Privacy Policy

"CruxBit"("we", "us", or "our") is a software and AI consultancy based in Bengaluru, India. We operate the website cruxbit.tech(the "Site") and provide custom software, web, mobile, and AI development services to clients worldwide.

For the purposes of the EU/UK General Data Protection Regulation (GDPR) and India's Digital Personal Data Protection Act, 2023 (DPDP Act), CruxBit is the data controller / data fiduciary of the personal data described in this policy.

We only collect the information we need to respond to you, deliver our services, and improve the Site.

• To respond to your enquiries and provide quotes.
• To deliver the services you engage us for.
• To send service-related communications (e.g. project updates).
• To operate, maintain, secure and improve the Site.
• To understand aggregate traffic and content performance.
• To comply with applicable legal obligations.

• Consent — When you submit a form or accept cookies.

• Contract — To take steps at your request before entering a contract, and to perform an engagement we have agreed.

• Legitimate interests — To keep the Site secure, to understand how it is used, and to communicate with prospects who contacted us.

• Legal obligation — Where we are required to retain records for tax, accounting or compliance reasons.

We share personal data only with service providers that help us run the Site and our business, and only to the extent necessary:

• Google LLC — Contact form submissions are stored in a Google Form / Google Sheet under our account; aggregated Site analytics are processed via Google Analytics 4 with IP anonymisation enabled.

• Amazon Web Services (AWS) — Hosting, storage and content delivery for the Site (region: ap-south-1, Mumbai).

• Communication tools — Email, WhatsApp, and other channels you choose to contact us through, governed by their own privacy policies.

We may also disclose personal data if required by law, to protect our rights, or in connection with a corporate transaction (e.g. merger or acquisition), subject to applicable safeguards.

We use a small number of cookies and similar technologies to make the Site work and to measure traffic. The main categories are:

• Strictly necessary — Required for the Site to function (e.g. session, security).

• Analytics — Google Analytics 4 cookies (e.g. _ga, _ga_*) help us count visits and understand which content is useful. IPs are anonymised before processing.

You can block or delete cookies through your browser settings, or opt-out of Google Analytics with the Google Analytics Opt-out Browser Add-on.

We are based in India and our primary hosting region is Mumbai (ap-south-1). Some of our service providers (e.g. Google) may process data in other countries. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

• Contact enquiries — Retained for up to 24 months from last interaction, then deleted or anonymised.

• Client engagement records — Retained for the duration of the engagement and for up to 7 years afterwards where required for tax, accounting or contractual reasons.

• Analytics data — Retained for up to 14 months in Google Analytics in aggregated form.

Depending on where you live, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data (subject to legal limits).
• Object to or restrict certain processing.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with your local data protection authority.

We use industry-standard technical and organisational measures to protect personal data — including HTTPS for the Site, access controls on our internal tools, and least-privilege access for engagement data. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

The Site is not directed at children under the age of 18 and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

The Site may contain links to third-party websites and services. We are not responsible for the privacy practices or content of those sites. Please review their own privacy policies before sharing any information.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If the changes are material, we will provide a more prominent notice.

For any questions about this Privacy Policy or how we handle your information, please reach out: