This Privacy Policy applies to the website https://scitw.in, customer portals, CRM platforms, and interactive communication channels operated by Samrat Consultancy & IT World Pvt. Ltd. (referred to as "SCITW", "Company", "we", "us", or "our"), headquartered at Civil Lines, Jaunpur, Uttar Pradesh - 222001, India.
We operate as an integrated Information Technology and professional consultancy firm providing custom software engineering, web application development, institutional ERP systems, pathology & healthcare software, taxation consultancy, and B2B partner management services. We respect individual privacy and are fully committed to protecting the confidentiality, integrity, and privacy of all personal data provided by clients, leads, website visitors, and communication subscribers.
We collect only data necessary to fulfill service agreements, provide customer support, verify identity, and manage official business inquiries:
- Personal & Contact Identifiers: Full legal name, business organization name, registered email address, mobile phone number, and physical office or postal address.
- WhatsApp & Communication Data: WhatsApp phone number, WhatsApp user profile name, incoming inquiries, chat logs, timestamp of messages, delivery and read acknowledgments, and customer support ticket attachments.
- Consultancy & Statutory Details: PAN, GSTIN, Company Incorporation details, or NGO Darpan credentials provided explicitly by clients for statutory filing and compliance execution.
- Technical & Log Information: IP address, device operating system, browser user-agent string, page interaction timestamps, and secure session identifiers.
Your data is processed strictly under clear, legitimate business grounds:
- Service Delivery & Milestone Fulfillment: Executing software projects, deploying ERP systems, processing client invoices, and issuing milestone project releases.
- Customer Support & Status Tracking: Responding to client inquiries, updating application status, resolving technical support tickets, and scheduling expert consultancy calls.
- Transactional Notifications via WhatsApp: Sending automated OTP verification codes, payment receipts, invoice copies, server status alerts, and project timeline notifications.
- Statutory & Regulatory Compliance: Maintaining accounting books, GST invoice records, and tax documentation required under the laws of the Republic of India.
SCITW utilizes the official Meta Cloud API (WhatsApp Business Platform) and Meta Developer Tools to provide automated, reliable, and secure communications.
Scope of WhatsApp Data Processing:
- When you initiate a WhatsApp conversation with SCITW or submit your phone number on our website to receive service updates, Meta securely routes your messages through encrypted Meta Cloud servers to our webhook endpoint (
/api/whatsapp/webhook).
- We store message logs, recipient phone numbers, and delivery statuses in our secure internal database solely for CRM tracking, customer support continuity, and verification.
- We do not scrape, harvest, or utilize WhatsApp user profiles for third-party advertising or unconsented marketing blasts.
In accordance with WhatsApp Business Messaging Policies:
- Opt-In Consent: We only send WhatsApp notifications to users who have provided explicit opt-in consent by submitting an inquiry, requesting an appointment, registering as a client, or initiating a chat with our verified business number.
- Immediate Opt-Out ("STOP"): You may revoke consent and stop all automated WhatsApp messages at any time. Simply reply "STOP", "UNSUBSCRIBE", or "CANCEL" to our WhatsApp message. Our automated webhook immediately marks your phone number as unsubscribed, halting further automated notifications.
- Manual Opt-Out: You may also request opt-out by emailing support@scitw.in or contacting our Grievance Officer.
Samrat Consultancy & IT World strictly pledges that we do NOT sell, rent, lease, trade, barter, or transfer personal data or WhatsApp contact numbers to any third-party data broker, marketing consortium, or advertising platform.
Your communication history, phone numbers, and profile data remain strictly proprietary to your direct relationship with SCITW. Third-party disclosures occur exclusively when required by court orders, lawful statutory investigations, or to trusted infrastructure providers (such as Meta Cloud API, secure payment gateways, and Hostinger cloud infrastructure) under strict non-disclosure obligations.
We deploy industry-standard multi-layer technical and organizational safeguards:
- Encryption in Transit: All HTTP data transfers are enforced with Transport Layer Security (TLS 1.3) via 256-bit SSL encryption.
- Webhook Verification: All Meta WhatsApp Webhook payloads are verified against secret verification tokens (
hub.verify_token) and cryptographic HMAC-SHA256 signatures before acceptance.
- Access Controls & RBAC: Internal access to customer databases is restricted through strict Role-Based Access Control (RBAC). Only authorized engineers and relationship managers have logged access.
- Server Infrastructure: Hosted in SOC-2 compliant data centers with redundant firewalls, automated daily backups, and malware scanning.
We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy:
- WhatsApp Message Logs & Ephemeral Chats: Retained for 90 to 180 days for customer service audit, after which raw message contents are systematically purged.
- Active Client & CRM Records: Retained for the duration of the active client engagement and warranty support contract.
- Statutory Financial Records: Invoices, payment transaction receipts, and GST ledgers are retained for 7 years as mandated by Indian taxation laws.
- Unconverted Inquiries: Unconverted leads without activity for 12 months are permanently deleted or anonymized.
Under Indian Digital Personal Data Protection Act (DPDP) and international privacy frameworks, you have the right to:
- Right to Access: Request a copy of the personal information and WhatsApp interaction history held by us.
- Right to Rectification: Request correction of inaccurate, outdated, or incomplete records.
- Right to Erasure (Data Deletion): Request the permanent deletion of your phone number, message logs, and CRM records from our systems.
- Right to Withdraw Consent: Revoke authorization for notifications or marketing at any time.
To submit a data deletion request, please use our dedicated self-service portal:
SCITW User Data Deletion Instructions →
If you authenticate with SCITW via Facebook Login or interact with our Meta Developer Application:
- Data Received: We may receive basic public profile information (such as name and email address) solely to verify your identity and eliminate manual registration steps.
- No Secret Posting: We will never publish posts, send messages to your friends, or alter your account without explicit permission.
- App Removal: You can disconnect the SCITW App from your Facebook account at any time via Facebook Settings > Apps and Websites. Disconnecting automatically triggers a data deletion callback to our servers.
In accordance with the Information Technology Act 2000 and Rules made thereunder, the contact details of our designated Data Protection & Grievance Officer are provided below:
All privacy inquiries, data access requests, and formal legal complaints will be acknowledged within 48 business hours and resolved within 30 days.
