Privacy Policy

Effective date: 16 October 2026  ·  Last updated: 16 October 2026

1. Who we are

This website is operated by Inovion Technologies ("Inovion", "we", "us" or "our"), a software development business based in Ahmedabad, Gujarat, India. We build custom software, web and mobile applications, healthcare and laboratory software, and provide design, cloud and support services.

For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), we are the Data Fiduciary for the personal data described in this policy, which means we decide why and how it is processed.

2. Scope of this policy

This Privacy Policy explains how we collect, use, share and protect personal data when you:

• visit or browse this website;
• fill in our contact or demo request forms;
• contact us by email, phone or WhatsApp; or
• discuss, request or receive our services as a prospective or existing client.

It should be read together with our Terms of Use. It does not cover third-party websites that we link to; please read their privacy policies separately.

3. Personal data we collect

3.1 Data you give us

• Contact details: your name, phone number, email address and company or organisation name.
• Enquiry details: the service you are interested in, your message, and any information you choose to share about your project or business.
• Communication records: emails, WhatsApp messages and call notes when you correspond with us.
• Business and billing details (for clients only): billing name and address, GSTIN and payment records needed to raise invoices.

Please do not send us sensitive personal data (such as health records, financial account details or passwords) through our website forms. If a project requires such data, we will agree a secure method with you in writing.

3.2 Data collected automatically

Only if you accept analytics cookies, we collect technical and usage information such as pages visited, time spent on pages, referring website, approximate location (city or region, based on IP address), browser type, device type and operating system. We use this data in aggregated form and do not use it to identify you personally.

Our web hosting provider may also record standard server logs (such as IP address, date and time of request and pages requested) for security and to keep the website running.

3.3 Data from other sources

If someone refers you to us, or if you contact us through a social media platform such as Instagram or LinkedIn, we may receive your name and contact details from that source.

4. How and why we use your data

Purpose	Data used
To reply to your enquiry, arrange calls and demos, and send proposals or quotes	Contact and enquiry details
To deliver, support and maintain services you have engaged us for	Contact, communication and project details
To raise invoices, collect payments and meet tax and accounting obligations	Billing and business details
To understand how visitors use our website and improve it	Usage data (only with your consent)
To measure the effectiveness of our advertising	Usage data (only with your consent)
To keep our website and systems secure and prevent misuse or fraud	Server logs and technical data
To comply with law, respond to lawful requests from authorities, and establish or defend legal claims	Any relevant data

We will not use your data for any purpose that is unrelated to the above without first informing you and, where required, asking for your consent. We do not sell your personal data.

5. Legal basis for processing

We process personal data on the following grounds permitted under the DPDP Act:

• Consent: when you submit a form, contact us, or accept analytics cookies, you consent to processing for the specific purposes described in this policy. You may withdraw consent at any time (see Section 12). Withdrawal does not affect processing already carried out.
• Voluntary provision for a specified purpose: where you voluntarily share your details so that we can respond to you or provide a service, and have not told us you object.
• Legal obligations: where processing is required by law, for example tax and accounting records.

6. Cookies and similar technologies

Cookies are small text files stored on your device. We use:

• Essential storage: a small entry in your browser's local storage that remembers whether you accepted or declined cookies. It contains no personal data and is needed for the cookie notice to work.
• Analytics cookies (optional): Google Analytics 4, to understand how visitors use the site.
• Advertising cookies (optional): Meta Pixel, to measure the results of our advertising on Facebook and Instagram.

Optional cookies are loaded only after you click "Accept" in the cookie notice. If you click "Decline", they are not loaded. To change your choice, clear this website's data in your browser settings and the notice will appear again. You can also block cookies through your browser, although some features may then not work as intended.

7. Sharing with service providers

We share personal data only with trusted service providers who help us run our business, and only to the extent needed for the purposes above. These providers act as Data Processors on our behalf and are expected to protect your data:

• Formspree: receives and forwards website form submissions to our email.
• Google: email (Gmail), Google Analytics (with consent) and Google Fonts. When a page loads, Google Fonts receives your IP address to deliver the font files.
• Meta Platforms: WhatsApp messaging, and Meta Pixel (with consent).
• Our website hosting provider: stores and serves this website and its server logs.
• Professional advisers, such as accountants and lawyers, under a duty of confidentiality.

We may also disclose personal data where required by law, by court order, or to a government authority acting under legal powers, or to protect our rights, our clients or the public. If our business is reorganised, merged or sold, personal data may be transferred to the new owner, who will be bound by this policy.

8. Transfers outside India

Some of our service providers store or process data on servers located outside India. Where personal data is transferred outside India, we do so in accordance with the DPDP Act and will not transfer data to any country or territory that the Government of India has restricted.

9. Data we process for our clients

When we build or support software for a client (for example, a laboratory or clinic using a system we developed), we may process personal data of that client's customers, patients or staff. In that case, our client is the Data Fiduciary and we act as a Data Processor on their behalf, following their instructions and the terms of our written agreement with them. Questions about such data should be sent to the relevant client. This Privacy Policy does not govern that processing.

10. How long we keep data

• Enquiries that do not become projects: up to 24 months after our last contact, so that we can follow up on your request, after which they are deleted.
• Client and billing records: for as long as needed to provide the services and then for the period required under tax, accounting and other applicable laws (generally up to 8 years).
• Analytics data: according to the retention settings of the analytics provider, which we keep at the shortest practical period.

When data is no longer needed, or when you withdraw consent and no legal requirement applies, we delete it or make it anonymous.

11. How we protect data

We follow reasonable security practices and procedures, in line with the Information Technology Act, 2000 and the rules made under it, including:

• encrypted connections (HTTPS) for this website;
• access to personal data limited to people who need it for their work;
• strong passwords and two-factor authentication on our business accounts where available; and
• choosing reputable service providers with recognised security standards.

No method of transmission or storage is completely secure. If a personal data breach occurs, we will notify the Data Protection Board of India and affected individuals as required by law.

12. Your rights

Under the DPDP Act, you have the right to:

• Access: ask for a summary of the personal data we hold about you and how it is processed, and the identities of those we have shared it with;
• Correction and completion: ask us to correct inaccurate or incomplete data, or update it;
• Erasure: ask us to delete your data when it is no longer needed for the purpose it was collected, unless we must keep it by law;
• Withdraw consent: at any time, as easily as you gave it;
• Grievance redressal: raise a complaint with us about how your data is handled; and
• Nominate: nominate another person to exercise your rights in the event of your death or incapacity.

To exercise any of these rights, email Inovion.technologies@gmail.com with the subject line "Data request". We may need to verify your identity before acting on your request. We will respond within the time limits set under applicable law.

13. Children's data

Our website and services are intended for businesses and adults. We do not knowingly collect personal data from anyone under 18 years of age. If you believe a child has sent us personal data, please contact us and we will delete it.

14. Grievance redressal

If you have a concern or complaint about how we handle your personal data, please contact our Grievance Officer:

We will acknowledge your complaint within 48 hours and aim to resolve it within 30 days. If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India after first using our grievance process.

15. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or in the law. The "Last updated" date at the top shows when it was last changed. If we make significant changes, we will highlight them on this website.

16. Contact us

For any questions about this policy, email Inovion.technologies@gmail.com or call or WhatsApp +91 91041 93271.