Privacy Policy

1. Who we are

Renusoft LLP is a limited liability partnership registered in India (LLPIN ADB-0132, GSTIN 10ABOFR4043H1ZD), with its registered office at Behind Awadh Apartment, B. H. Colony, Kankarbagh, Sampatchak, Patna – 800026, Bihar, India.

We build and operate our own software products, and we deliver software services to clients. This policy is written under the Digital Personal Data Protection Act, 2023 (the “DPDP Act”).

2. Our role

For everything covered by this page — website visitors, business enquiries, and the contacts at our client organisations — Renusoft is the Data Fiduciary: we decide why and how the data is processed, and we answer to you for it.

That is different from our role inside a client's own system. When we build or operate software that holds a client's data, we act as a Data Processor on that client's instructions, under the engagement contract, and the client remains the Fiduciary to its own users. Which role applies is always written into the engagement.

3. What we collect

What you send us

Your name, email address, organisation and the content of your message, when you use the enquiry form, email us or write to us on WhatsApp.

Client relationship data

Names, roles and business contact details of the people we work with at client organisations, together with correspondence, contracts and billing records.

Candidate data

If you apply to work with us: your CV and whatever you choose to tell us.

Technical data

Standard web server logs — IP address, browser and device type, pages requested and timestamps — kept for security and to keep the site working.

We do not ask for, and would rather you did not send us, sensitive personal information in an enquiry.

4. Why we process it

• To reply to you and to discuss work you have asked us about.
• To deliver and support the services a client has engaged us for.
• To run the business — contracts, invoicing, accounting and tax.
• To keep our systems secure and to prevent abuse.
• To comply with law and to establish or defend legal claims.

We do not sell personal data, and we do not send marketing to people who have not asked to hear from us.

5. Who else sees it

• Service providers we rely on to operate — hosting, email, and accounting — each under contract and each limited to what the task requires.
• Professional advisers such as our accountants and lawyers, where needed.
• Authorities, where the law or a valid court order requires it.

We do not share personal data with advertisers or data brokers.

6. Where it is stored

Our business records are held on infrastructure in India, or with reputable providers under contracts requiring appropriate protection. The DPDP Act permits transfer outside India except to territories the Central Government restricts, and we operate within that.

Data held inside a client's own systems stays wherever that engagement specifies. For the Solace Health product, that is India — see the Solace privacy policy.

7. How long we keep it

• Enquiries that do not lead anywhere: deleted within 24 months.
• Client records: for the engagement, and afterwards as long as required by Indian tax, company and limitation law.
• Candidate applications: up to 12 months, unless you ask us to keep them longer or to delete them sooner.
• Server logs: a short, rolling period for security purposes.

8. Your rights

Under the DPDP Act you may ask us to:

• tell you what personal data we hold about you and how it has been processed and shared;
• correct anything that is wrong, incomplete or out of date;
• erase data where there is no legal reason for us to keep it;
• record a nominee to exercise your rights if you die or become incapacitated;
• withdraw consent, where the processing rests on consent.

Write to the Grievance Officer below. We may need to verify your identity first. We respond within a reasonable period and in any case within the timeframe the law requires.

9. Grievance officer

If you are not satisfied with our response, you may complain to the Data Protection Board of India.

10. Cookies and this website

renusoftllp.com sets no tracking or advertising cookies, and runs no third-party analytics or advertising pixels. The typefaces are embedded in the page itself rather than loaded from a font service, so simply reading this site does not report your visit to anyone else.

The enquiry form does not post to a server. It opens your own email application with the message filled in, so nothing is transmitted until you press send there.

11. Security

We use encryption in transit, restrict access to business systems to the people who need it, and keep the software we run patched. No system is perfectly secure; if a personal data breach occurs we will notify the Data Protection Board of India and affected individuals as the DPDP Act requires.

We do not currently hold ISO 27001 or SOC 2 certification, and we will not imply that we do.

12. Changes

If we change this policy we will update the effective date above. Where a change materially affects people we hold data about, we will tell them directly.

See also our Terms of Use.