Privacy Policy

Last updated: 4 May 2026

1. Who we are

This Privacy Policy explains how 8 BIT DIGITAL SOLUTIONS ("we", "us", "our") — a sole proprietorship operated by Ishant Dubey from India — collects, uses, stores, and discloses personal data when you visit ishantdubey.com or use our services.

2. Data we collect

2.1 Information you provide directly

• Contact form / enquiry: name, email address, phone number, business details, message content.
• Telegram interactions: Telegram user ID, username (if public), conversation messages with our bots.
• Email subscription: email address for newsletters and product updates.
• Service onboarding: business address, GSTIN (where applicable), payment proof, account credentials shared explicitly for managed services.

2.2 Information collected automatically

• Server logs: IP address, user agent, referrer URL, timestamp of requests (retained 30 days for security).
• Cookies and similar technologies: session cookies (essential), analytics cookies (Google Analytics 4), advertising cookies (Google Ads conversion tracking).
• Web push subscription: browser push token, if you opt in to notifications.

2.3 Information from third parties

• Google Ads / Search Console: aggregate campaign performance data via Google API access (only for accounts that have explicitly authorised our agency).
• Affiliate networks: click and conversion data from Amazon Associates, Flipkart Affiliate, Cuelinks, EarnKaro for commission attribution.

3. How we use your data

We use personal data only for the following specified purposes:

• To respond to your enquiries and provide the services you request
• To send transactional emails (order confirmation, password reset, service updates)
• To send marketing communications where you have explicitly opted in (you can unsubscribe any time via the link in every email)
• To operate Telegram bot interactions and remember conversation context
• To measure website performance via Google Analytics
• To detect and prevent fraud, abuse, and security incidents
• To comply with applicable Indian law and respond to lawful government requests

4. Lawful basis (where applicable)

Under DPDPA 2023, we process personal data on the basis of: (a) your consent, (b) performance of a contract you entered with us, (c) legitimate business interests (security, fraud prevention), and (d) compliance with legal obligations. You may withdraw consent at any time by writing to ishant@ishantdubey.com.

5. Sharing and disclosure

We do not sell your personal data. We share data only with:

• Service providers (data processors) who help us operate: Cloudflare (CDN, DNS), Hetzner / Hostinger (server hosting), Brevo (email delivery), Razorpay (payment processing), Google (analytics, ads), Meta (advertising), Telegram (bot platform).
• Authorities when required by Indian law or to protect rights, property, or safety.
• Affiliate networks (Cuelinks, EarnKaro, Amazon, Flipkart) — only the click/referral identifier, not your personal information.

All processors are bound by contractual confidentiality and data-protection obligations.

6. Cookies

We use the following categories of cookies:

• Strictly necessary — session, CSRF token. Cannot be disabled.
• Analytics — Google Analytics 4 (`_ga`, `_gid`). You may opt out via browser settings or the Google Analytics opt-out add-on.
• Advertising — Google Ads conversion (`_gcl_*`), Meta Pixel. You may opt out at https://myaccount.google.com/data-and-privacy and https://www.facebook.com/settings.

7. Data retention

• Contact-form submissions: 24 months from submission, unless deletion is requested earlier.
• Email subscriber lists: until you unsubscribe.
• Server logs: 30 days.
• Telegram bot conversation memory: 7 days rolling window.
• Financial / contractual records: 8 years (Indian tax law minimum).

8. Your rights

Under DPDPA 2023 and applicable laws, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request erasure (right to be forgotten) where retention is no longer required
• Withdraw consent for marketing communications
• Nominate another individual to exercise your rights in the event of incapacity
• Lodge a complaint with the Data Protection Board of India

To exercise these rights, write to ishant@ishantdubey.com — we respond within 30 days.

9. Security

We protect your data with HTTPS (TLS 1.2+), server-side firewalls, fail2ban brute-force protection, password hashing for all account credentials, and least-privilege access controls. No system is perfectly secure; we will notify affected users in good faith of any breach that is likely to result in significant harm.

10. Children

Our services are not directed to children under 18. We do not knowingly collect data from minors without verifiable parental consent. If you believe a child has provided us data, write to us and we will delete it.

11. International transfers

Your data may be processed in India (primary), Germany / Finland (Hetzner servers), and the United States (Google, Meta, Cloudflare edge). Where data leaves India, we rely on the recipient's published terms and contractual safeguards.

12. Google API services

Use of information received from Google APIs (including Google Ads API, Analytics API, Search Console API) adheres to the Google API Services User Data Policy, including Limited Use requirements. We do not transfer Google user data to third parties for serving advertisements, and we do not allow humans to read this data unless we have your explicit consent or where required for security/legal reasons.

13. Changes to this policy

We may update this Privacy Policy. Material changes will be communicated via email (if you are a subscriber) or a banner on the website. The "Last updated" date at the top reflects the latest revision.

14. Contact us

Privacy queries: ishant@ishantdubey.com
Postal: 8 BIT DIGITAL SOLUTIONS, [ADDRESS_PLACEHOLDER]