Privacy Policy

Dipti Varma, trading as Novacraft, Pune, Maharashtra. For any question about this policy or your information, contact novacraftorg@gmail.com.

When you contact us or request a quotation: your name, email address, phone number, and the project details you choose to share.

When you book a consultation call: the above, plus your selected time slot. Your booking is added to our calendar and a meeting invitation is sent to your email address.

When you pay us: our payment gateway collects your payment details. We receive a transaction reference, amount, and status. We never see or store your card, UPI, or bank credentials.

When you visit the site: standard technical information such as IP address, browser type, and pages visited, collected by our hosting provider for security and performance.

To respond to your enquiry, prepare quotations, schedule and hold consultation calls, deliver and support the services you engage us for, process payments, and meet our legal and accounting obligations.

We process your information to take steps at your request before entering a contract, to perform a contract with you, to comply with legal obligations, and for our legitimate interest in running and improving our business.

We use the following service providers, who process information on our behalf:

• Supabase — database and backend infrastructure
• Netlify — website hosting
• Google — calendar scheduling and meeting invitations
• Razorpay — payment processing

We do not sell your personal information, and we do not share it for advertising.

We may disclose information where required by law.

Your information may be processed on servers outside India by the providers listed above, under their own security and data protection commitments.

Enquiry and booking records: up to 24 months from your last contact with us.

Client project and financial records: as long as required by Indian tax and accounting law, currently 8 years.

You can ask us to delete your information sooner where we are not required to keep it.

You may ask us to access, correct, or delete the personal information we hold about you, and withdraw consent where we rely on it. Write to novacraftorg@gmail.com and we will respond within 30 days. If you are not satisfied with our response, you may raise a complaint with the relevant data protection authority.

We use encrypted connections, restrict access to client data to those who need it, and store uploaded files in private storage. No system is completely secure, and we cannot guarantee absolute security.

Our services are for businesses. We do not knowingly collect information from anyone under 18.

We may update this policy. The current version is always at novacraft.co.in/privacy, with the date it took effect at the top.