International Privacy Policy

1. Introduction & Commitment

BlazeByte Studio ("we," "our," or "us"), headquartered in Coimbatore, Tamil Nadu, India, provides global web development, digital marketing, artificial intelligence, and custom software application services to international clients across the United States, United Kingdom, Canada, Australia, UAE, Europe, and worldwide. We are committed to protecting the privacy, confidentiality, and integrity of your personal information in accordance with international standards, including the EU/UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and the Indian Digital Personal Data Protection (DPDP) Act.

2. Information We Collect

We collect information only to the extent necessary to provide digital services, prepare commercial proposals, execute development milestones, and communicate with you:

• Direct Inquiries: Full name, business email address, company name, country of operation, phone/WhatsApp number, project scope descriptions, and estimated budget selections submitted through our contact forms.
• Commercial & Billing Data: Billing contact name, company tax/VAT/GST identification, and transaction identifiers. We do not store or process credit card numbers directly; all payment tokenization is handled securely by Stripe and Razorpay.
• Technical Telemetry: Anonymized IP addresses, browser user-agent strings, device categories, referring URLs, and page interaction events recorded via privacy-configured Google Analytics 4.

3. AI Solutions & Zero-Retention Policy

When designing and delivering custom AI chatbots, Retrieval-Augmented Generation (RAG) knowledge retrieval engines, or workflow automation bots:
• Zero Model Training: Client proprietary documentation, database records, and customer chat messages are transmitted solely via enterprise-tier APIs configured with explicit zero-data-retention terms.
• Data Isolation: Client vector embeddings and business facts are stored in private, cryptographically segregated instances that are never pooled or shared.

4. Lawful Basis for Processing (GDPR)

We process your personal data under the following legal bases:
• Contractual Performance: Processing required to prepare scopes of work, execute agreements, deliver software sprints, and complete project milestones.
• Legitimate Interests: Operating and improving our international web platforms, preventing fraud, and ensuring cybersecurity.
• Consent: Explicit consent given when submitting forms or requesting marketing consultations.

5. Third-Party Service Processors

We partner exclusively with reputable, security-certified international data processors:

• Payment Gateways: Stripe, Inc. (USA) and Razorpay Software Private Limited (India) — PCI-DSS Level 1 compliant.
• Hosting & Edge Infrastructure: Cloudflare, Inc. (Edge CDN, SSL, DDoS defense) and Vercel/DigitalOcean (Application hosting).
• Analytics: Google LLC (Google Analytics 4 configured with IP anonymization).

6. International Data Transfers

Because BlazeByte Studio delivers services internationally, your data may be processed in India and stored across global cloud providers located in the United States and the European Union. We apply Standard Contractual Clauses (SCCs) and rigorous technical encryption safeguards (TLS 1.3 in transit and AES-256 at rest) to protect all cross-border transmissions.

7. Your Rights (GDPR & CCPA)

As an international client or website visitor, you hold the following rights:

• Right of Access & Portability: Request a copy of the personal data we maintain about you.
• Right to Rectification: Request correction of inaccurate or incomplete records.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal contact data, subject to legal and accounting retention mandates.
• Right to Restrict or Object: Object to processing of your data for legitimate interest purposes.
• Non-Discrimination: We do not sell personal data, and exercising your privacy rights incurs no adverse impact on service rates.

8. Cookies & Tracking Technologies

Our website uses minimal essential session cookies required for security and navigation, alongside analytical cookies to measure aggregated visitor traffic. You can adjust your browser settings at any time to reject non-essential cookies.

9. Third-Party SDK & Sub-Processor Audit

In compliance with GDPR Article 28 and international security standards, we audit all third-party software development kits (SDKs), content networks, and hosting infrastructure. We do not sell or monetize client data. Below is our verified register of sub-processors:

10. Data Minimization & Retention Guarantee

In accordance with GDPR Article 5(1)(c), we practice strict data minimization: we never collect unneeded biometric data, physical location coordinates, or background device identifiers. Initial technical project inquiries that do not transition into an active commercial project agreement within ninety (90) days are automatically and permanently purged from our systems.

11. Contacting Our Data Privacy Officer

To exercise your privacy rights, submit verification credentials, or contact our appointed Data Protection Officer (DPO):

BlazeByte Studio
Attn: Data Protection Officer (DPO)
Direct Email: blazebytestudio7@gmail.com
Escalation WhatsApp / Phone: +91 7708795342
Headquarters: Coimbatore, Tamil Nadu, India