Data Governance & Protection
Privacy Policy
SKYON IT SOLUTIONS (“SKYON”, “we”, “our”, or “us”) is committed to protecting your privacy and handling digital personal data transparently, responsibly, and in accordance with applicable data protection laws, including the Digital Personal Data Protection (DPDP) Act, 2023 of India and the General Data Protection Regulation (GDPR).
1. Identity of the Data Fiduciary & Dual Roles
For visitors to our website, prospective clients, and individuals submitting business inquiries, SKYON IT SOLUTIONS acts as the Data Fiduciary (or Data Controller under the GDPR). We determine the purposes and means of processing your contact and inquiry information.
When providing custom software engineering, cloud architecture management, or workflow automation services to business clients under a Master Services Agreement (MSA), SKYON generally operates as a Data Processor. In those engagements, we process client data strictly under the written instructions, terms, and Non-Disclosure Agreements (NDAs) executed with the client.
2. Personal Data We Collect
We only collect personal information that is reasonably necessary to fulfill legitimate business inquiries, evaluate project scopes, and maintain the security of our services:
- Inquiry & Contact Details: When you submit a project inquiry, request a quote, or email us, we collect your name, business email address, telephone/WhatsApp number, organization name, target timeline, estimated budget range, and project requirements.
- Technical & Device Telemetry: Standard server logs that may include your Internet Protocol (IP) address, operating system, browser type, referring URLs, and request timestamps, collected strictly to detect malicious traffic, prevent DDoS attacks, and ensure website availability.
- Client Project Communications: Technical specifications, functional requirements, and communications exchanged during active consultancy or development contracts.
3. Purposes & Lawful Grounds for Processing
We process digital personal data under the following legal bases:
Inquiry Response & Pre-contractual Steps
To review your project details, prepare architectural feasibility assessments, issue price estimates, and schedule discovery consultations requested by you.
Contract Performance & Service Delivery
To fulfill our contractual obligations, deploy software builds, configure cloud environments, and communicate project milestones.
Legitimate Business Interests & Security
To protect the integrity, confidentiality, and resilience of our IT infrastructure against unauthorized access, bot attacks, and fraudulent activity.
Legal & Regulatory Compliance
To maintain statutory financial records, tax invoices, and legal contracts as mandated by Indian and applicable international commercial laws.
4. Automated Chat Assistant & WhatsApp Communications
The chat assistant stores nothing; if you choose to send your details on WhatsApp, the message is sent through WhatsApp, which is operated by a third party.
Our website features a rule-based automated assistant designed to guide visitors through quick service FAQs and project qualification. The assistant operates entirely in your browser's local memory during your active session. It does not use tracking cookies, does not persist data to local storage, and does not transmit conversations to external artificial intelligence services.
If you choose to use the “Send on WhatsApp” action, your pre-filled inquiry is transferred to WhatsApp (operated by Meta Platforms, Inc. / WhatsApp LLC). Any messages sent via WhatsApp are subject to WhatsApp's own terms of service, end-to-end encryption protocols, and privacy policies.
5. Zero Sale of Personal Information
SKYON IT SOLUTIONS does not sell, lease, rent, trade, or monetize personal data to third parties, data brokers, or advertising networks under any circumstances. Personal information provided to us is used exclusively to evaluate, deliver, and support professional IT services.
6. Third-Party Service Providers & Sub-processors
To maintain high availability and security, we engage vetted third-party service providers who process data strictly under confidentiality agreements:
- Hosting & DNS Infrastructure: Enterprise cloud hosting, content delivery networks (CDNs), and DDoS mitigation services (e.g., Cloudflare, Vercel, or AWS) that deliver web assets securely.
- Business Email Services: Encrypted email communication providers used to send and receive project proposals and contracts.
- Inquiry Form Handling: If an automated form backend endpoint is configured, submitted details are transmitted securely over HTTPS directly to our designated intake system.
- Analytics Disclosure: Website analytics tracking may be integrated in the future. Any analytics deployed will prioritize privacy and respect browser “Do Not Track” signals. This policy will be updated promptly upon implementation.
7. International Data Transfers
As an IT services provider collaborating with businesses across India, North America, Europe, and other regions, personal data may be stored or accessed across international borders.
Where personal data is transferred across borders, we ensure adequate security safeguards, such as Standard Contractual Clauses (SCCs) approved by international regulatory bodies, and compliance with the cross-border data transfer provisions of the DPDP Act, 2023.
8. Data Retention & Erasure Schedules
We retain personal data only for as long as necessary to achieve the specific purposes for which it was gathered:
- Unconverted Business Inquiries: Retained for a maximum of twenty-four (24) months from the last communication to allow follow-up discussions, after which records are securely erased or anonymized.
- Client Contractual Records: Retained for the duration of the active engagement plus the statutory period required for tax audits, accounting compliance, and limitation periods under Indian law.
- Server Security Logs: Automatically rotated and deleted within 90 days, unless required for active investigation of security incidents.
9. Your Rights as a Data Principal / Subject
Under the India DPDP Act, 2023 and the GDPR, you have comprehensive rights regarding your digital personal data:
Request a summary of your personal data processed by us and the processing activities undertaken.
Request the correction, updating, or completion of inaccurate or outdated personal data.
Request the deletion of your personal data when it is no longer necessary for the original business purpose.
Withdraw consent previously granted for data processing easily at any time without retroactive penalty.
Nominate an individual to exercise your data rights in the unfortunate event of death or incapacity.
Lodge a grievance with our designated Grievance Officer regarding any data handling concern.
10. Technical & Organizational Safeguards
We implement rigorous technical and administrative safeguards to protect your personal data against unauthorized access, loss, alteration, or disclosure:
- Transport Layer Security (TLS 1.3 / HTTPS) with 256-bit encryption for all network traffic.
- Strict Role-Based Access Control (RBAC) and Multi-Factor Authentication (MFA) across internal systems.
- Encrypted credential vaults and isolated development/staging environments for software engineering projects.
- Periodic vulnerability reviews and security assessments.
11. Grievance Redressal Officer & Contact
If you wish to exercise any of your data principal rights, request deletion of your information, or submit a privacy grievance, please contact our designated Grievance Officer:
Data Protection & Grievance Officer
SKYON IT SOLUTIONS
We acknowledge all formal privacy grievances within 48 hours and aim to resolve them completely within thirty (30) days from receipt.
12. Amendments to this Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our service offerings, technical architecture, or statutory requirements under the DPDP Act or international privacy laws. Any updates will be posted directly to this page with an updated “Last Updated” timestamp. We encourage visitors to review this notice periodically.