Legal Documentation

Privacy Policy

Zibmate Private Limited · Effective Date: 30 June 2025

This Privacy Policy explains how Zibmate Private Limited collects, uses, stores, and protects your personal information when you use our website, platform, or engage our services. Please read it carefully before sharing your data with us.

1. Who We Are

Zibmate Private Limited ("Zibmate", "we", "us", or "our") is a software development and technology services company registered in India. We build and operate digital products — including Zibmate Studio (our software development division) and Zibmate (our PG rental platform) — and provide custom web development, SaaS, and AI automation services to clients.

For the purposes of data protection law, Zibmate Private Limited is the data controller in respect of personal data we process about you.

2. What Information We Collect

2.1 Information You Provide Directly

Your full name, email address, phone number, and company name when you submit a contact or project enquiry form.
Project requirements, budget, timeline, and other details you share when onboarding as a client.
Billing and payment information when engaging paid services (processed via secure third-party payment gateways).
Communications you send to us by email, chat, or any other channel.

2.2 Information We Collect Automatically

Log data: IP address, browser type, referring URL, pages visited, and timestamps.
Device information: operating system, screen resolution, and device identifiers.
Cookies and similar tracking technologies (see Section 7).

2.3 Information From Third Parties

Google OAuth data: display name, email, and profile picture if you sign in via Google on any of our platforms.
Publicly available business information for corporate due diligence purposes.

3. How We Use Your Information

We process your telemetry and profile parameters exclusively for the following operations:

→Respond to your project enquiries and provide quotes.

→Deliver contracted development, testing, and deployment workflows.

→Manage accounts and authenticate identities on our platforms.

→Process payments and maintain required corporate financial logs.

→Send service alerts (project checkpoints, invoices, support updates).

→Dispatch context-aware marketing updates where consented.

→Refine our web architectures and product models through telemetry.

→Uphold statutory liabilities, accounting frameworks, and laws.

→Identify and mitigate vector attacks, fraud, or code vulnerability.

4. Legal Basis for Processing

Contract performance

Processing is strictly necessary to fulfil a contract with you or execute engineering operations prior to execution.

Legitimate interests

Improving application metrics, preventing software vulnerabilities, and optimizing corporate structures.

Legal obligation

Compliance with applicable Indian statutes, including the complete compliance standard under the Information Technology Act, 2000.

Consent

Explicit, clear opt-ins provided by you for localized telemetry, analytical dependencies, and outbound newsletters.

6. Data Retention

We maintain database states only for durations aligned with legal record-keeping requirements in India:

Retention Bracket

Data Classification Type

7 Years

Client core project archives and billing histories (statutory legal minimum).

24 Months

Form enquiries and incoming marketing messages (or until erasure request).

Immediate

Marketing listings immediately dropped upon explicit notification or un-subscription.

12 Months

Server system diagnostic parameters and network security telemetry maps.

7. Cookies

Our systems process active cookies and tracking payloads to achieve the following mechanics:

Maintain session permanence and authentication tokens.
Evaluate general framework traffic using server-side analytics.
Deploy cross-site security mitigation systems (including CSRF validation tokens).

Technical Notice: Storage blocks can be modified directly in your browser. Restricting core storage states might limit access to secure elements of the architecture. We do not integrate advertising networks or tracking vectors into our platforms.

8. Data Security

We maintain strict technical safety standards to ensure secure data processing states:

SSL/TLS Layers

Forced transport layer protection for all application states in transit.

Database Encryption

Cryptographic salting and parsing models for database parameters.

JWT Frameworks

Token authentication patterns isolated within secure HttpOnly cookies.

Access Partitioning

Role-based verification logic restricting database controls internally.

While we actively implement industry-standard threat countermeasures across our systems, no data exchange platform can offer absolute security guarantees.

9. Your Rights

You retain complete legal control over your personal data profiles. This includes the right to:

· Request clear visibility and extracts of your personal records.

· Amend outdated profiles or missing data fields.

· Request complete data erasure across all active databases.

· Restrict processing vectors or object to algorithmic analytics profiling.

· Revoke active consent agreements immediately without system penalties.

· Request structured porting maps of your files in machine-readable states.

To submit a structural request, contact us directly at legal@zibmate.com. We process and confirm all valid requests within 30 days.

10. Children's Privacy

Our services are explicitly structured for individuals aged 18 and older. We do not collect information from minors. If you believe child account identifiers have reached our storage networks, notify our teams immediately to initiate erasure protocols.

11. Changes to This Policy

We update this framework to reflect new system specifications or legal adjustments. Material changes will be highlighted via site dashboard disclosures or direct email notices. Continued platform interaction after updates implies consent to the revised terms.

12. Contact Us

Zibmate Private Limited

CIN : U55100HR2025PTC139378

Email: zibmate@gmail.com

Address: India