1. Overview
Inkey IT Solutions Pvt. Ltd. (“we”, “our”, “us”) is an information technology services company specializing in consulting, software development, and data-driven solutions.
We are committed to safeguarding the confidentiality, integrity, and security of all information entrusted to us by our clients, partners, and users. This Privacy Policy explains how we collect, process, and protect information in connection with our services and digital platforms.
2. Scope of Processing
We process data solely for the purpose of delivering professional IT services, including:
- Technology consulting and advisory
- Software development and system integration
- Data analytics, reporting, and business intelligence solutions
- Support and maintenance related to agreed software solutions
Where applicable, we act as a data processor on behalf of our clients under contractual agreements.
We do not provide managed services, infrastructure management, or ongoing infrastructure operations as part of our standard service offerings.
3. Data Ownership and Control
All client data remains the sole property of the respective client.
Inkey IT Solutions Pvt. Ltd. does not claim ownership of any client data and processes such data strictly in accordance with agreed service scope and client instructions.
4. Categories of Data
We may process the following limited categories of information:
- Business contact information (name, email, designation, phone number)
- Technical information (IP address, device details, system logs)
- Client-provided datasets required for service delivery
We do not collect unnecessary or unrelated personal data.
5. Purpose of Use
Data is processed strictly for:
- Execution of contracted services
- Client communication and relationship management
- Application support, troubleshooting, and performance review related to agreed software solutions
- Legal and regulatory compliance
We do not sell, rent, or commercially exploit personal or client data.
6. Cloud Platform Usage
Our services may involve development, integration, configuration, or deployment using enterprise cloud platforms such as Microsoft Azure or equivalent platforms, as agreed within the service scope.
- Clients retain control over their data
- Data is processed only as required for service delivery
- Infrastructure-level security and operations remain the responsibility of the relevant cloud provider or client, as applicable
- Application-level configuration and access control are handled only within the agreed service scope
This reflects a shared responsibility model and does not create any obligation for managed services, infrastructure management, or ongoing infrastructure operations.
7. Data Security
We implement reasonable and appropriate safeguards, including:
- Role-based access controls
- Secure development and deployment practices
- Encryption where applicable
- System monitoring and incident response mechanisms
Access to information is strictly limited to authorized personnel on a need-to-know basis.
8. Confidentiality
All data and information handled during engagements are treated as confidential. Employees, contractors, and partners are bound by strict confidentiality obligations.
Where a separate Non-Disclosure Agreement is executed with a client, the terms of such agreement shall prevail over this Privacy Policy in the event of any inconsistency. Unless a different period is expressly agreed, confidentiality obligations shall continue for five years from termination or expiration of the relevant engagement.
9. Data Sharing
Data may be shared only under the following conditions:
- With trusted infrastructure or service providers
- With authorized client representatives
- When required by law or regulatory authorities
All third parties are required to adhere to equivalent security and confidentiality standards.
10. International Data Transfers
Where data is stored, accessed, or processed outside the user’s country, such transfers are carried out only as required for service delivery and in accordance with applicable contractual, legal, and regulatory requirements.
Applicable transfer mechanisms may include client-approved contractual terms, data processing agreements, standard contractual clauses, or equivalent safeguards recognized under relevant data protection laws.
Safeguards for such transfers may include role-based access controls, confidentiality commitments, secure transmission where applicable, access limitation on a need-to-know basis, and reliance on reputable cloud or service providers maintaining appropriate security standards.
11. Data Retention
Data is retained only for the duration necessary to fulfill contractual or legal obligations. Upon completion of services, data is securely returned, deleted, or anonymized as agreed.
12. Data Subject Rights
Where applicable, individuals may have rights to:
- Access their personal data
- Request correction or deletion
- Restrict or object to processing
Requests can be submitted through official communication channels.
13. Updates to Policy
This Privacy Policy may be updated periodically to reflect operational or regulatory changes. The most recent version will be published on this page.