CUWeb - Privacy Policy

Effective Date: [Date]
Last Updated: 14/Aug/25

1. Introduction

   Your privacy matters to us. [CUWeb] (“we”, “us”, “our”) is committed to protecting the information you share on our platform—registered in India, offering services globally through a subscription-based web interface where users build and store application code.

   This policy explains what we collect, how we use it, whom we might share it with, and your rights under Indian law (notably the Information Technology Act, 2000 and the SPDI Rules 2011) and the emerging Digital Personal Data Protection Act, 2023 (“DPDP Act”).

2. Scope & Applicability

   • This policy applies to anyone using our service, whether located in India or abroad.
   • While the DPDP Act is not fully in force yet, we align with its principles (consent, transparency, purpose limitation, data rights) in anticipation
   • For Indian users, we comply with applicable Indian privacy laws, including the IT Act and SPDI Rules

3. What Information We Collect

   • Email Address: Collected during account signup for identity, account recovery, and notifications
   • User Code/Data: Source code or configuration data stored by you to facilitate your use of the platform. (Note: code is generally not personally identifiable data, but we store it because you choose to save it)
   • Usage Data & Metadata: Automatically generated technical information (e.g., timestamps, IP addresses, browser info) used only for operations and diagnostics

4. How We Use the Information

   • Provide and maintain your account and the platform
   • Send administrative updates, billing, or service emails
   • Enable features like versioning, backups, collaboration (if applicable)
   • Diagnose and resolve technical issues
   • Comply with legal obligations

   We collect only what’s necessary—following data minimization and purpose limitation principles set out in Indian law.

5. Legal Basis & Consent

   • Consent: We obtain clear consent at signup and for any changes in data processing. You may revoke consent anytime, though that may limit your access to the service
   • Legitimate Uses: We may process your data without fresh consent only when allowed by law (e.g., national security, law enforcement) as outlined in the DPDP Act

6. Data Sharing & Disclosures

   We do not share your email or code with third parties, except:

   • Service Providers: Cloud hosting partners, emailing services, payments (where applicable); always under contract with confidentiality and security obligations
   • Legal Requests: In response to valid legal orders or law enforcement requirements
   • Breach Response: In case of a security incident, we may share necessary information with the Data Protection Board of India and affected users, as required by Indian law and the DPDP Act

7. Overseas Data Transfers

   Your information may be stored or processed on servers located internationally. This is legally supported under the DPDP Act unless the Indian government places restrictions via a negative list.

   We will implement reasonable safeguards—including contractual and technical controls—to ensure your data remains protected regardless of where it resides.

8. Data Security & Breach Management

   We implement robust technical, organizational, and physical safeguards (such as encryption, access controls, secure infrastructure), and reasonable security practices required by Indian law.

9. Data Retention & Deletion

   We retain your email and code only as long as needed to deliver the service or comply with legal obligations. Upon your request or account closure, we will securely delete your data unless retention is required (e.g., audit, legal obligations)—in line with DPDP’s principle that personal data should not be kept once its purpose is fulfilled.

10. Your Rights

    Under applicable law, you have the right to:

    • Access your account data and metadata
    • Correct any inaccurate information
    • Erase your personal data (email); we will also delete data stored by you, such as code, upon request, unless retention is required (e.g., audit, legal obligations)
    • Withdraw Consent anytime, with the understanding that some services may no longer be available
    • Grievance Redressal: You may lodge a complaint with us using the details provided on this page

11. Grievance Officer

    For concerns or disputes about your privacy or data rights, please contact:

    • Name: [Officer Name]
    • Email: [email@company.com]
    • Phone: [Customer Support Number]

12. Children’s Privacy

    We do not knowingly collect personal data from individuals under the age of 18. If you believe your child has registered on our platform, please contact us immediately so we may delete any related data.

13. Changes to This Policy

    We may update this policy as laws evolve or our practices change. We will post the “Last Updated” date at the top and notify users of material changes in advance, via email or platform notification, particularly if they affect how your data is handled.

14. Contact & Further Information

    For additional questions about our privacy practices or this policy, feel free to reach out to our Grievance Officer. For details on Indian data protection obligations like DPDP or SPDI Rules, please visit official sources from the Ministry of Electronics & IT or the Data Protection Board of India.