Privacy Policy
Last updated: 27 June 2026
This Privacy Policy explains how INQ Studios ("we", "our", "us") collects, uses, stores, and protects your personal information when you visit https://www.inqstudios.xyz or use our services. We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR) and the Indian Information Technology Act, 2000.
1. Who We Are
INQ Studios is a software engineering studio registered and operating in India. We build custom web applications, SaaS platforms, and digital products for businesses worldwide.
Data Controller Contact: nandurisrivatsa91@gmail.com
2. Data We Collect
We collect the following categories of personal data:
Contact & Inquiry Data
Your name, email address, company name, project description, budget range, and timeline — submitted via our contact or lead form.
Usage Data
Anonymised IP address, browser type, pages visited, and time spent on pages collected via analytics providers (if enabled by your cookie consent).
Technical Data
Session tokens for authentication (stored in encrypted HTTP-only cookies), used solely to maintain your admin session.
Communication Data
Email correspondence between you and INQ Studios, retained for service delivery and audit purposes.
3. Legal Basis for Processing (GDPR)
| Purpose | Legal Basis |
|---|---|
| Responding to contact form inquiries | Legitimate Interest (Art. 6(1)(f)) |
| Sending project quotations and proposals | Contract Performance (Art. 6(1)(b)) |
| Analytics & site improvement | Consent (Art. 6(1)(a)) |
| Legal record-keeping | Legal Obligation (Art. 6(1)(c)) |
4. How We Use Your Data
- →To respond to your project inquiries and provide software development services
- →To send project proposals, agreements, and invoices
- →To improve our website and service offering using anonymised analytics
- →To maintain internal CRM records of client relationships
- →To comply with applicable laws and regulations
We do NOT sell, rent, or trade your personal data to any third parties.
5. Data Storage & Third-Party Processors
Your data may be processed by the following sub-processors, all under Data Processing Agreements (DPAs):
6. Data Retention
We retain contact form submissions and CRM data for 2 years from the date of submission, or for the duration of any active client engagement plus 1 year. After this period, data is permanently deleted from our systems. You may request earlier deletion at any time.
7. Your Rights (GDPR)
If you are in the European Economic Area (EEA) or United Kingdom, you have the following rights:
Right of Access
Request a copy of all data we hold about you.
Right to Rectification
Request correction of inaccurate personal data.
Right to Erasure
Request deletion of your personal data ("right to be forgotten").
Right to Restriction
Request we restrict how we process your data.
Right to Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interest.
To exercise any of these rights, email us at nandurisrivatsa91@gmail.com. We will respond within 30 days.
8. Cookies
We use cookies for essential site functionality (session management) and optional analytics. You can control cookie preferences via our cookie consent banner. For full details, see our Cookie Policy.
9. Security
All data is encrypted in transit (TLS 1.3) and at rest. Access to personal data is restricted to authorised INQ Studios personnel only. We conduct regular security reviews of our infrastructure.
10. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be notified via email (if we hold your contact details) or via a notice on our website. The "Last updated" date at the top of this page will always reflect the most recent version.
11. Contact & Complaints
For any privacy-related questions or to file a complaint, contact us at nandurisrivatsa91@gmail.com. You also have the right to lodge a complaint with your local supervisory authority (e.g., ICO in the UK, your country's DPA in the EU).