Privacy Policy

1. Introduction & Commitment to Privacy

Wordsmith Creations is dedicated to protecting the privacy, confidentiality, and data sovereignty of our clients, visitors, and partners. This Privacy Policy outlines our transparent practices regarding the collection, handling, storage, and processing of personal, technical, and commercial data when you interact with our website (https://wordsmithcreations.in/) or engage our digital agency services, including website design, web development, custom software engineering, mobile applications, and digital marketing.

By accessing our website or retaining our professional services, you acknowledge and agree to the practices described in this Privacy Policy, in accordance with the Information Technology Act, 2000 (India), the Digital Personal Data Protection (DPDP) Act, 2023, and applicable international privacy frameworks.

2. Information We Collect

We only collect information that is strictly necessary to communicate, execute contracts, and deliver digital engineering services:

A. Information You Voluntarily Provide

• Contact Details: Full name, corporate email address, telephone/WhatsApp number, designation, and physical company address provided via contact forms, inquiries, or phone consultations.
• Project Deliverables & Credentials: Brand assets, logos, design briefs, database schemas, hosting credentials, third-party API keys, or content files shared by you for project implementation.
• Billing & Invoicing Data: Corporate name, GSTIN (for Indian clients), billing address, and transaction confirmation records. (Note: We do not store credit/debit card numbers or net-banking passwords; all payments are processed through secure, RBI-authorized third-party payment gateways).

B. Automatically Collected Technical Data

• Device & Network Information: IP address, browser type and version, operating system, referral URLs, language preferences, and device specifications.
• Usage & Navigation Metrics: Pages viewed, session duration, click sequences, and exit paths gathered via privacy-compliant analytics tools to optimize server performance and user experience.

3. Purpose & Legal Basis of Data Processing

We process collected data exclusively for lawful business operations, including:

1. Service Execution: Scoping, architecting, designing, developing, testing, and deploying custom websites, web portals, and mobile applications requested by you.
2. Client Communication & Support: Responding to inquiries, sending milestone updates, scheduling design reviews, and providing 24/7 technical assistance.
3. Contractual Compliance & Invoicing: Generating tax invoices, tracking milestones, and maintaining verifiable commercial accounting records.
4. Platform Security & Threat Mitigation: Monitoring server security, preventing DDoS attacks, mitigating unauthorized access, and maintaining server stability.

4. Client Confidentiality & Non-Disclosure (NDA)

We treat all client business ideas, proprietary software code, database architecture, unpublished content, and server credentials with the strictest confidentiality. Wordsmith Creations enforces mandatory internal Non-Disclosure Agreements across all employees, developers, and contractors. Your project files and business logic will never be reused, reverse-engineered, or shared with third parties without your prior written authorization.

5. Absolute Non-Sale of Data

We never sell, rent, lease, or monetize your personal or commercial data to third-party data brokers, advertisers, or telemarketers under any circumstances. Information is only disclosed to vetted technology infrastructure partners (e.g., cloud hosting facilities, transactional email relays) solely to execute your project under strict confidentiality controls.

6. Data Security & Storage Architecture

We implement enterprise-grade technical and organizational security controls to protect your data from loss, unauthorized alteration, disclosure, or interception:

• 256-bit SSL/TLS end-to-end encryption across all web traffic.
• Strict role-based access controls (RBAC) ensuring only authorized project developers access deployment environments.
• Encrypted server backups with automated routine integrity checks.
• Immediate secure destruction or return of client hosting credentials upon project sign-off and deployment.

7. Cookies & Tracking Technologies

Our website utilizes minimal essential cookies required for session management, security tokens, and aggregate analytics. You maintain complete control over cookies through your browser settings. Disabling cookies will not restrict your ability to browse our website or request services.

8. Your Legal Rights

Under applicable data privacy regulations, you possess the right to:

• Access & Review: Request a copy of the personal information we hold regarding you.
• Rectification: Request correction of inaccurate, outdated, or incomplete data.
• Erasure & Data Portability: Request permanent deletion of non-contractual personal data from our active marketing databases.
• Consent Withdrawal: Opt-out of marketing communications at any point by emailing our support team.

9. Grievance Officer & Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or wish to exercise your data rights, please contact our designated Grievance & Compliance team: