Privacy Policy

This policy explains what personal information Scorpion Infotech collects through scorpioninfotech.com, why we collect it, who processes it on our behalf, how long it stays with us and what you can ask us to do with it. It covers this website. Information you send us directly by email, or that we exchange while working on a project, is handled on the same principles and under the terms of the engagement agreed with you.

Who we are

Scorpion Infotech is an MSME-registered software development firm based in Surat, Gujarat, India. We build mobile applications, websites, web applications and custom software. Our contact address is at the foot of this page, and questions about privacy should be sent to contact@scorpioninfotech.com. How we handle personal information is the responsibility of Pooja Dave, Chief Executive Officer.

What we collect

Information you give us through the enquiry form

The enquiry form is the only place on this website that asks you for personal information. When you submit it, we receive:

• Your name.
• Your company or business name, if you choose to give one.
• Your email address.
• Your telephone number, if you choose to give one.
• The service you are enquiring about.
• The description of the project or requirement that you write.
• Your confirmation that we may use these details to reply to you.

Your name, your email address, the selected service and the project description are needed for the form to be useful. The company name and telephone number are optional, and an enquiry sent without them is treated no differently. Please do not put passwords, card or bank details, identity document numbers or other sensitive information into the message field. Where a project genuinely needs information of that kind, we will agree a secure way to share it with you first.

Information collected automatically

Like almost every website, this one is delivered by servers that keep short technical records of the requests they receive. Such a record can include the IP address the request came from, the browser and operating system your device reports, the page requested, the page that referred you, and the date and time. We do not use this material to build a profile of you and we do not try to identify you from it. It exists so that pages can be served correctly, faults can be diagnosed, and abuse such as automated scraping or a denial of service attempt can be detected and blocked.

The enquiry endpoint also applies a simple rate limit so that one source cannot flood it with automated submissions. To do that it holds the requesting IP address in memory briefly. That value is not written to a database, is not linked to your enquiry, and does not survive a restart of the server instance handling the request.

Why we use it

We use what you send through the enquiry form to:

• Read and understand what you are asking for.
• Reply to you, and ask any follow-up questions we need in order to answer properly.
• Prepare an estimate, proposal or scope document where that is appropriate.
• Communicate with you about a project you decide to go ahead with.
• Keep a record of our correspondence for business and accounting purposes.

We do not use enquiry details for marketing. You are not added to a mailing list, you will not receive a newsletter, and your details are not passed to anyone who is not directly involved in answering you.

Consent and lawful basis

When you submit the form you tick a box confirming that we may use your details to respond to you. That consent is the basis on which we contact you. If we go on to work together, we also process your information because it is necessary to perform the contract between us, and because a business in India has record-keeping obligations it must meet. You may withdraw consent at any time by writing to contact@scorpioninfotech.com. We will then stop using your details for anything except a record we are required to retain.

How an enquiry is handled

This website has no database. When you submit the form, the server checks the fields, ignores anything it does not recognise, and sends the enquiry onward to our business mailbox as an email. Nothing about your enquiry is written to disk on the website, saved in a content management system, queued for later processing or exposed through an administrative interface, because none of those exist here.

Once that email arrives, your information lives in our business email account. From that point the security and retention of the mailbox govern it, not any website storage.

Service providers

We keep the number of organisations involved deliberately small. The following process information as part of running this website. Naming them is a statement of fact about how the site is built. It is not a partnership, an endorsement or a certification, and each of them operates under terms and a privacy policy of its own.

• Resend delivers enquiry emails from this website to our mailbox. The contents of your enquiry pass through it in transit.
• Vercel hosts and serves this website, and produces the standard request logs described above.
• Cloudflare, where the site is served through it, sits in front of the hosting to route traffic and filter automated abuse, and processes request data for that purpose.
• Our business email provider, which necessarily stores and processes the messages sent to us.

Some of these providers operate infrastructure outside India, so your information may be processed on servers located in other countries. We rely on the contractual and security commitments those providers publish, and we do not authorise any of them to use your information for purposes of their own.

Cookies and analytics

This website carries no advertising or cross-site tracking technology. A hosting or security provider in front of the site may set a strictly necessary cookie of its own in order to keep the service available. Our Cookie Policy explains that in full.

This website sets no cookies of its own, and no analytics or measurement script is loaded on this deployment. We do not run Google Analytics, a heat-mapping tool, a session recorder or a marketing pixel here. If that ever changes, this policy and the Cookie Policy will be updated to describe it.

How we protect it

• The site is served over HTTPS, so what you type into the form is encrypted in transit.
• Transport security and related response headers are set at the framework level to reduce the risk of content injection and clickjacking.
• Every field is validated on the server as well as in your browser, and unrecognised fields are discarded.
• A hidden honeypot field and a rate limit cut down automated submissions.
• Because enquiries are never stored on the website, there is no website database to be breached.
• Access to the business mailbox that receives enquiries is limited to the people who need it in order to answer you.

No method of transmission or storage is completely secure, and we do not claim otherwise. What we can say is that the number of places your information is held has been kept deliberately small.

How long we keep it

Enquiry emails stay in our business mailbox for as long as they remain useful for the purpose they were sent for, and for as long as we need them in order to meet tax, accounting and contractual record-keeping requirements in India. Correspondence that leads nowhere is deleted once it is clearly no longer relevant. You may ask us to delete your enquiry at any time and we will do so, unless a specific legal obligation requires us to keep a record of it. Server and security logs are short-lived and are retained by our hosting and security providers under schedules of their own.

What we do not do

• We do not sell, rent or trade personal information, and we never have.
• We do not pass your details to advertisers, data brokers or lead-generation services.
• We do not use your information to make automated decisions that produce legal or similarly significant effects for you.
• We do not knowingly collect information from children. This website is addressed to businesses, and it has no feature aimed at a child. If you believe a child has sent us personal information, write to us and we will delete it.

Your rights

You may ask us to:

• Confirm whether we hold personal information about you, and give you a copy of it.
• Correct anything that is inaccurate or incomplete.
• Delete information we no longer need to keep.
• Stop using your information for a particular purpose.
• Withdraw consent you gave earlier.

Write to contact@scorpioninfotech.com, ideally from the address you originally contacted us from, or tell us enough about the enquiry for us to find it. We may ask a question or two to satisfy ourselves that the request is genuinely yours before acting on it. There is no charge for a reasonable request. If you are not satisfied with how we have dealt with it, tell us and we will look at it again.

Links to other websites

Where this website links to a page that is not ours, the privacy policy of that website applies to whatever you do there. We have no control over how another organisation handles your information, and a link is not an endorsement of its practices.

Changes to this policy

We revise this policy when the way the website works changes, or when the law requires it. The date shown at the top of the page is the date of the current version. A material change will be reflected here before or at the time it takes effect, so it is worth reading this page again before you next send us an enquiry.