This policy explains what personal data AHGS Tech collects through ahgstech.com and the client portal, why, and how you can request it be deleted. It is written to meet the requirements of India's Digital Personal Data Protection Act, 2023 (DPDP Act).
1. What we collect
- Contact details — name and email, submitted through the contact form or given directly when an engagement begins.
- Client and billing details — company name, address, PAN and GSTIN (where applicable), used to issue invoices.
- Project data — the scope, milestones and deliverables of your engagement, shown to you in the client portal.
- Payment records — invoice amounts, status and payment identifiers from Razorpay. We do not collect or store your card, UPI or bank credentials; these are handled directly by Razorpay.
- Session data — a single httpOnly cookie used to keep you signed in to the client portal. No tracking or advertising cookies are set.
2. Why we collect it
To respond to enquiries, deliver and bill for engagements, and operate the client portal so you can see the status of your project without asking us directly. We do not sell or rent personal data, and we do not use it for advertising.
3. Who we share it with
We use a small number of service providers to run the site and cannot operate without sharing relevant data with them: Razorpay (payments), Resend (transactional email), and our hosting and database providers (Vercel, Neon). Each processes data only to provide their service to us and is bound by their own privacy terms.
4. Retention
Contact form submissions that don't turn into an engagement are retained for up to 12 months, then deleted. Client, project and invoice records are retained for as long as the engagement is active and for 8 years afterward, in line with Indian tax record-keeping requirements.
5. Your rights
Under the DPDP Act you can ask us to confirm what personal data we hold about you, correct it, or request it be deleted. Where data must be kept for legal or tax reasons — such as issued invoices — we will explain why it can't be deleted immediately. To make a request, email hello@ahgstech.com from the address on file; we respond within 30 days.
6. Security
Portal access uses single-use, expiring email links rather than passwords. Session cookies are httpOnly and transmitted only over HTTPS. Payment credentials never reach our servers — they are handled entirely by Razorpay.
7. Contact
Questions about this policy: hello@ahgstech.com