Client and project records: for the life of the engagement and a reasonable period after, often 3 years or longer where needed for support, IP proof or disputes
• Financial and tax records: as required under Indian tax and company law (often 8 years or more for certain records)
• Analytics data: according to Google Analytics retention settings (commonly up to 26 months unless changed)

When retention ends, we delete or anonymise data where practical, except where the law requires us to keep it.

10. Security

We use reasonable technical and organisational measures appropriate to a small software agency: HTTPS on the public site, access limited to people who need it, careful handling of credentials, and private repositories for client code where we control the repo. No method of transmission or storage is perfectly secure. Please do not send passwords or production secrets over public forms or unencrypted chat unless we agree a safer channel.

If we become aware of a personal data breach that is likely to cause significant harm, we will take steps required by applicable law, which may include notifying affected people and relevant authorities where mandatory.

11. Your choices and rights

Subject to Indian law and reasonable verification, you may ask us to:

• Confirm whether we hold personal data about you and receive a copy
• Correct inaccurate or incomplete data
• Withdraw consent where processing is based on consent
• Request deletion where the law allows and retention is no longer required
• Object to or restrict certain processing where applicable
• Nominate another person to exercise rights in limited circumstances under the DPDP Act once those provisions apply to us in practice

Email info@jbsoftwaresolutions.com with the subject "Privacy request". We aim to respond within 15 working days. We may keep limited records of the request itself. If you are unhappy with our response, you may escalate under the grievance process below and, where available, to the Data Protection Board of India or other competent authority.

12. Children

Our services and website are aimed at businesses and adults 18 years or older. We do not knowingly collect personal data from children. If you believe a minor has submitted information, contact us and we will delete it where appropriate.

13. Client products and end-user data

When we build software for you, you are typically the controller (or equivalent) of your end users' data. You must have a lawful basis and your own privacy notices for that product. We process such data only as needed to deliver the project, under your instructions and our confidentiality terms, unless a separate data processing agreement says otherwise.

14. Third-party links

Our site may link to GitHub, WhatsApp, Google, FormSubmit and other services. Their privacy practices are their own. Read their policies before sharing data with them.

15. Changes to this policy

We may update this page when our practices, tools or the law change. The "Last updated" date at the top will change. Continued use of the site after an update means you have read the revised notice. For material changes that affect existing clients, we may also notify the primary contact by email where practical.

16. Grievance officer / contact

For privacy or data-protection complaints related to this website or our services:

• Email: info@jbsoftwaresolutions.com
• Contact form: https://jbsoftwaresolutions.com/contact/
• WhatsApp: the number linked from this website (same business line used for project chats)

We aim to acknowledge and resolve grievances within 15 working days where reasonably possible. See also our terms and conditions.