PRIVACY
POLICY.
Last Updated: September 2026 | Effective Date: September 2026
1. Introduction and Scope
Janu Bhai Consultancy (“we”, “our”, or “us”) is an independent consultancy firm with its principal place of business at B-80, Ground Floor, Street 8, Ghaffar Manzil, Jamia Nagar, Okhla, New Delhi, 110025, India. We provide technology, brand architecture, web development, research, and business automation services through our website (https://janubhai.space).
This Privacy Policy is published in accordance with the provisions of Rule 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules) under the Information Technology Act, 2000, and adheres to the principles of the Digital Personal Data Protection Act, 2023 (DPDP Act).
2. Information We Collect
We collect personal and business information that you voluntarily submit to us via our contact forms, project briefs, emails, or phone conversations. This includes:
- Identity Data: Your full name, job title, and company or organisation name.
- Contact Data: Your business email address, personal email address, phone number, and physical billing address.
- Project Data: Information regarding your commercial requirements, project goals, estimated budgets, and website URLs.
- Technical Data: Internet protocol (IP) address, browser type, device identifiers, and timestamp metadata recorded automatically for anti-spam security.
- Financial Transaction Data: When invoices are settled through authorized Indian payment gateways, transaction identifiers and settlement statuses are logged. We do not store credit card, debit card, UPI PIN, or net banking credentials on our servers.
3. Purpose of Processing and Data Use
We use the information collected strictly for legitimate business purposes:
- To evaluate incoming client project briefs and provide detailed technical proposals.
- To execute consultancy agreements, deliver codebases, design assets, and automated workflows.
- To generate legal tax invoices (GST compliant where applicable) and process commercial transactions.
- To detect, prevent, and protect against fraudulent submissions, automated bot spam, and security vulnerabilities.
- To comply with statutory legal requirements under applicable Indian legislation.
4. Third-Party Infrastructure and Security Practices
We store project inquiries and data in Google Cloud Firebase (Cloud Firestore) using least-privilege security rules and server-side encryption at rest. We also utilize Vercel for frontend hosting. Payment processing is facilitated through authorized, RBI-compliant Indian payment aggregators operating under PCI-DSS Level 1 certification.
We implement comprehensive administrative, physical, and technical safeguards to prevent unauthorized access, alteration, disclosure, or destruction of personal records.
5. Non-Disclosure and Data Sharing
We never sell, rent, or trade your personal information or commercial ideas to third-party advertisers, data brokers, or marketing syndicates. Data is only disclosed when mandated by law enforcement or competent Indian courts having proper jurisdiction.
6. Your Rights under Indian Law
Under the Information Technology Act and the Digital Personal Data Protection Act, you have the right to request access to the personal data we hold about you, request rectification of inaccurate data, or request deletion of historical records once all contractual and tax retention mandates are fulfilled.
7. Grievance Redressal Officer
In compliance with the Information Technology Act, 2000 and Rule 5(9) of the SPDI Rules, 2011, the name and contact details of our designated Grievance Officer are set forth below:
All inquiries and complaints will be acknowledged within 24 hours and addressed within 15 business days as stipulated by Indian consumer protection guidelines.