Privacy Policy

BitMask LLP ("BitMask", "we", "us", or "our") is a software studio registered in India. We build mobile applications, websites, and SaaS products. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use any of our products or visit our websites. Please read it carefully. If you disagree with its terms, please discontinue use of our services.

1. Information We Collect

1.1 Information You Provide Directly

• Contact & inquiry data — name, email address, phone number, and any message content submitted via contact forms, booking requests, or email.
• Account data — username, email address, and password (stored hashed) when you register for any of our SaaS products.
• Payment data — billing name, address, and payment card details processed by our third-party payment processors (e.g., Razorpay, Stripe). We do not store raw card numbers.
• Support communications — messages you send to our support team.

1.2 Information Collected Automatically

• Log & usage data — IP address, browser type, operating system, pages visited, time spent, and referring URLs.
• Device data — device model, OS version, unique device identifiers, and push-notification tokens (for mobile apps).
• Cookies & similar technologies — session cookies, preference cookies, and analytics cookies. You can control cookies through your browser settings.
• Analytics — we use Google Analytics to understand aggregate usage patterns. Data is anonymised where possible.

1.3 Information From Third Parties

If you sign in using a third-party identity provider (e.g., Google, GitHub), we receive your name, email address, and profile picture as permitted by that provider's privacy settings.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our products and services.
• Process transactions and send related information, including purchase confirmations and invoices.
• Respond to inquiries, send you technical notices, support messages, and administrative messages.
• Send marketing communications (only where you have opted in).
• Monitor and analyse usage trends to improve user experience.
• Detect, investigate, and prevent fraudulent transactions and other illegal activity.
• Comply with legal obligations.

3. Legal Basis for Processing (GDPR)

Where the GDPR applies, we process your personal data under one or more of the following bases:

• Contractual necessity — to fulfil a contract with you or take pre-contractual steps.
• Legitimate interests — to improve our products and protect our business, where those interests are not overridden by your rights.
• Consent — where you have given explicit consent, e.g., for marketing emails.
• Legal obligation — to comply with applicable laws and regulations.

4. Sharing of Information

We do not sell or rent your personal data. We may share it with:

• Service providers — trusted third-party vendors who assist us in operating our business (e.g., cloud hosting, payment processing, analytics, email delivery). They are contractually obligated to protect your data.
• Business transfers — if BitMask is involved in a merger, acquisition, or asset sale, your information may be transferred. We will provide notice before your data is transferred and becomes subject to a different privacy policy.
• Legal requirements — when required by law, court order, or government authority, or to protect the rights, property, or safety of BitMask, our users, or the public.

5. Cookies & Tracking Technologies

We use the following types of cookies:

• Essential cookies — required for the website and products to function.
• Analytics cookies — help us understand how visitors interact with our websites (Google Analytics).
• Preference cookies — remember your settings and preferences.

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

6. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required by law. When data is no longer needed, we securely delete or anonymise it.

7. Data Security

We implement industry-standard technical and organisational measures to protect your data — including TLS encryption in transit, encrypted storage at rest, and access controls limited to authorised personnel. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — request deletion of your personal data ("right to be forgotten").
• Restriction — ask us to restrict processing of your data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, withdraw it at any time.

To exercise any of these rights, email us at hello@bitmask.in. We will respond within 30 days.

9. Children's Privacy

Our products are not directed at children under the age of 13 (or 16 where applicable under local law). We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

10. Third-Party Links

Our websites and products may contain links to third-party sites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

11. International Transfers

BitMask LLP is based in India. If you access our services from outside India, your data may be transferred to and processed in India or other countries where our service providers operate. We take steps to ensure appropriate safeguards are in place for such transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top. For material changes, we will notify you via email or a prominent notice on our website. Your continued use of our services after the effective date of any changes constitutes acceptance of the revised policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: