Privacy Policy

MAGURO Technologies Version 1.0 · Effective 28 October 2026

This Privacy Policy explains how MAGURO Technologies collects, uses, shares and protects personal data when you visit magurotech.com (the “Site”), contact us, or deal with us as a prospective or current client. It also explains your rights and how to use them.

It is written for the law that applies in India today: section 43A of the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (the “SPDI Rules”). It is also written for the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 (together, “DPDP law”), as their obligations come into force.

1. Who we are

MAGURO Technologies is a sole proprietorship of Snehanshu Anand Sakhare. It is not a company or a limited liability partnership. The proprietor is personally responsible for your personal data. In this policy, “MAGURO Technologies”, “we”, “us” and “our” mean Snehanshu Anand Sakhare trading as MAGURO Technologies.

For the personal data this policy covers, we are the Data Fiduciary under DPDP law. That means we decide why and how it is processed.

Contact for anything in this policy Snehanshu Anand Sakhare, Proprietor and Grievance Officer MAGURO Technologies Plot No. 81, Kanji House Road, Binaki, Nagpur – 440017, Maharashtra, India Email: privacy@magurotech.com

2. What this policy covers

This policy covers personal data we handle for our own business:

people who visit the Site;
people who contact us through the contact form or by email;
contact persons at prospective and current clients, including billing contacts.

It does not cover personal data we process on behalf of a client while building, hosting or maintaining the client’s software, such as the details of the client’s own customers or users. For that data, the client decides how it is used and we act only on the client’s documented instructions. The client agreement and its data-processing terms govern it. If you use a product we built for a client, please contact that client about your personal data.

3. Personal data we collect

3.1 Information you give us

Contact form: your name, your email address, the type of project, and your message. The form accepts text only. It does not accept file uploads.
Email: if you write to hello@magurotech.com or privacy@magurotech.com, we receive your email address, the name shown in your email, and anything you choose to include, including attachments.
Client engagements: if you become a client, we collect what we need to deliver and bill the work. For example: names and business contact details of your team, billing details, project requirements and project communications. The client agreement sets out the details.

Please don’t send sensitive personal data through the Site or by email (for example passwords, bank or card details, or health information). Please don’t put confidential business information in an enquiry. If you need to share something confidential, ask us for a non-disclosure agreement first.

3.2 Information collected automatically

When you visit the Site, our hosting and security provider processes the technical data needed to deliver pages and protect the Site from attacks. This includes your IP address, your browser and device type, the pages you request, and the date and time.

We do not use this data to identify you, to build a profile of you, or to follow you across other websites.
We do not store your IP address in our enquiry records.

When you submit the contact form, we record the date and time you gave consent. We also record the versions of this Privacy Policy, the Terms of Service and the form notice that you saw, so we can show what you agreed to.

4. How we use personal data

Purpose	Personal data used
Replying to your enquiry and discussing possible work	Contact form details; emails you send us
Preparing proposals, agreements and invoices, and delivering and managing client work	Client contact, project and billing details
Keeping the tax, accounting and legal records the law requires	Agreements, invoices and payment records
Keeping the Site and our systems secure, and preventing spam and abuse	Technical data; form submissions
Handling requests and complaints under this policy	Details of your request or complaint

We rely on your consent to reply to enquiries and to communicate with you about work. We rely on the law where we must keep records, protect our systems, or respond to a lawful request.

We do not:

sell or rent personal data to anyone;
send newsletters or marketing messages, or add you to a mailing list;
use personal data for advertising, profiling, or automated decisions about you.

5. Use of AI tools

We may use generative-AI tools to help prepare answers to the questions you ask us.

We do not enter your name, your contact details, or any other personal data from enquiries or client communications into public generative-AI tools. Anything that identifies you is removed first.
A person reviews every reply before it is sent. Decisions about your enquiry are made by us, not by an AI tool.

6. Cookies

We do not currently use analytics, advertising or remarketing cookies. Our hosting/CDN provider may set strictly necessary cookies.

These strictly necessary cookies help detect automated traffic and keep the Site secure. They are not used for advertising. The Site does not load fonts, scripts or trackers from other services, such as Google Fonts or social networks.

Because we only use strictly necessary cookies, we do not show a cookie banner. Before we add any analytics, advertising or CAPTCHA tool, we will update this policy, and ask for your consent where the law requires it.

