Privacy & Policy

SiliconBrains is an independent web engineering practice led by a Senior Web Engineer. For the purposes of applicable data protection law, we act as the Data Fiduciary / Data Controller of personal data collected through the Website.

• Business name: SiliconBrains (Silicon Brains)
• Website: www.siliconbrains.in
• Privacy contact: privacy@siliconbrains.in
• Location: Nagpur, India, 440034

We collect only the information needed to operate the Website and deliver our services.

• Information you provide: name, email address, phone number, company name, project details, budget and timeline, and any files or messages you send through contact forms, email or chat.
• Client project data: credentials, repository access, content, analytics or user data that you share with us while we deliver a project. This is handled under Section 8.
• Technical data collected automatically: IP address, browser type and version, device type, operating system, referring page, pages viewed, time spent, and approximate location derived from IP.
• Cookies and similar technologies: see Section 5.
• Communications: records of emails, calls and meetings relating to enquiries and engagements.
• Payment and billing data: invoicing details only. Card or bank details are processed by third-party payment providers and are not stored on our servers.

• To respond to enquiries, prepare proposals and quotations, and deliver contracted services.
• To operate, secure, debug and improve the Website and its performance.
• To send project updates, invoices, and service-related notices.
• To send newsletters or marketing messages only where you have opted in; you can withdraw at any time.
• To analyse aggregated usage and understand how visitors use the Website.
• To detect, prevent and respond to fraud, abuse, spam and security incidents.
• To comply with legal, tax and accounting obligations and to enforce our agreements.

Depending on your location, we process personal data on one or more of the following bases: your consent (including consent under the Digital Personal Data Protection Act, 2023 of India); performance of a contract or steps taken at your request before entering a contract; our legitimate interests in running and securing a professional services business; and compliance with legal obligations.

Cookies are small text files stored on your device. We use the following categories:

• Strictly necessary: required for security, load balancing and core site functionality.
• Preferences: remember settings such as theme or language.
• Analytics: help us understand traffic and performance, using privacy-respecting configurations where possible.
• Marketing: used only with your consent.

You can control or delete cookies through your browser settings or our cookie banner. Blocking some cookies may affect how the Website works.

We rely on trusted providers to run the Website and our services. These may include hosting and CDN providers, analytics tools, email and form-handling services, code hosting platforms, error monitoring, scheduling tools and payment processors. They process data only on our instructions or under their own privacy terms, and only as needed to provide their service. We do not sell your personal data. The Website may link to external sites; we are not responsible for their privacy practices.

We share personal data only: (a) with service providers described above; (b) with professional advisers such as accountants and lawyers under confidentiality; (c) where required by law, court order or government authority; (d) to protect our rights, safety or property; and (e) in connection with a business transfer, with notice to you where required.

When we work on a client's website or application, we may access source code, databases, credentials and end-user data belonging to the client. In that case the client remains responsible for the data and we act as a processor on its behalf. We will:

• access only the data necessary to perform the agreed work;
• keep credentials in secure password managers and never commit them to public repositories;
• use production data for testing only when unavoidable, and anonymise it wherever possible;
• revoke access and delete project copies within a reasonable period after project completion, unless retention is agreed in writing;
• report any confirmed breach affecting client data without undue delay.

Our providers may store or process data in countries other than your own, including outside India. Where required, we use appropriate safeguards such as contractual protections to ensure your data receives an adequate level of protection.

We keep personal data only as long as necessary for the purposes described. Typical periods: enquiry and contact records up to 24 months after last contact; client engagement records for the duration of the contract and up to 8 years afterwards for tax and legal compliance; analytics data in aggregated or anonymised form; marketing subscriptions until you unsubscribe. We securely delete or anonymise data when it is no longer required.

We apply reasonable technical and organisational measures, including HTTPS/TLS encryption in transit, access controls and least-privilege permissions, multi-factor authentication on key accounts, regular software updates and dependency patching, and backups. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Subject to applicable law (including the DPDP Act 2023 in India, the GDPR/UK GDPR in Europe and the CCPA/CPRA in California), you may have the right to:

• access the personal data we hold about you and obtain a summary of it;
• correct inaccurate or incomplete data and request erasure of data no longer needed;
• withdraw consent at any time, without affecting earlier lawful processing;
• object to or restrict certain processing, and request data portability;
• nominate another person to exercise your rights in the event of death or incapacity (India);
• lodge a grievance with us or a complaint with your local data protection authority.

To exercise any right, email privacy@siliconbrains.in. We may need to verify your identity and will respond within the period required by law, generally within 30 days.

The Website is intended for businesses and adults. We do not knowingly collect personal data from children under 18 without verifiable parental consent. If you believe a child has provided us data, contact us and we will delete it promptly.

We aim to respect browser Do Not Track and Global Privacy Control signals where technically feasible. Every marketing email includes an unsubscribe link.

We may update this Policy from time to time. The "Effective Date" at the top shows when it was last revised. Material changes will be highlighted on the Website or communicated by email. Continued use of the Website after an update means you accept the revised Policy.

For questions, requests or grievances about this Policy or your personal data, contact:

• Grievance / Privacy Officer: Mohit Shivankar, Senior Web Engineer, SiliconBrains
• Email: privacy@siliconbrains.in
• Address: Nagpur, India, Nagpur, India, 440034
• Response time: acknowledgement within 72 hours; resolution within 30 days