Privacy Policy

This Privacy Policy sets out the data processing governance, security safeguards, and transparency principles governing HAKT Technologies LLP ("HAKT", "we", "our", or "us"). It governs all visitors and users across our public digital platforms, discovery forms, consultative interactions, interactive AI chat services, and the authenticated enterprise Client Portal.

We adhere to applicable data privacy frameworks, including the Digital Personal Data Protection Act, 2023 (DPDPA - India), the Information Technology Act, 2000, the General Data Protection Regulation (GDPR - EU), and the UK GDPR where processing involves cross-border engagements. We operate on the fundamental principle of strict data minimization: we never monetize, sell, lease, or broker personal identifiers or corporate telemetry to third-party commercial networks.

We process information categorized strictly by operational necessity:

• Direct Inquiries & Discovery Data: Full name, business email address, corporate telephone number, company name, project parameters, budget indications, and technical briefs submitted via our contact forms, schedule calendars, or direct correspondence.
• Client Portal Credentials & Workspaces: Work email address, cryptographic password hashes (handled via Better Auth salt hashing), session security tokens, designated project IDs, milestone deliverables, and authorized project documentation downloads.
• Commercial & Financial Records: Statutory tax identifiers (e.g., GSTIN / VAT ID), corporate registration numbers, billing addresses, and banking/SWIFT coordinates necessary for statement generation and milestone remittance.
• Automated System Telemetry: Standard HTTP request logs (origin IP address, browser user-agent, routing request headers, and response times) processed strictly for network edge security, rate limiting, and DDoS defense.

Our website features an interactive engineering and scoping AI assistant powered by leading large language model (LLM) APIs (such as Anthropic Claude and Google Gemini). When you interact with the chat assistant:

• Zero Model Training: Your chat messages, prompts, and project descriptions are transmitted via secure enterprise APIs with strict zero-data-retention commitments. Your prompts are never utilized to train, retrain, or improve public foundation models.
• Ephemeral Session Processing: Conversational state is maintained only within your active browser session memory and is discarded upon tab closure unless you explicitly choose to submit your chat transcript as a project inquiry.
• Scoping Estimates: Information generated by the AI assistant regarding architectural roadmaps or rough budget bands is advisory, non-binding, and confirmed only upon human technical review.

We adopt a privacy-first posture regarding client-side state, tracking, and cookies:

We process data only where an established lawful basis exists under the DPDPA 2023 and GDPR Article 6:

• Contractual Performance (Art. 6(1)(b)): Executing Statements of Work (SOWs), provisioning custom software engineering services, establishing Client Portal workspaces, generating milestone invoices, and delivering technical support.
• Legitimate Business Interests (Art. 6(1)(f)): Defending server infrastructure against brute-force intrusion, preventing spam abuse through rate limiters and honeypots, and addressing technical inquiries.
• Statutory Compliance (Art. 6(1)(c)): Retaining financial audit records, tax declarations, and legal governance logs pursuant to Indian company law and international fiscal regulations.
• Consent (Art. 6(1)(a)): Delivering requested discovery proposals or opting in to communication channels, revokable at any moment.

Security is integral to HAKT's architectural foundation. Our Client Portal and database infrastructure enforce rigorous enterprise controls:

• Cryptographic Transit & Storage: All data is secured in transit via Transport Layer Security (TLS 1.3) and encrypted at rest in our database cluster using enterprise AES-256 standards.
• Tenant Workspace Isolation: Portal accounts are strictly gated via session-level role verification (role: client and clientProjectIds). Each client can view only their assigned project milestones, invoices, and signed agreements.
• Session Integrity: Authentication credentials employ high-work-factor cryptographic hashing. Session tokens are invalidated immediately upon user logout or after inactivity timeouts.

We engage vetted third-party cloud infrastructure providers bound by rigorous Data Processing Agreements (DPAs) and confidentiality safeguards:

HAKT operates with a primary engineering center in India and services international clients across North America, the United Kingdom, Europe, and the Middle East. When data is transferred internationally:

• Transfers from the EEA/UK rely upon Standard Contractual Clauses (SCCs) approved by the European Commission, coupled with supplemental technical encryption safeguards.
• Data originating from India is handled strictly in accordance with cross-border transfer regulations mandated by the Ministry of Electronics and Information Technology (MeitY) and the DPDP Act 2023.

Personal data is retained solely for the period required to fulfill the operational purposes articulated in this policy:

• Inquiries & Leads: Unconverted project inquiries and scoping forms are retained for twelve (12) months following inactivity before permanent purging.
• Client Workspace Records: Project assets, code deliverables, and Client Portal records are retained for the duration of the active Statement of Work plus twenty-four (24) months for warranty and maintenance continuity.
• Statutory Accounting Records: Tax invoices, receipts, and payment audit logs are archived for a mandatory minimum of eight (8) statutory financial years as required by Indian corporate and fiscal laws.
• Server Diagnostics: Automated security and edge access logs are cycled and deleted automatically within ninety (90) calendar days.

Subject to applicable regional statutory limitations, you maintain the following rights regarding your personal data:

• Right to Access & Summary: You may request a structured copy of all personal data held about you by our systems.
• Right to Correction & Updating: You may request rectification of inaccurate, obsolete, or incomplete records.
• Right to Erasure ("Right to be Forgotten"): You may request the permanent deletion of your data, provided continued retention is not mandated by fiscal, anti-money laundering, or pending litigation duties.
• Right to Revoke Consent: Where processing is anchored upon consent, you may withdraw it at any time with immediate forward-looking effect.
• Right to Grievance Redressal: You have the right to register an official grievance with our Data Protection & Grievance Officer.

Pursuant to the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, the designated Grievance Officer for HAKT Technologies LLP is published below:

We may revise this Privacy Policy periodically to reflect architectural updates, regulatory modifications, or enhanced organizational safeguards. The active revision date at the top of this document signals the operational effective date. Continued usage of our website or Client Portal after any published amendment constitutes recognition of the revised terms.

For any queries regarding this Privacy Policy, our data governance practices, or enterprise compliance audits, please contact us via our official channel: hakttechnologies@gmail.com or visit our Contact Page.