Privacy policy

Details you submit through our forms — name, work email, company, team size, requested assessment slot, and anything you type into a message or notes field.

Billing information you send us on the billing page — company name, billing email, invoice or account reference, GSTIN, amount and UPI/UTR transaction references. We never ask for, and you should never send us, card numbers, CVV, UPI PIN or OTP.

Basic technical data that any web server receives — IP address, browser user agent and timestamps. We use this for security, abuse prevention and rate limiting on our contact, booking and billing forms.

Security telemetry from customer environments under a signed services agreement — logs, alerts and endpoint events. That data is governed by the contract and data processing terms agreed with each customer, not by this page.

To reply to your enquiry, confirm an assessment slot, and deliver the defence services you engaged us for.

To raise invoices, reconcile UPI and bank payments, process refunds and meet Indian tax and accounting obligations.

To protect this website — the honeypot, minimum fill time and per-IP/per-email rate limits on our forms exist to stop automated abuse.

We do not sell your personal data, we do not rent contact lists, and we do not use your submissions to train third-party AI models.

Because you asked us to — submitting a contact, booking or billing form is a request for us to act on it.

Because we have a contract with you, or are taking steps to enter into one.

Because the law requires it, such as retaining invoices and tax records, or reporting an incident to CERT-In where applicable.

Because we have a legitimate interest in keeping our own systems secure and free of abuse.

Email delivery: our transactional email provider sends the acknowledgement and internal notification emails triggered by our forms.

Hosting and infrastructure: the platform that serves this website and runs its server-side functions.

Banking and payment rails: your bank, UPI provider and ours, when you pay a retainer or receive a refund.

Government and regulators: only where we are legally required to disclose, such as a lawful CERT-In or law-enforcement request.

We do not share your information with advertisers or data brokers.

Enquiry and booking correspondence: up to 24 months from our last exchange, unless it becomes part of an active engagement.

Billing, invoice and payment records: retained for the period required by Indian tax and company law.

Abuse-prevention counters used for rate limiting: held in memory for a rolling 24 hours at most and never used to build a profile of you.

Customer security telemetry: retained for the period set out in that customer's services agreement, then deleted.

Traffic to this site is encrypted in transit with TLS, and access to our internal mailboxes and billing records is restricted to the people who need it.

Our security operations centre in Vadodara operates on least-privilege access with multi-factor authentication for staff.

No system is perfect. If we become aware of a breach affecting your personal data, we will notify affected parties and the relevant authorities as required, without undue delay.

This site does not use advertising cookies and does not run cross-site tracking pixels.

Strictly necessary storage may be used to keep the interface working — for example remembering that you have already seen the intro animation on your device.

If we add product analytics in future, this page will be updated before it goes live.

You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it where we are not legally required to keep it.

You can ask us to stop emailing you about anything other than an active engagement or a legal obligation.

You can ask who we shared your data with and why.

Email contact@bishnoi.cloud with the subject line “Privacy request”. We acknowledge within one business day and respond substantively within 30 days.