Privacy Policy

1. Overview

GraamSoft (“GraamSoft”, “we”, “us”) is an IT infrastructure and software services company. We build custom websites, mobile apps, an AI-powered CRM, and provide IT consulting, cloud and cybersecurity services to businesses.

This Privacy Policy covers graamsoft.com (our marketing website) and the enquiry and newsletter forms on it. It describes our own practices as a business — not the practices of every piece of software we build for a client. See Data We Process for Clients for that distinction, and our Terms and Conditions for the terms that apply when you use this website or engage us for services.

2. Information We Collect

We collect information you provide directly, together with limited technical information generated when you use this website, as described below. We do not require you to create an account or log in to browse graamsoft.com.

Contact and enquiry form

When you use the “Get In Touch” contact form, we collect the name, email address, phone number (optional) and message you enter. This is sent, server-side, to our enquiry mailbox so our team can respond to you, and we send you an automatic acknowledgment email confirming we received it.

Newsletter subscription

The “Subscribe” field in the footer collects the email address you enter and sends it, server-side, as a one-off notification email to our team. It does not, by itself, enrol you in an automated mailing list — see Marketing Communications for how we follow up.

Information you send us directly

If you email, call or otherwise contact us directly (for example, to discuss a project), we collect whatever information you choose to share with us in that conversation, such as your contact details and project requirements.

3. Technical Information & Cookies

graamsoft.com does not use cookies, advertising trackers or analytics scripts.

Our web server records standard access logs for each request it handles — for example, the requesting IP address, the page or file requested, the date and time, and the browser/user-agent string. These logs are not combined with your name or email address, and we do not use them to build a profile of you.

Separately, the small server-side service that processes contact-form submissions keeps its own, distinct operational log — by design, limited to event names, status codes and request outcomes, and specifically excluding your name, email address, phone number, message text or IP address. This service also applies a basic bot-filtering step (a hidden field that only automated submissions fill in) and a rate limit on submissions from the same connection, to reduce spam and abuse.

Web-server access logs are rotated daily, with 14 rotated files retained. The system journal used by the contact-form service is configured with a seven-day maximum retention setting. Logs may be removed earlier under storage limits.

Both the contact form and the newsletter form submit directly to our own server; neither calls a third-party service from your browser.

4. How We Use Information

We use the information described above to:

• Respond to your enquiries and messages;
• Discuss, scope, deliver and support the services you ask us about or engage us for;
• Follow up by email if you submitted the newsletter form, as described in Marketing Communications;
• Maintain the security, integrity and reliable operation of our website and forms, including preventing spam and abuse; and
• Meet legal, accounting or regulatory obligations that apply to us, where relevant.

We do not sell your personal information, and we do not use it for automated profiling or targeted advertising.

5. Marketing Communications

The newsletter form sends our team a notification containing your email address; it does not, by itself, enrol you in an automated mailing list. Any requested updates are currently managed manually. To stop receiving marketing updates, email info@graamsoft.com. This does not prevent us from responding to your enquiries or sending necessary service-related communications.

6. How We Share Information

We do not sell or rent your information. We share it only with the service providers that help us run this website and respond to you, and only to the extent needed for that purpose:

• Our hosting provider (Hostinger), which hosts the website and also provides the mailbox and mail-sending service used to deliver contact-form enquiries, acknowledgment emails, and the newsletter form's notification email; and
• Authorities or professional advisers (for example, a court, regulator, tax authority or our lawyers or accountants), where we are required to or it is necessary to establish, exercise or defend a legal claim.

We choose service providers that are reputable and well established, and we limit what we share with each one to what it needs to perform its function for us.

7. Data Retention

We keep information for as long as we reasonably need it for the purpose it was collected, and then we delete or anonymise it. In practice this means:

• Contact enquiries and newsletter-request notifications are stored in our hosted mailbox and managed manually. Retention depends on the enquiry, ongoing relationship and applicable recordkeeping requirements;
• Our web server's access logs and the contact-form service's operational log are kept under the configured settings described in Technical Information & Cookies; and
• Where we have a signed contract with you as a client, records relevant to that engagement (for example invoices) may need to be kept longer to meet accounting, tax or other legal obligations that apply to that record.

We have not set a single fixed retention period that applies to every type of record, because the appropriate period depends on why the information was collected. If you would like to know how long a specific piece of information about you is likely to be kept, contact us using the details in Contact Us.

8. Your Choices and Rights

You can ask us, at any time, to:

• Tell you what information we hold about you;
• Correct information that is inaccurate or out of date;
• Delete information we hold about you (see below); and
• Stop sending you marketing emails, or withdraw any other consent you previously gave us, where our use of your information depends on that consent.

