Legal

Privacy policy

Last updated: 27 July 2026

This policy explains what personal data DigiNhance collects, why we collect it, who else touches it, how long we keep it, and what you can ask us to do with it. It covers the website at diginhance.com, our contact form, and the products and services we sell. Individual apps we publish may add their own policy, and where they do, that policy applies on top of this one for that app.

1. Who is responsible for your data

DigiNhance, a sole proprietorship operated by Durvesh Naik in India, is the data controller for the personal data described here.

Email: hello@diginhance.com
Phone: +91 90299 50835
Address: 204, Mangalmurti CHS, Plot C-21, Sector 9, Airoli, Navi Mumbai, Maharashtra 400708, India

2. What we collect

Information you give us

• Contact form and email: your name, email address, and whatever you write in the message.
• Account details, where a product has accounts: name, email address, password in hashed form, and your settings.
• Billing information: billing name, billing address, tax identifiers where required, the plan you bought, and a record of your payments and invoices.
• Project material: anything you send us during an engagement, such as briefs, assets, credentials, and feedback.
• Support messages and the correspondence that follows them.

Information collected automatically

• Server and security logs from our hosting provider: IP address, request time, page requested, referring page, user agent, and rough location derived from the IP. These exist to serve the site, block abuse, and diagnose faults.
• Product usage data, where you use one of our applications: feature usage, error reports, and diagnostics, so we can fix what is broken.

What we do not collect

• We do not run advertising trackers, marketing pixels, or third-party analytics on diginhance.com.
• We do not buy personal data or scrape it to build profiles.
• We do not collect sensitive categories of data such as health, biometric, religious, or political information, and please do not send them to us.
• We never receive or store your full card number, expiry, or CVV.

3. Payment data

Payments are processed by regulated payment providers, including Stripe. Your card details go directly to the processor over an encrypted connection and are handled under their PCI DSS certified environment. We receive only what we need to run the account and meet our tax and accounting duties: the last four digits, the card brand, the country, the amount, the currency, the date, and whether the payment succeeded. We never have access to the full card number or the security code. Where a purchase is made through the Apple App Store, Apple is the merchant of record and Apple's privacy policy governs that transaction.

4. Why we use your data, and on what legal basis

• To reply to you when you contact us. Basis: your consent, and our legitimate interest in answering enquiries.
• To deliver what you bought, provision access, and provide support. Basis: performance of our contract with you.
• To take payment, issue invoices, and handle refunds and disputes. Basis: contract, and legal obligation for tax records.
• To keep the service secure, prevent fraud and abuse, and debug faults. Basis: legitimate interest.
• To send service messages such as renewal notices, price changes, security notices, and policy updates. Basis: contract and legitimate interest. These are not marketing and you cannot opt out of them while you hold an account.
• To send occasional updates about our work, only if you asked for them. Basis: consent, withdrawable at any time.
• To meet legal obligations and to establish or defend legal claims. Basis: legal obligation and legitimate interest.

We do not use your personal data to train AI models, and we do not sell or rent it to anyone.

5. Who we share it with

We share personal data only with service providers who help us run the business, and only with what they need to do their job. Each is bound by contract to protect it.

• Cloudflare for hosting, content delivery, and security. Handles request logs and IP addresses.
• Stripe for payment processing, billing, and fraud prevention.
• Resend for transactional email delivery, including contact form messages.
• Supabase for application databases, where a product uses one.
• AI model providers, where an AI feature you use needs a request sent to them to return a result. We send the minimum required, and we do not send them your billing data.
• Our accountant and professional advisers, for bookkeeping, tax, and legal advice.

We may also disclose data if the law requires it, to comply with a valid legal request, to enforce our terms, or to protect the rights and safety of people and property. If the business is ever sold or merged, data may transfer to the buyer, and we will tell you before that happens.

6. Where your data goes

We operate from India, and our providers run infrastructure in several countries, so your data may be processed outside the country you live in, including in the United States and the European Union. Where data leaves a region that restricts transfers, we rely on the provider's approved transfer mechanism, such as the European Commission's standard contractual clauses, and on their own security commitments.

7. Cookies

The DigiNhance marketing website does not set advertising or analytics cookies, and there is no cookie banner because there is nothing to consent to. Products that require you to sign in use strictly necessary cookies or local storage to keep you logged in and to protect the session. Our hosting provider may set a cookie for security and bot filtering. You can block or clear cookies in your browser, though sign-in will stop working if you block the necessary ones. We do not respond to browser Do Not Track signals, because there is no tracking here to switch off.

8. How long we keep it

• Contact form and email enquiries: up to 24 months from your last message, then deleted.
• Account data: for as long as the account is active, then up to 90 days after closure so you can change your mind, then deleted or anonymised.
• Invoices, payment records, and tax documents: 8 years, because Indian tax law requires it.
• Server and security logs: typically 30 to 90 days.
• Project files: for the life of the engagement plus 12 months, unless you ask us to remove them sooner.

9. How we protect it

Data is encrypted in transit with TLS. Access is limited to the people who need it, protected by strong authentication. Secrets and API keys live in managed secret stores and never in our source code. We patch dependencies, keep the number of systems holding personal data small on purpose, and review access as things change. No system is perfectly secure, so if a breach ever affects your data we will notify you and the relevant authority without undue delay.

10. Your rights

Wherever you live, you can ask us to:

• Access the personal data we hold about you, and get a copy.
• Correct anything inaccurate or incomplete.
• Delete your data, where we do not have to keep it for legal reasons.
• Restrict or object to a use of your data, including any use based on legitimate interest.
• Port your data to another provider in a machine-readable format.
• Withdraw consent at any time, without affecting what we did before you withdrew it.
• Nominate someone to exercise these rights for you if you cannot, as provided under India's Digital Personal Data Protection Act.

Email hello@diginhance.com with the subject line "Data request". We reply within 30 days and we do not charge for it. We may need to verify who you are first, so that nobody else can request your data.

11. Complaints

If you are unhappy with how we handled your data, write to us first at the address above and we will try to fix it. You also have the right to complain to a regulator: the Data Protection Board of India under the Digital Personal Data Protection Act 2023, or your local supervisory authority if you are in the European Economic Area or the United Kingdom.

12. Children

Our services are for adults and are not directed at children under 18. We do not knowingly collect data from children. If you believe a child has given us personal data, tell us and we will delete it.

13. Changes to this policy

We will update this page as our products and the law change, and we will change the date at the top. For material changes we will tell active customers by email. Please check back now and then.

14. Contact us

For anything about privacy or your data, including grievances:

Durvesh Naik, DigiNhance
Email: hello@diginhance.com
Phone: +91 90299 50835
Address: 204, Mangalmurti CHS, Plot C-21, Sector 9, Airoli, Navi Mumbai, Maharashtra 400708, India
Contact page: diginhance.com/contact