We share personal data only as described below:

Service providers that run parts of our business for us, under their own data-protection terms:
- hosting, content delivery, security, database and email routing: currently Cloudflare, Inc.;
- business email: currently Google (Gmail).
Subcontractors we may engage in future to help deliver client work. They will receive only what they need. They will be bound in writing by confidentiality and data-protection obligations.
Professional advisers, such as our chartered accountant or lawyers, where needed. They are under a duty of confidentiality.
Government authorities, courts, regulators or law enforcement, when the law requires it, or where it is needed to protect our rights or someone’s safety.
A transferee of the business, if the business is transferred (for example, if it is incorporated as a company or LLP). The transferee must protect your personal data as this policy describes.

8. Where your personal data is processed

We are based in India. Our service providers operate globally, so your personal data may be processed or stored on their servers outside India. In particular, Cloudflare operates a global network.

We will not transfer personal data to any country that the Government of India restricts under section 16 of the DPDP Act. For client projects, the region where the client’s data is hosted is fixed in the client agreement.

9. How long we keep personal data

Personal data	How long we keep it
Enquiries that do not lead to work (form submissions and related emails)	Deleted 12 months after we receive them
Your consent record	Deleted together with the enquiry it belongs to; for clients, kept with the client records below
Client agreements, invoices and accounting records	For the period required by Indian tax and accounting laws (generally about six years)
Client project data	Returned to the client or deleted within 30 days after the engagement ends, as set out in the client agreement
Records of requests and complaints made under this policy	3 years after we close the request, to show how we handled it
Technical logs held by our hosting provider	Short periods set by Cloudflare for security and operations

When we delete personal data, copies may remain in automatic backups for up to 30 days before they are overwritten. If the law requires us to keep personal data for longer, for example because of a legal claim, we keep it only for that purpose.

10. How we protect personal data

We use reasonable security practices suited to the personal data we hold. Today these include:

encrypted connections (HTTPS, TLS 1.2 or higher) across the whole Site, and DNSSEC on our domain;
access to our hosting, database and email accounts limited to the proprietor and protected by two-factor authentication;
collecting only what we need: the contact form is text-only and does not store IP addresses;
automatic deletion of old enquiries;
protection from our hosting provider against attacks and automated abuse.

No system is completely secure, and we cannot promise that a breach will never happen.

If a personal data breach affects you, we will tell you without undue delay what happened, its likely impact on you, and what we are doing about it. We will also report the breach to the authorities as Indian law requires. That includes CERT-In and, under DPDP law, the Data Protection Board of India.

11. Your rights

Under Indian law you can:

Access: ask for a summary of the personal data we hold about you, how we use it, and who we have shared it with.
Correct and erase: ask us to correct, complete or update your personal data. You can also ask us to erase it once it is no longer needed for the purpose you gave it for, unless the law requires us to keep it.
Withdraw consent at any time (see section 12).
Complain to our Grievance Officer (see section 14).
Nominate another person to exercise your rights if you die or become unable to exercise them yourself.
Approach the Data Protection Board of India if you are not satisfied with how we handled your grievance.

How to use your rights: email privacy@magurotech.com, or write to the address in section 1.

We may ask for information to confirm your identity, but only what we need for that.
We will respond within 30 days.
There is no fee.

To withdraw consent, email privacy@magurotech.com or reply to any email from us. Withdrawing is as easy as giving consent was.

We will stop using your personal data for that purpose and delete it, unless the law requires us to keep it.
Withdrawing does not affect anything we did lawfully before you withdrew.
If you withdraw consent during an engagement, we may not be able to continue the work.

13. Children

The Site and our services are meant for adults and businesses. We do not knowingly collect personal data from anyone under 18. We do not track children, monitor their behaviour, or target advertising at them.

If we learn that we hold a child’s personal data, we will delete it. If you believe a child has contacted us, please tell us at privacy@magurotech.com.

14. Grievance Officer and complaints

Under Rule 5(9) of the SPDI Rules, our Grievance Officer is:

Snehanshu Anand Sakhare Proprietor and Grievance Officer, MAGURO Technologies Plot No. 81, Kanji House Road, Binaki, Nagpur – 440017, Maharashtra, India Email: privacy@magurotech.com

We will acknowledge your grievance promptly and resolve it within one month of receiving it. If you are not satisfied with our response, you can approach the Data Protection Board of India under the DPDP Act.

15. Language

This policy is in English. If you would like it in Marathi, Hindi or another language listed in the Eighth Schedule to the Constitution of India, email privacy@magurotech.com and we will provide it.

16. Changes to this policy

Each version of this policy has a version number and an effective date.

If we make a material change, such as collecting a new type of personal data, using it for a new purpose, or adding analytics, we will:

post a notice on the Site before the change takes effect;
email you, if you have an open enquiry or engagement with us;
ask for your consent again where the law requires it.

Previous versions are available on request.

17. Governing law

This policy is governed by the laws of India.