Privacy Policy

1. Overview

Kutunova Labs, operating as Dhruvid, is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, who we share it with, and what rights you have. It applies to all services offered through dhruvid.com and related platforms.

We process personal data in accordance with the Information Technology Act, 2000 (India), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and, where applicable to data subjects in the European Economic Area, the principles of the General Data Protection Regulation (GDPR).

2. Data We Collect

Account and Identity Data

When you register or purchase Services, we collect your name, email address, phone number, billing address, and company name (if applicable). This is necessary to create and manage your account and to deliver Services.

Payment Data

Payment transactions are processed through secure third-party payment processors. We do not store full credit or debit card numbers on our servers. We retain billing records including transaction IDs, amounts, dates, and invoices as required for accounting and GST compliance.

Technical and Usage Data

We automatically collect certain technical information when you use our services, including: IP address, browser type and version, operating system, pages visited on our website, referring URLs, and timestamps. This data is used for security monitoring, abuse prevention, and service improvement.

Support and Communications Data

When you contact us for support, billing enquiries, or other communication, we retain records of that correspondence including emails and support tickets.

Hosting Content

Files, databases, emails, and other data you host on our platform are stored on our servers. We do not access or process this data except where necessary to deliver Services, perform maintenance, respond to support requests, or comply with legal obligations.

3. How We Use Your Data

We use the data we collect for the following purposes:

• Service delivery — provisioning, managing, and maintaining your hosting account and associated services.
• Billing and invoicing — processing payments, issuing GST-compliant invoices, and managing renewals.
• Communications — sending service-related notifications (account creation, renewal reminders, maintenance alerts, security notices). These are not optional as they are necessary for service delivery.
• Security and fraud prevention — monitoring for abuse, detecting fraudulent activity, and protecting our infrastructure and other clients.
• Legal compliance — fulfilling our obligations under applicable Indian law, including tax, anti-money-laundering, and law enforcement requirements.
• Service improvement — analysing usage patterns to improve our platform (using aggregated, non-identifiable data where possible).
• Marketing communications — sending you information about our services, promotions, and updates, where you have consented or where permitted by applicable law. You may opt out at any time.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract performance — processing necessary to provide the Services you have purchased.
• Legal obligation — processing required by Indian law (e.g., tax records, law enforcement requests).
• Legitimate interests — security monitoring, fraud prevention, service improvement, and business operations, where these interests are not overridden by your rights.
• Consent — for optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data to third parties for marketing purposes. We share data only in the following circumstances:

• Service providers — payment processors, infrastructure providers, email delivery services, and other vendors who process data on our behalf under appropriate data processing agreements and confidentiality obligations.
• Domain registrars and registries — where you register a domain, your registrant details are shared with the relevant registrar and registry as required by ICANN policy and applicable registry rules.
• Legal and regulatory authorities — where required by applicable law, court order, or legitimate government request. We will notify you where legally permitted to do so.
• Business transfers — in the event of a merger, acquisition, or sale of all or substantially all of our assets, your data may be transferred as part of that transaction. We will notify you in advance.

6. Cookies and Tracking

Our website uses cookies and similar technologies. We use:

• Essential cookies — necessary for the operation of our website and Client Area (session management, authentication). These cannot be disabled without affecting core functionality.
• Functional cookies — remembering your preferences and settings.
• Analytics cookies — understanding how visitors interact with our website (using aggregated, anonymous data).

You can manage or disable non-essential cookies through your browser settings. Disabling essential cookies may prevent you from accessing the Client Area.

7. Data Retention

We retain your personal data for as long as your account is active and for a reasonable period thereafter to allow for any disputes, legal claims, or regulatory requirements. Specifically:

• Account data — retained for the duration of the account and for up to 3 years after account closure.
• Billing and tax records — retained as required by Indian tax law, typically 7 years.
• Server logs — typically retained for 90 days for security and abuse monitoring purposes.
• Support records — retained for up to 3 years after the last interaction.

When data is no longer required, it is securely deleted or anonymised.

8. International Data Transfers

Our hosting infrastructure is located in the EU. Your account data may be processed and stored on servers in the EU and, for certain operational functions (such as billing and support), in India. By using our Services, you consent to your data being transferred to and processed in these locations.

Where data is transferred from the EEA to countries not deemed adequate by the European Commission, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your data, subject to our legal retention obligations.
• Portability — request your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests or for direct marketing.
• Restriction — request that we restrict processing of your data in certain circumstances.

To exercise any of these rights, contact us at support@dhruvid.com. We will respond within 30 days. Please note that some requests may affect your ability to use our Services, and we may need to verify your identity before processing a request.

10. Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include SSL/TLS encryption for data in transit, access controls and authentication requirements for internal systems, and regular security reviews.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant regulatory authority as required by applicable law.

11. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you become aware that a minor has provided us with personal data without appropriate consent, please contact us so we can take appropriate steps.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through a prominent notice on our website before the changes take effect. The date at the top of this page reflects the most recent update. Your continued use of our Services after the effective date constitutes acceptance of the updated policy.

13. Contact and Complaints

For privacy-related questions, requests, or complaints, contact us at support@dhruvid.com. We aim to resolve all queries promptly and in good faith. If you are unsatisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.