Privacy Policy

Who we are

PairStack is a freelance software studio operating from India. For the purposes of the Digital Personal Data Protection Act, 2023, PairStack is the Data Fiduciary for the personal data described below, and you are the Data Principal.

This policy is published under the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and is written to meet the notice requirements of the Digital Personal Data Protection Act, 2023.

You can reach us at pairstack@gmail.com or +91-9064187639.

Information you give us

The contact form on this site asks for the following. Only the first three are required:

• Name - so we know who we are replying to.
• Phone number - our primary way of getting back to you.
• Project type - which of our services your enquiry is about.
• Email address (optional) - used to send you a confirmation and to reply in writing.
• Company name (optional) - context for the enquiry.
• Message (optional) - whatever you choose to tell us about the work.

What happens to a contact enquiry

A contact enquiry is sent to us by email and nothing more. It is not written to any database on this website, and this website keeps no record of it after the email is sent. The information then lives in our email inbox for as long as we keep that correspondence, in the same way an email you sent us directly would.

If you provide an email address, we also send you a confirmation that your enquiry arrived. If you do not, no confirmation is sent and we contact you on the phone number you gave us.

Reviews you choose to submit

If you submit a review through the reviews section, we store the name you enter, an optional role or company line, a star rating, and the text of your review, along with the date it was submitted.

A review is not visible to anyone until a person at PairStack approves it. Once approved, the name, role, rating, and review text are published publicly on this website. Do not put anything in a review that you would not want published, and do not include someone else's personal information.

If you want a published review taken down, email us and we will remove it.

Information collected automatically

Two things are collected without you typing them in:

• IP address, for abuse prevention. When you submit the contact or review form, your IP address is held in the server's memory to limit how many submissions can come from one address in a ten-minute window. It is not written to a database and it is discarded when the server restarts. Our web server also keeps standard access logs, as nearly all web servers do.
• Usage data, through Google Analytics. See the cookies section below.

Cookies and Google Analytics

This website uses Google Analytics (measurement ID G-PMTBXEQ6P4) to understand how many people visit, which pages they read, and roughly where they come from. Google Analytics sets cookies in your browser and sends usage data to Google, which acts as a processor for this purpose. We use it to improve the site, not to identify you personally.

You can stop this at any time: block cookies in your browser settings, use your browser's private mode, or install Google's official opt-out add-on at tools.google.com/dlpage/gaoptout. Blocking it does not affect your ability to use any part of this site, including the contact form.

Apart from Google Analytics, this website sets no cookies of its own. We do not use advertising pixels, retargeting, or cross-site tracking.

Why we use your information

We use what you give us only for the reason you gave it:

• To reply to your enquiry and discuss whether we are a fit for your project.
• To send a confirmation that your enquiry reached us, if you gave an email address.
• To publish a review, if you submitted one and we approved it.
• To stop automated spam and abuse of the forms.
• To understand aggregate site usage through analytics.

Your consent

Submitting the contact form or a review is how you consent to us using that information for the purposes above. You are not required to give us anything - you can simply email or call us instead.

You can withdraw your consent at any time by writing to pairstack@gmail.com. We will stop using your information for these purposes and delete it, except where we are required to keep something by law.

Who else sees your information

We do not sell, rent, or trade personal information. It reaches only these parties, and only because the site cannot work without them:

• Google - delivers our email through Gmail, and provides Google Analytics. Your enquiry passes through Gmail to reach our inbox.
• Amazon Web Services - hosts this website and the server it runs on.
• Anyone we are legally required to disclose to, such as a lawful order from a court or government authority under Indian law.

How long we keep it

• Contact enquiries - kept in our email inbox as business correspondence. Ask us and we will delete the thread.
• Reviews - kept while published. Rejected reviews are marked as rejected and are never shown.
• IP addresses used for rate limiting - held in memory for ten minutes and lost when the server restarts.
• Analytics data - retained by Google under its own retention settings.

How we protect it

The site is served only over HTTPS, so what you type into a form is encrypted in transit. Email credentials and other secrets are held in server environment variables, never in the website's code or its public repository. Access to the server and to the inbox is limited to the two founders. Review moderation links are cryptographically signed so they cannot be forged.

No system is perfectly secure, and we do not claim otherwise. We follow the reasonable security practices expected under the Information Technology Act, 2000 and its 2011 Rules, and if a breach ever affects your data we will act on it and notify you and the authorities as the law requires.

Your rights

Under the Digital Personal Data Protection Act, 2023, you can ask us to:

• Tell you what personal data of yours we hold and what we have done with it.
• Correct anything inaccurate, or complete anything incomplete.
• Erase your personal data where we no longer need it for the purpose you gave it.
• Withdraw a consent you previously gave.
• Nominate someone to exercise these rights on your behalf if you die or become incapacitated.
• Raise a grievance, which we will address as set out below.

Children

This website is meant for businesses and professionals. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us information, write to us and we will delete it.

Changes to this policy

If we change what we collect or how we use it, we will update this page and change the date at the top. Material changes to how we handle data already collected will be notified to anyone affected where we are able to reach them.

Grievances and contact

If you have a question or complaint about how your information has been handled, write to us and we will respond. We aim to acknowledge within 48 hours and resolve within 30 days, as expected under Indian law.