Privacy Policy

1. Identity of the Data Fiduciary

The Data Fiduciary responsible for processing your personal data on this website is:

• Entity: TechoERP (Optimistic Group)
• Website: https://help.techoerp.in
• Corporate Address: India
• Grievance / DPO Email: privacy@techoerp.in

2. Personal Data We Collect

We adhere strictly to the principle of Data Minimization (Section 6, DPDP Act 2023). We only collect personal data that is essential for providing our technical documentation, answering developer queries, and improving system performance:

• Contact & Identification Data: When submitting an inquiry through our Support Desk, we collect your Full Name (lead_name), Work Email Address (email_id), Phone / WhatsApp number (phone), and Organization / Company Name (company_name).
• Technical Query Details: The description of requirements, module interest, priority level, and ERP implementation details you provide.
• Technical Logs & Telemetry: Anonymized server logs including IP address, browser user-agent, operating system, and request timestamps solely for cybersecurity defense and denial-of-service (DDoS) prevention under Section 43A of the IT Act.
• Cookies & Analytics Data: Analytical telemetry collected via Google Tag Manager and privacy-enhanced video embeds, subject to your explicit cookie preferences.

3. Purpose of Processing & Lawful Grounds

Under Section 4 and Section 6 of the DPDP Act 2023, personal data is processed exclusively on the following lawful grounds:

• Consent (Section 6): When you explicitly submit a development query or accept analytics cookies via our consent prompt.
• Legitimate Uses (Section 7): For fulfilling requests voluntarily submitted by you for TechoERP module deployment, API integration, and troubleshooting support.
• Legal & Regulatory Compliance: To comply with applicable laws, government notices, or CERT-In cybersecurity directives under the Information Technology Act, 2000.

4. Transfer & Sharing of Personal Data (Data Processors)

We do not sell, rent, or trade your personal data. Personal data is shared only with verified technical Data Processors under strict confidentiality agreements:

• Internal CRM Synchronization: Inquiries submitted via help.techoerp.in are synced to our authenticated ERPNext customer instance (https://app.techoerp.in) for ticket management and response tracking.
• Cloud Hosting Infrastructure: Cloud servers hosted on Hostinger / LiteSpeed with enterprise encryption standards.
• Media & CDN Storage: Static images and video assets hosted on verified CDN microservices (media.techo.net.in).
• Video Streaming: Video tutorials embedded via YouTube’s Privacy-Enhanced Mode (youtube-nocookie.com).

5. Protection of Children’s Personal Data (Section 9)

In strict compliance with Section 9 of the DPDP Act 2023:

• We do not knowingly process personal data of individuals under eighteen (18) years of age without verifiable parental consent.
• We do not engage in tracking, behavioral monitoring, or targeted advertising directed at children accessing our learning resources.

6. Reasonable Security Safeguards (IT Act Sec 43A & DPDP Act Sec 8(5))

We implement comprehensive technical, physical, and administrative safeguards to secure personal data:

• Transport Layer Security: All data transmissions are encrypted using end-to-end TLS 1.3 / HTTPS.
• Access Control: Administrative access requires role-based authentication, cryptographic token signatures, and hashed password credentials (bcrypt).
• Database Protection: SQL injection protection via parameterized queries and periodic security audits.
• Breach Notification: In the unlikely event of a personal data breach, we will notify the Data Protection Board of India (DPBI) and affected Data Principals in accordance with Section 8(6) of the DPDP Act.

7. Data Retention & Erasure (Section 8(7))

We retain your contact inquiries only for as long as necessary to fulfill the operational purpose for which they were collected or as required under statutory record-keeping obligations. Upon completion of your request or upon receiving an erasure request, your personal data is securely purged from our active databases.

8. Rights of the Data Principal (Sections 11 – 14)

Under Chapter III of the DPDP Act 2023, you possess the following enforceable rights:

• Right to Access (Section 11): Right to obtain a summary of your personal data being processed and the identities of Data Processors with whom it has been shared.
• Right to Correction & Erasure (Section 12): Right to request correction of inaccurate or misleading data, updating of incomplete records, or permanent erasure of your personal data.
• Right of Grievance Redressal (Section 13): Right to register grievances with our designated Grievance Officer.
• Right to Nominate (Section 14): Right to nominate any other individual to exercise rights on your behalf in the event of death or incapacity.

9. Grievance Officer & Regulatory Escalation

If you have any questions, wish to exercise your rights, or wish to file a grievance regarding the processing of your personal data, please contact our designated Grievance Officer: