Privacy policy — Bolteryx

This policy explains what Bolteryx Technologies collects when you use bolteryx.com or engage us for work, why we collect it, and what rights you have over it. It is written to be read, not to be survived.

What we collect

Details you send us directly: your name, email, phone number, company and the contents of any brief, message or job application you submit.
Operational records created while we work together: project scope, correspondence, invoices and delivery artefacts.
Basic technical data: IP address, browser type and pages visited, used to keep the site secure and to understand which pages are useful.
A single session cookie, and analytics cookies only where analytics has been enabled and you have accepted them.

Why we collect it

To respond to your enquiry and prepare a scoped proposal.
To deliver, invoice and support work you have engaged us for.
To meet legal and accounting obligations.
To protect the site against abuse — rate limiting and audit logging depend on it.

What we never do

We do not sell, rent or trade your personal information to anyone.
We do not send marketing email unless you asked for it, and every such email can be unsubscribed in one click.
We do not use your project data to train third-party models.

How long we keep it

Enquiries that do not become projects: 24 months, then deleted.
Project records: seven years, as required for tax and contractual purposes.
Job applications: 12 months unless you ask us to keep them longer.
Server and audit logs: 30 days.

Your rights

You can ask for a copy of everything we hold about you.
You can ask us to correct anything inaccurate.
You can ask us to delete your data, subject to records we are legally required to retain.
To exercise any of these, write to [email protected]. We respond within 30 days.

Security

Data is encrypted in transit. Access to client records is restricted to the people working on that engagement and every access is logged.
Our admin panel uses two-stage authentication with per-session URLs, so there is no fixed administrative endpoint to attack.
If a breach ever affects your data, we will tell you and the relevant authority within 72 hours of becoming aware of it.

Questions about this document? Write to [email protected].
Bolteryx Studio
2nd Floor, Indiranagar
Bengaluru 560038, India