Privacy Policy

1. Data Fiduciary

Sidewall Financial Services Pvt Ltd ("we", "us", or "our") is the Data Fiduciary responsible for your personal data under the Digital Personal Data Protection Act, 2023 (DPDPA). This privacy policy applies to all products and services operated by Sidewall Financial Services Pvt Ltd, including but not limited to DevPilot, QuickBillPro, AdPilot, UdyamPilot, FlightDeck, and CyberForge (collectively, "Services").

For any privacy-related inquiries, contact us at support@devpilot.co.in.

2. Information We Collect

We may collect the following categories of personal data:

• Identity Information: Name, email address, phone number, company name, and job title provided during registration or waitlist sign-up.
• Account Information: Username, password (hashed), account preferences, and profile data.
• Usage Data: Pages visited, features used, session duration, interaction patterns, and error logs collected to improve our Services.
• Device Information: Browser type, operating system, device identifiers, IP address, and screen resolution.
• Financial Information: Payment details, billing address, invoice records, and GST numbers (processed via third-party payment gateways).
• Communication Data: Messages, support tickets, and feedback submitted through our platforms.
• Cookies and Tracking: Information collected through cookies, local storage, and similar technologies.

3. Purpose of Collection

We use the collected data for the following purposes:

• Providing, operating, and maintaining our Services.
• Processing registrations, waitlist entries, and account management.
• Sending product updates, feature announcements, and transactional communications.
• Analytics and product improvement to enhance user experience.
• Security monitoring, fraud prevention, and abuse detection.
• Compliance with legal and regulatory obligations under Indian law.
• Responding to support requests and resolving issues.

4. Consent

By using our Services, creating an account, or submitting your information through our website or applications, you consent to the collection, processing, and use of your personal data as described in this Privacy Policy. Where required by law, we will obtain your explicit consent before processing sensitive personal data.

5. Data Storage and Security

Your personal data is stored on servers located in India. We employ industry-standard security measures to protect your data, including:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256).
• Access controls with role-based permissions and multi-factor authentication.
• Regular security audits and vulnerability assessments.
• Automated backup and disaster recovery procedures.

6. Data Sharing

We do not sell, rent, or trade your personal data. We may share your data only in the following circumstances:

• Service Providers: Trusted third-party vendors who assist in operating our Services (hosting, payment processing, email delivery), bound by data protection agreements.
• Legal Requirements: When required by applicable law, court order, or governmental regulation.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with prior notice to affected users.
• With Your Consent: When you explicitly authorize data sharing with a specific party.

7. Cookies

Our Services use cookies and similar technologies for:

• Essential Cookies: Required for basic functionality such as authentication and security.
• Analytics Cookies: Help us understand usage patterns and improve our Services.
• Preference Cookies: Remember your settings such as language and theme preferences.

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect the functionality of our Services.

8. Data Principal Rights (DPDPA Sections 11-14)

Under the Digital Personal Data Protection Act, 2023, you have the following rights as a Data Principal:

• Right to Access (Section 11): Request a summary of your personal data being processed and the processing activities.
• Right to Correction and Erasure (Section 12): Request correction of inaccurate or misleading data, completion of incomplete data, updating of outdated data, and erasure of data no longer necessary for the purpose it was collected.
• Right to Grievance Redressal (Section 13): File a complaint with our Data Protection Officer regarding data processing concerns.
• Right to Nominate (Section 14): Nominate a person to exercise your rights in case of death or incapacity.

To exercise any of these rights, contact our Data Protection Officer at kishore@devpilot.co.in. We will respond within 30 days of receiving your request.

9. Data Retention

We retain your personal data only as long as necessary for the purposes described in this policy:

10. Consent Withdrawal

You may withdraw your consent at any time by emailing support@devpilot.co.in with the subject line "Consent Withdrawal". Please note that withdrawal of consent does not affect the lawfulness of processing performed before the withdrawal. Certain data may be retained as required by law even after consent is withdrawn.

11. Data Protection Officer

12. Cross-Border Data Transfer

Your personal data is primarily stored and processed in India. In the course of operating our Services, we may use third-party cloud infrastructure providers and payment gateways that may process data outside India. In such cases, we ensure that appropriate safeguards are in place to protect your data in accordance with DPDPA requirements and applicable data protection standards.

13. Grievance Redressal

If you have a complaint regarding the processing of your personal data:

1. Step 1: Contact our Data Protection Officer at kishore@devpilot.co.in. We will acknowledge your complaint within 48 hours and resolve it within 30 days.
2. Step 2: If you are not satisfied with the resolution, you may file a complaint with the Data Protection Board of India as established under the DPDPA, 2023.

14. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a person under 18, we will take steps to delete such data promptly. If you believe a child has provided us with personal data, please contact us at support@devpilot.co.in.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by posting the updated policy on our website with a revised "Last updated" date. We encourage you to review this policy periodically.

16. Contact Us