Privacy Policy

This policy explains what personal data Gavan Technology Private Limited ("we", "us") collects through this website, why we collect it, and what rights you have over it. It covers this website only — data we process on behalf of a client under a services agreement is governed by that agreement and, where applicable, a separate data processing addendum.

What we collect

Information you give us. When you submit the contact form we collect your name, email address, and — if you choose to provide them — your phone number, organisation, area of interest, indicative budget, and the contents of your message. When you apply for a role we collect your name, email address, and any phone number, links, CV and covering note you submit.

Information collected automatically. Our hosting provider records standard server logs, including IP address, browser type and the pages requested. These are used to operate and secure the site.

Cookies. This website sets cookies only where they are necessary for it to function. If you sign in to our administration panel, an authentication cookie is set to keep you signed in. We do not use advertising or cross-site tracking cookies on this website.

Why we use it

• To respond to your enquiry and, where relevant, to discuss and deliver services
• To assess your application if you apply for a role with us
• To operate, secure and improve this website
• To meet legal, accounting and regulatory obligations

We do not sell personal data, and we do not use the information you submit here to send marketing unrelated to your enquiry.

Legal basis

Where the GDPR or a comparable framework applies, we rely on legitimate interests (responding to enquiries, recruitment, site security), the steps necessary prior to entering a contract, and consent where you have given it. Where India's Digital Personal Data Protection Act applies, we process personal data for the lawful purpose for which you provided it.

How long we keep it

• Enquiries — retained for up to 24 months from your last contact with us, then deleted
• Applications — retained for up to 12 months, so we can consider you for later openings, unless you ask us to remove them sooner
• Server logs — retained for a short operational period by our hosting provider

Who processes it

We use a small number of service providers to run this site, each acting on our instructions:

• Vercel — website hosting and content delivery
• Supabase — database and file storage for submissions
• Resend — notification email when a form is submitted

We do not otherwise disclose your information, except where required by law or to establish or defend a legal claim.

Security

Submissions are stored in a database protected by row-level access rules, and uploaded CVs are held in a private storage bucket that is not publicly readable. Access is limited to the members of our team who need it. No system is perfectly secure, but we treat this data as confidential and design accordingly.

Your rights

You may ask us to give you a copy of the personal data we hold about you, correct it if it is wrong, delete it, or restrict how we use it. You may also object to processing based on legitimate interests, and withdraw consent where you have given it.

To exercise any of these rights, write to hello@gavantechnology.in. We will respond within the period required by the applicable law, and in any case as promptly as we reasonably can.

Children

This website is directed at organisations and professionals. We do not knowingly collect personal data from children.

Changes

If we change this policy we will update the date at the top of this page. Material changes will be highlighted on the site.

Contact

Questions about this policy, or about how we handle your data, should go to hello@gavantechnology.in.