Privacy Policy

Effective date: 26 May 2026

Last updated: 26 May 2026

Governing law: Digital Personal Data Protection Act, 2023 (India); Information Technology Act, 2000.

1. Who We Are

This Privacy Policy describes how Innovativa SoftTech Solutions Private Limited (“Innovativa SoftTech”, “we”, “us”, “our”), a company incorporated under the laws of India with its registered office in the State of Maharashtra, collects, uses, discloses, and protects your personal data when you visit innovativasofttech.com (the “Site”), download Hash Calculator, or otherwise interact with our services.

We act as the Data Fiduciary with respect to the personal data we collect about you, as defined under the Digital Personal Data Protection Act, 2023 (“DPDP Act”).

2. Information We Collect

2.1 Information you give us directly

• Contact form data — full name, email address, phone number, organization name, and the content of any message you send via the contact form on contact-us.html.
• Email correspondence — any personal data contained in emails you send to inquiry@innovativasofttech.com or call records to +91 8484859088.
• Demo & sales inquiries — if you request a walkthrough or commercial quote for Hash Calculator or any other product.

2.2 Information collected automatically

• Server logs — IP address, browser user-agent, referring URL, requested URL, response status code, timestamp (held by our hosting provider Hostinger for operational and security purposes).
• Analytics data — via Google Analytics 4 (measurement ID: G-Y3HSH14HNL), we collect anonymized aggregate data about page views, session duration, device type, geographic region (city/country-level), and the custom events listed in section 4.
• Heatmap / session-replay data — if you visit while Microsoft Clarity is installed, anonymized session recordings and click/scroll heatmaps may be captured. Clarity does not record sensitive form inputs by default.

2.3 Information we do NOT collect from Hash Calculator software

The Hash Calculator desktop application itself does not transmit your case data, hashes, audit log, scanned file content, file paths, hostname, or any personal data to our servers as part of its normal operation. All such data stays on your local machine. See the End-User License Agreement (EULA.txt), section 9 (Data, Privacy, and Telemetry), for the contractual commitment.

3. Legal Basis for Processing (DPDP Act, 2023)

We process your personal data on the following lawful bases:

• Consent (Section 6, DPDP Act) — you submit a contact form, accept our cookie banner, or otherwise affirmatively provide personal data.
• Legitimate use (Section 7, DPDP Act) — necessary to respond to your enquiry, fulfil a service you requested, or comply with a legal obligation, judicial order, or regulatory requirement.
• Performance of a contract — processing necessary to deliver a product (including the Hash Calculator license) for which you have purchased.

4. How We Use Your Information

We use the data we collect for the following specific purposes:

• Responding to your contact-form enquiries, sales questions, and support requests.
• Providing demonstrations, quotes, and commercial follow-ups for our products.
• Issuing software licenses for Hash Calculator and managing renewal communications.
• Measuring and improving the performance of our Site (analytics, conversion funnels, A/B tests).
• Tracking custom events such as download_started, contact_form_submit, phone_click, and email_click to understand how visitors progress through our funnel.
• Detecting and preventing fraud, abuse, and security incidents.
• Complying with applicable laws and responding to lawful requests from courts or government authorities.

5. Sharing & Disclosure

We do not sell your personal data. We share it only as described below:

5.1 Service providers (Data Processors)

• Hostinger — web hosting and server-log retention.
• Google LLC — Google Analytics 4 (analytics) and Google Workspace (email).
• Microsoft Corporation — Microsoft Clarity (heatmaps & session replay), if installed.
• YouTube — embedded videos served from youtube.com may set cookies on visit; subject to Google’s own privacy policy.

5.2 Legal disclosures

We may disclose your personal data when we are required to do so by:

• A binding court order or warrant issued by a competent Indian court.
• A lawful direction from a regulator (RBI, SEBI, CERT-In, etc.) under the IT Act or other applicable law.
• A specific request from law enforcement that meets the requirements of the IT Act, 2000 and the Cr.P.C.

6. International Data Transfers

Some of our service providers (Google, Microsoft) may process your data on servers located outside India. Such transfers are made in compliance with the cross-border-transfer provisions of the DPDP Act and the contractual safeguards of the respective providers. We do not transfer Hash Calculator case data out of India because the software does not transmit case data anywhere.

7. Data Retention

• Contact-form submissions — retained for 36 months from receipt, then deleted, unless an ongoing commercial relationship requires longer retention.
• Analytics data (GA4) — retained for 14 months per our GA4 configuration.
• Heatmap data (Clarity) — retained for up to 13 months.
• Server logs — rotated by Hostinger per their data-retention policy, typically up to 12 months.
• License records — retained for the duration of the license + 7 years for audit, tax, and dispute-resolution purposes.

8. Your Rights as a Data Principal

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Confirmation and access — ask us whether we hold personal data about you, and to receive a copy.
• Correction — ask us to correct or update personal data that is inaccurate, incomplete, or out of date.
• Erasure — ask us to delete personal data when it is no longer needed for the purpose it was collected, subject to legal-retention requirements.
• Withdraw consent — at any time, with effect for future processing only.
• Grievance redressal — raise a complaint with our Grievance Officer (see section 12 below), and escalate to the Data Protection Board of India if you are not satisfied.
• Nominate — designate another person to exercise the rights above in the event of your death or incapacity.

To exercise any of these rights, email inquiry@innovativasofttech.com with your request and reasonable proof of identity. We will respond within 30 days.

9. Cookies and Tracking Technologies

Our Site uses cookies and similar technologies for the following purposes:

9.1 Essential cookies

Required for the Site to function (session, security, load-balancing). Cannot be disabled without breaking core functionality.

9.2 Analytics cookies (Google Analytics 4)

Set by Google to measure how visitors interact with the Site. Cookies set: _ga, _ga_*. You can opt out at any time by installing the Google Analytics opt-out browser add-on.

9.3 Heatmap / session-replay cookies (Microsoft Clarity)

If installed, Clarity sets cookies to record anonymized user interactions. Clarity does not collect personally identifiable information by default and masks form inputs.

9.4 How to disable

You can clear or block cookies in your browser settings (Settings → Privacy / Cookies). Blocking cookies may degrade some Site features.

10. Children’s Privacy

Our Site and products are not directed at children under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected such data, please contact us (section 12) and we will delete it promptly. In accordance with the DPDP Act, processing of a child’s personal data requires verifiable parental consent.

11. Data Security

• All data exchange between your browser and our Site is encrypted using TLS 1.2+ (HTTPS).
• Access to internal systems holding personal data is restricted on a need-to-know basis.
• We follow industry-standard practices for password management, server hardening, and patch management.
• In case of a personal-data breach affecting your data, we will notify you and the Data Protection Board of India within the timeframe required by the DPDP Act.
• No transmission over the public internet is 100% secure; we cannot guarantee absolute security.

12. Grievance Officer & Contact

In accordance with the Information Technology Act, 2000, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the DPDP Act, 2023, the name and contact details of the Grievance Officer are provided below:

We aim to acknowledge every grievance within 24 hours of receipt and to resolve it within 30 days, as required by the DPDP Act.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The “Last updated” date at the top of this page reflects the most recent revision. Material changes will be highlighted prominently on this page. By continuing to use the Site after the effective date of a revised Policy, you agree to be bound by the revised terms.