Some of these requests may not be absolute — for example, we may need to keep certain records to meet a legal obligation even after you ask us to delete them, as explained in Data Retention. We will tell you if that applies to your request and explain why.

9. Data Deletion Requests

To ask us to delete information we hold about you from this website — for example, a contact-form enquiry or a newsletter-form submission — email info@graamsoft.com with the subject line “Data Deletion Request”. To help us find the right record, please include the email address or phone number you used when you contacted us or submitted the newsletter form.

To protect your data from being deleted by someone else impersonating you, we may ask you to confirm your identity in a proportionate way — for example, by replying from the email address on file, or confirming a detail you previously gave us. We will never ask you for your password, an access token, or login credentials to verify a deletion request; we do not need them and you should not send them to us.

Once verified, we will delete the information identified in your request, except where we are legally required to keep a specific record (for example, for accounting purposes). We will tell you if an exception like this applies to your request.

This process covers graamsoft.com only. If your request relates to a separate GraamSoft product or a service we provide to a client, it must be handled under that product's or that client engagement's own privacy notice, by the party responsible for it — see Third-Party Platforms and Connected Services. Contact that product or service directly; if you are not sure who that is, email us and we will point you to the right place if we can.

Every request is reviewed and actioned by a person rather than an automated form or callback. We will acknowledge your request and respond as promptly as we reasonably can.

10. Data Security

We take reasonable, practical steps to protect the information this website and its forms handle:

• The website is served only over HTTPS, with HTTP requests automatically redirected to HTTPS, and with HTTP Strict Transport Security (HSTS) enabled;
• We apply a set of browser security headers (including a Content Security Policy, X-Frame-Options and X-Content-Type-Options) to reduce the risk of common web attacks;
• The small server-side service that handles the contact and newsletter forms runs as an unprivileged, dedicated system account, is reachable only through our web server (not directly from the internet), and is designed to log only operational metadata, never your submitted name, email, phone number, message or IP address;
• Credentials and access tokens our systems need (for example, to send email) are kept in a dedicated secrets manager and restricted, locked-down configuration files, rather than in our application code or build artifacts; and
• Access to our servers and infrastructure is limited to authorised personnel using individual, key-based authentication.

These measures apply to graamsoft.com and the forms on it. No method of transmission over the internet or electronic storage is completely secure, and while we work to protect your information, we cannot guarantee its absolute security.

If you believe you have found a security vulnerability affecting GraamSoft, please report it to security@graamsoft.com (see also our security.txt) rather than through the general contact form.

11. Third-Party Platforms and Connected Services

This Privacy Policy covers graamsoft.com. This website does not provide login, embedded messaging or connected-account features for Meta/Facebook, WhatsApp, Instagram or X/Twitter.

The social media icons are links to external profile pages. If you follow a link, the destination platform processes information under its own privacy policy.

Separate GraamSoft products and client services fall outside this website policy and may have their own privacy notices. For privacy information about a specific product or service, contact info@graamsoft.com and include its name.

12. International Data Processing

GraamSoft operates from India. Some of the service providers we use to run this website — for example, our hosting provider — may process data on servers located outside India as part of how their services work; we have not confirmed exactly where. We choose established providers and only share the limited information described in How We Share Information with them.

13. Children's Privacy

GraamSoft's website and services are directed at businesses and professional contacts, not at children. We do not knowingly collect personal information from children through this website. If you believe a child has provided us with personal information, please contact us at info@graamsoft.com and we will delete it.

14. Data We Process for Clients

This Privacy Policy describes GraamSoft's own practices as the operator of graamsoft.com — for example, how we handle a contact form enquiry you send us, or an email address you give us for our newsletter.

It is separate from any data that GraamSoft processes on behalf of a client, as part of building or operating software, websites, apps or infrastructure for that client (for example, data flowing through a CRM instance we have built or manage for a customer). That processing is governed by the specific agreement, instructions and data-processing terms we have with that client, and by that client's own privacy policy for their end users — not by this page. If you are an end user of a product built by GraamSoft for another business, please refer to that business's own privacy policy, or contact them directly.

15. Changes to This Policy

We may update this Privacy Policy from time to time, for example to reflect a new feature, service provider, or legal requirement. When we do, we will revise the date shown at the top of this page. We encourage you to check this page periodically for updates.

16. Contact Us

If you have questions about this Privacy Policy, or want to exercise any of the choices described above, contact us at:

• Email: info@graamsoft.com
• Phone: +91 99718 15647
• Location: Gurugram, Haryana, India 122002
• Security reports: security@graamsoft.com

You can also reach us through the contact form on our homepage. For the terms that apply to using this website or engaging GraamSoft for services, see our Terms and Conditions.