Privacy notice

This website is operated by PrajnaBytes International Private Limited ("PrajnaBytes", "we"), CIN U62091UP2023PTC182205. It describes the website as it is currently built. Services provided to clients are covered by the terms of the relevant agreement.

Enquiries

When you send an enquiry through the contact form, we collect:

• your name and email address;
• optionally, your organisation and telephone number;
• the type of enquiry, any service area selected, and your message.

We use this information only to respond to your enquiry and to keep a record of the correspondence. Enquiries are kept for as long as needed for that purpose and for any business relationship that results.

Guided assessments

Our guided assessments ask about your requirements and readiness for a service or product, and may ask, optionally, for practical details such as the phone number or email address you want on your website, the domain you would like and where your business is based. If you are not signed in, your answers stay in your browser and are not stored by us unless you choose to send them. If you are signed in, your answers are saved to your account so that you can continue later, and unsent assessments are deleted automatically after 30 days. If you check whether a domain is available, the name is sent to our domain provider. If you choose to send an assessment, we ask for your name, email address and, optionally, your organisation and telephone number; the assessment is then kept with your enquiry, as described above. Please do not include personal data about other people in free-text answers.

Job applications

When you apply through the careers form, we collect:

• your name, email address and area of work;
• optionally, your telephone number, years of experience, LinkedIn profile address and message;
• your CV, as a PDF or Word document.

CVs are stored in private storage on the website server under a random file name. They cannot be reached through the website and are not sent by email. Only the people reviewing applications can access them. Applications and CV files are deleted automatically 12 months after they are received.

Customer accounts and support tickets

If you create a customer account, we hold:

• your name, email address and password (stored only as a one-way hash);
• optionally, your organisation and telephone number;
• your support tickets, the messages exchanged and any files you attach.

Ticket attachments are stored in private storage, can be downloaded only by you and by PrajnaBytes staff, and are never sent by email. Notification emails tell you that a ticket has been updated but do not contain the message itself. Account and ticket information is kept while your account is open and for as long as needed for the support history of the services we provide to you.

If you are a customer of our domain and hosting services, your customer details (name, email address and contact details held by our domain and hosting provider), your domain and hosting orders and the billing records that provider holds are copied from its system to this website every 30 minutes. Your orders are shown in your account; the provider's billing records are kept for our internal accounts and are not shown in your account. If you do not yet have an account, one is prepared for you; it cannot be used until you set a password through "Forgotten password?", and no email is sent when it is prepared. If an existing account appears to match, it is linked only after our staff have checked your identity.

Billing and payments

Invoices for our services are issued by PrajnaBytes through your customer account. For this we hold:

• your billing details: the name to appear on invoices, address, state, PIN code, and optionally your GSTIN, billing email and mobile number;
• your orders, the invoices issued to you and a copy of the billing details as they were when each invoice was issued;
• payments and refunds: amount, date, method and reference numbers.

You can view and print your invoices in your account. Invoices and payment records are kept for as long as we need them for our accounts and as required by law; an issued invoice is not changed afterwards.

Domain search and WHOIS lookup

Domain names you search for are sent to our domain and hosting provider to check their availability. For a WHOIS lookup, the domain name is sent to the public registration data (RDAP) service of the registry responsible for it, found through the directory published by IANA. Results are kept briefly to avoid repeated queries. To prevent automated misuse, the number of lookups from your browser session and your IP address is counted for a short time, and a verification check may be shown after many lookups.

Security records

To protect accounts, we record security-relevant events such as sign-ins, failed sign-in attempts, password changes and staff actions on tickets and billing records, together with the IP address involved. Failed sign-in attempts are recorded without the email address in readable form.

Technical information

With each form submission we record the IP address, and for enquiries the browser identifier, to protect the forms against abuse. The forms are rate-limited per IP address.

Website statistics

To understand which pages are useful, the website counts page views itself. It records only the page, the day, the website you came from (its name, not the full address) and how many people opened, completed or sent a guided assessment, as daily totals. No cookie is set for this, and no IP address, browser identifier or other information that could identify you is stored. Automated programs and our own staff are not counted. These totals are kept for 13 months. No third-party analytics service is used.

Cookies

The website sets only the cookies needed for it to work:

• a session cookie, which keeps you signed in during a visit, carries form messages and validation errors between pages, and remembers a completed domain-search verification for up to 30 minutes;
• a security token cookie (XSRF-TOKEN), which protects forms against cross-site request forgery.

Both expire after two hours of inactivity. If you choose a light or dark theme, a preference cookie (theme) remembers that choice for one year; it contains only the theme name. If you choose "Keep me signed in", a further cookie keeps you signed in until you sign out. The website does not use advertising or tracking cookies.

Service providers

• Cloudflare delivers the website and protects it against attacks. Requests to the website, including IP addresses, pass through Cloudflare's network.
• Cloudflare Turnstile checks that enquiry, application and registration submissions, and unusually frequent domain searches or WHOIS lookups, come from a person rather than an automated program. It runs in your browser when the check is shown.
• Our email service provider delivers the emails the website sends: account verification, password reset, invitations, support-ticket and renewal notices, and invoice and payment notices. It also carries notifications about new enquiries and applications to our team; CVs are not included.
• Our domain and hosting provider receives the domain names you search for, to check their availability, and holds the records of domain and hosting customers described above.
• For WHOIS lookups, the domain name is sent to the responsible domain registry's RDAP service.

We do not sell personal information and do not use it for unrelated marketing.

Security

The website is served over encrypted connections. Submitted information is stored in a database that is not reachable from the internet, and access to the server is restricted.

Your choices

You may ask us to access, correct or delete the personal information you submitted, to close your account, or to withdraw a job application. You can update your name, organisation and telephone number yourself under "Profile and security". Please use the contact form and state that your request concerns your personal information.

Changes

If this notice changes, the updated version will be published on this page.