Privacy Policy

1. Who we are

Code Canyon Plus Web Solution is an India-based technology services firm offering web and app development, AI agents, POS & ERP integration, marketplace operations, performance marketing, customer experience, and reconciliation services to businesses across India and globally. Our office is located in Ahmedabad, Gujarat.

2. What information we collect

We collect personal data in three ways:

2.1 Information you give us directly

• Contact details — name, email, phone number, company name, role — when you fill out a form on our website, write to us, or schedule a call.
• Service-related information — business details, technical requirements, files, credentials, and access keys you share so we can deliver the service you've hired us for.
• Billing details — invoicing information, GSTIN, payment method information when you become a client.

2.2 Information we collect automatically

• Device and browser data — IP address, browser type, operating system, device type, referring URL.
• Usage data — pages visited, time spent, links clicked, captured via cookies and analytics tools.

2.3 Information from third parties

• Marketing platforms — Google Ads, Meta, LinkedIn, and similar platforms may share aggregate information about how you interacted with our ads.
• Public sources — publicly available business information that helps us understand if our services are a fit.

3. How we use your information

We use your personal data only for purposes that you'd reasonably expect:

• To respond to your enquiry and discuss whether our services fit your need.
• To deliver, support, and improve the services you've hired us for.
• To send you transactional emails — proposals, contracts, invoices, project updates.
• To send you marketing emails only if you've explicitly opted in (you can unsubscribe at any time).
• To meet legal, accounting, and tax obligations under Indian law.
• To protect against fraud, abuse, and security threats.

4. Who we share information with

We don't sell your personal data. We share it only in limited circumstances:

• Service providers we depend on (cloud hosting, email infrastructure, analytics, payment processors) — bound by confidentiality and processing only what they need.
• Legal authorities when required by Indian law, court order, or to protect our rights.
• Successor entities in the event of a merger, acquisition, or sale of business assets — with prior notice to you.

We do not share your data for third-party marketing without your explicit consent.

5. Cookies and tracking

Our website uses cookies and similar technologies for essential functions, performance analytics, and (with consent) marketing measurement.

You can manage cookies via your browser settings. Blocking cookies may affect some site functionality.

6. How long we keep your data

We retain personal data only as long as needed for the purposes it was collected — typically for the duration of our client relationship plus a reasonable period afterwards to meet legal, tax, and accounting obligations under Indian law (usually 7 years for financial records).

Marketing contact data is retained until you ask us to delete it or unsubscribe.

7. Your rights under DPDP Act

As a Data Principal under the DPDP Act, 2023, you have the right to:

• Access the personal data we hold about you.
• Correct or complete inaccurate or incomplete personal data.
• Erase personal data that is no longer necessary for the purpose it was collected.
• Withdraw consent previously given for processing (where consent was the basis).
• Nominate someone to exercise your rights in case of death or incapacity.
• Grievance redressal — raise a concern with our Grievance Officer (details below).

To exercise any of these rights, write to support@codecanyonplus.com with "DPDP Request" in the subject line. We will respond within the timelines set by the DPDP Act.

8. Security

We take reasonable security measures to protect your personal data — including encrypted storage, access controls, and regular security reviews. No system is perfectly secure, and we cannot guarantee absolute security, but we work hard to minimise risk.

9. Children's data

Our services are intended for businesses and adults. We do not knowingly collect personal data from anyone under 18. If you believe we have, please contact us and we will delete it.

10. Cross-border transfers

Some of our service providers may process data outside India. When this happens, we ensure appropriate safeguards are in place consistent with the DPDP Act and applicable Indian regulations.

11. Changes to this Policy

We may update this Policy from time to time. The "Last updated" date at the top reflects the most recent version. Material changes will be communicated via our website or by direct email if you've shared one with us.

12. Grievance Officer & Contact

For any questions, concerns, or to exercise your DPDP rights: