Privacy Policy

1. Corporate Identity & Scope of this Policy

This Privacy Policy applies to the official web properties, portals, subdomains, software applications, client staging environments, and digital engineering services owned and operated by Yukt IT Solutions Private Limited (herein referred to as "YUKT", "Company", "we", "us", or "our"), accessible primarily through our primary domain https://yukt.online.

By accessing our website, requesting a project scope, engaging in technical consultations, entering into Statements of Work (SOW), or commissioning our engineering pods for website development, custom software engineering, AI automation, or IT consulting, you acknowledge that you have read, understood, and consented to the data practices described in this document.

2. Legal Frameworks & Regulatory Compliance

As an Indian digital engineering enterprise serving domestic enterprises as well as clients across the United States, the European Union, the United Kingdom, and the Middle East, our data processing architecture complies with the highest standards of international and Indian data protection laws, including:

• The Digital Personal Data Protection Act, 2023 (DPDP Act, India): Ensuring strict purpose limitation, transparency, lawful grounds, robust security safeguards, and straightforward user rights redressal.
• The Information Technology Act, 2000 & SPDI Rules, 2011 (India): Complying with Section 43A and reasonable security practices and procedures for Sensitive Personal Data or Information.
• General Data Protection Regulation (EU/UK GDPR): Upholding data minimization, legality, explicit consent protocols, and Standard Contractual Clauses (SCCs) for international clients.
• California Consumer Privacy Act (CCPA / CPRA): Providing California residents with complete visibility and rights over non-monetized data processing.

3. Information We Collect

We adhere strictly to the principle of Data Minimization. We only collect personal and technical information that is strictly necessary to assess your project requirements, communicate engineering deliverables, and guarantee secure site performance.

4. WebGL, Three.js & 3D Shader Telemetry

The YUKT digital platform features interactive WebGL particle wave shaders powered by Three.js and custom GLSL vertex/fragment shaders.

5. Lawful Grounds for Processing

Under Section 6 of the DPDP Act 2023 and Article 6 of the GDPR, we process your data under the following legitimate legal bases:

• Consent: When you voluntarily submit your contact details via our inquiry forms, quote estimate calculator, or click our WhatsApp direct links.
• Contractual Necessity: To fulfill our obligations under software development contracts, Git repository handovers, cloud deployments, and ongoing support SLAs.
• Legal Compliance: To adhere to mandatory tax filing, Goods and Services Tax (GST) reporting, corporate statutory registers, and regulatory requests from competent legal authorities.
• Legitimate Interests: To protect our IT infrastructure against malicious cyberattacks, enforce our intellectual property rights, and ensure unbroken platform uptime.

6. How We Utilize Your Data

Your information is employed exclusively for direct engineering and commercial interactions, specifically:

7. Cookies & Local Storage Policy

We maintain an uncluttered, privacy-first cookie policy. Our website uses minimal first-party cookies and browser local storage strictly for essential operational purposes:

• Strictly Necessary Cookies: Cryptographic CSRF session tokens that authenticate form submissions and prevent cross-site request forgery attacks.
• Local Storage Tokens: Storing client-side UI states, such as whether you have toggled the floating WhatsApp quick-service menu or dismissed a notification badge.
• No Third-Party Retargeting Pixels: We do not deploy invasive third-party tracking pixels (such as cross-web ad spyware) that monitor your personal browsing habits outside yukt.online.

You can configure your browser to block or delete cookies at any time. If you disable cookies, all core informational sections of yukt.online will continue functioning smoothly.

8. Non-Sale & Trusted Sub-Processors

Yukt IT Solutions does not sell, license, lease, or distribute your personal data or project confidential material to any third party for commercial gain.

To deliver our high-availability cloud infrastructure and real-time communications, we partner with industry-standard, SOC 2 and ISO 27001 certified sub-processors:

9. Client Code, Data Isolation & Mutual NDA

When you engage Yukt to develop custom software, mobile applications, or proprietary AI agents, you frequently entrust us with sensitive business logic, database schemas, and API credentials. We implement bank-grade confidentiality controls:

10. Data Retention & Secure Purging

We retain your data only for as long as necessary to fulfill the purposes outlined in this policy or to comply with statutory statutory retention mandates:

• Unconverted Inquiries: Contact messages and scoping submissions that do not convert into active client contracts are securely purged within 12 months.
• Active Client Project Code: Kept in active staging and backup environments during development and throughout the agreed 30-day hypercare warranty period. Following final handover and settlement, code backups are archived or deleted as per the client's written SOW instructions.
• Tax & Accounting Records: Invoices, milestone payment receipts, and contract agreements are retained for 8 years as mandated under the Indian Companies Act and Income Tax / GST legislation.

11. International Transfers & Data Residency

Our core development infrastructure is located in India, with primary server nodes distributed across ISO-certified data centers in the Asia-Pacific region (AWS ap-south-1 Mumbai, DigitalOcean Bangalore).

For clients located in the EU, UK, or US who mandate local data residency, our engineering pods can deploy and manage code, database clusters, and cloud workloads exclusively within your sovereign VPCs (e.g., AWS eu-central-1 Frankfurt or us-east-1 N. Virginia), ensuring full jurisdictional compliance with local data sovereignty mandates.

12. Technical & Organizational Security Measures

Yukt implements rigorous defense-in-depth security controls to safeguard data against unauthorized access, alteration, disclosure, or accidental destruction:

Our Apache web servers operate with hardened security response headers including X-Content-Type-Options: nosniff, X-Frame-Options: SAMEORIGIN, X-XSS-Protection, and strict Referrer-Policy.

13. Your Statutory Rights as a Data Principal

Whether governed by the Indian DPDP Act 2023 or global data regulations (GDPR/CCPA), you retain comprehensive legal rights over your personal data:

To exercise any of these rights, email us at privacy@yukt.online. We acknowledge receipt within 48 hours and process all valid requests within 30 calendar days at zero charge.

14. Children's Privacy Notice

The services, websites, and technical deliverables engineered by Yukt IT Solutions are intended exclusively for commercial enterprises, founders, and adult professionals aged 18 years and above. We do not knowingly solicit or collect personal information from individuals under the age of 18. If we become aware that personal information of a minor has been mistakenly collected, we take immediate steps to delete such data from our databases.