Privacy Policy

1. Introduction and Scope

Botly Technologies Private Limited (“Botly”, “Company”, “we”, “us”, or “our”) is committed to protecting the privacy and personal data of our website visitors, clients, software subscribers, and business partners. This Privacy Policy outlines our practices regarding the collection, processing, storage, disclosure, and safeguarding of personal data collected through our website (https://botly.co.in), business inquiry forms, quotations, software demonstrations, and related corporate services.

This policy is formulated in alignment with applicable Indian laws, including the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023 (“DPDPA 2023”), along with applicable rules in force.

2. Information We Collect

We collect personal and corporate data exclusively for legitimate business purposes when you interact with our website or services:

• Contact and Inquiry Information: Full name, corporate email address, organization name, direct contact phone number, inquiry subject, and project descriptions submitted through our Contact Us and Get a Quote forms.
• Client and Commercial Records: Billing addresses, corporate registration details (GSTIN where provided), authorized representative details, transaction references, and payment status records when entering into software development or subscription contracts.
• Technical and Usage Data: Standard server access logs, IP addresses (for rate-limiting and security abuse detection), browser user-agent strings, referring URLs, and session timestamps.

3. Cookies and Technical Tracking

Our website utilizes essential technical cookies required for website security, session state, and navigation stability. We do not engage in unauthorized cross-site tracking or sale of personal browsing histories to advertising networks. You can configure your browser settings to reject non-essential cookies without impeding access to our corporate information pages.

4. Purposes of Processing Your Data

We process personal and corporate data under the following legitimate grounds:

• To evaluate, respond to, and fulfill project scoping inquiries and quotation requests.
• To negotiate, execute, and service enterprise software development contracts and SaaS subscriptions.
• To generate legally compliant tax invoices, maintain corporate accounts, and verify legitimate payment receipts.
• To protect our infrastructure against DDoS attacks, automated form spam, rate abuse, and unauthorized intrusions.
• To communicate critical software operational notices, scheduled maintenance windows, and security updates.

5. Service Providers and Third-Party Disclosures

We do not sell, rent, or trade your personal data. We disclose personal information solely to vetted technical service providers operating under strict confidentiality obligations:

• Cloud and Server Infrastructure: Reputable cloud hosting and database providers maintaining physical data centers in compliant jurisdictions.
• Authorized Payment Gateways: When you pay for software services or subscriptions online, transaction metadata is exchanged with authorized payment processors under end-to-end encryption.
• Legal and Regulatory Authorities: We may disclose data if required under Indian law, court order, or official governmental directive.

6. Data Retention Periods

We retain personal and corporate inquiry data only as long as necessary to satisfy the purpose for which it was collected. Commercial contracts, tax invoices, and payment reconciliation records are retained for the statutory period mandated under Indian taxation and corporate compliance laws (generally up to 8 years). Unconverted sales inquiries are purged periodically once active dialogue concludes.

7. Information Security Safeguards

Botly Technologies Private Limited implements robust organizational and technical safeguards, including TLS 1.3 transport encryption, parameterized queries, rate limiting, least-privilege administrative access, and strict environment variable segregation to prevent unauthorized disclosure, tampering, or loss of personal data.

8. User Rights and Grievance Procedure

Under applicable Indian privacy frameworks, data principals maintain the right to access summaries of personal data processed, request correction of inaccurate data, and request erasure of personal data that is no longer required for statutory or contractual fulfillment.

To exercise your rights or register a privacy grievance, please submit a formal written request to our designated grievance contact:

9. Children's Data

Our commercial website and enterprise software services are directed to businesses, educational institutions, and adult professionals. While our School ERP product is utilized by schools to manage institutional records under lawful educational authority, we do not knowingly solicit or collect personal information from minors via our public website.

10. Policy Updates

We may revise this Privacy Policy periodically to reflect technological changes, updated statutory notifications, or modifications to our software services. The revised policy will be posted on this URL with an updated effective date. Continued engagement with our website constitutes acceptance of the modified terms.