Privacy Policy

Last updated: 5 May 2026

At PRECISION e-Technologies Pvt Ltd (“we”, “us”, “our”), your privacy and trust are central to our operations. This Privacy Policy explains how we collect, process, store, and protect your information when you engage with our wide range of IT and IT-enabled services, which include but are not limited to domain name registrations, web hosting, business email, cloud servers, data backups, digital signature certificates, IT security solutions, managed services, consulting, our customer portal at precisiontech.in/support, and the PRECISION Support mobile application for Android. By using our website, services, or mobile app you acknowledge and consent to the practices described herein, in accordance with the Digital Personal Data Protection Act, 2023 (DPDP – India) and globally recognized standards such as GDPR and CCPA.

1. Information We Collect

• Identity & Contact Data: Full name, email address, phone number, company details, designation, billing information – required to deliver and manage IT/ITES services.
• Service-Specific Data: Domain registration details, server configurations, mailbox data, backup logs, SSL/Digital Signature KYC documents, and related identifiers as necessary for compliance and service delivery.
• Usage Data: IP addresses, device/browser information, login timestamps, and activity logs for service authentication, audit trails, and security monitoring.
• Financial Data: Payment records, invoices, and transaction identifiers (note: we do not store full credit/debit card information; payments are processed via secure gateways).
• Cookies & Tracking: Small data files to remember preferences, improve functionality, and measure usage analytics.

2. Legal Basis for Processing

We process personal data under the following lawful grounds:

• Contractual Necessity: To deliver and administer IT/ITES services (e.g., domains, servers, cloud solutions, digital signatures).
• Consent: For marketing communications, promotional updates, and optional services.
• Legal Obligation: To meet statutory requirements such as tax, telecom, CERT-In, or Controller of Certifying Authorities (CCA) regulations for digital signatures.
• Legitimate Interest: For fraud prevention, customer support, service improvement, and business continuity.

3. How We Use Your Information

• To verify your identity and authorize service requests.
• To configure, operate, and maintain IT/ITES solutions including servers, mailboxes, backups, cloud systems, and security appliances.
• To process billing, payments, and provide invoices/receipts.
• To communicate service-related alerts, downtime notices, and policy updates.
• To comply with regulations governing IT security, telecom, and digital signature issuance.
• To detect, investigate, and prevent unauthorized access or abuse of services.

4. How We Share Information

We do not sell personal information. Data may be shared only under the following conditions:

• Service Providers: With trusted partners who provide infrastructure, payment processing, SMS/email gateways, SSL authorities, or technical support.
• Regulatory Authorities: Where legally required (e.g., for issuing Digital Signature Certificates, compliance audits, or CERT-In notifications).
• Business Transfers: In case of mergers, acquisitions, or restructuring.
• Legal Enforcement: To comply with court orders, law enforcement, or applicable laws.

5. Data Retention

We retain personal data only as long as required for service delivery, regulatory compliance, dispute resolution, and audit purposes. For example, Digital Signature KYC records may be retained for the duration mandated by CCA regulations, while support logs are archived only as necessary. Once the retention period expires, data is securely deleted or anonymized.

6. Data Security

We employ technical and organizational safeguards including encryption, secure data centers, role-based access controls, regular audits, and compliance with ISO/IEC best practices. However, no method of transmission over the internet or electronic storage is fully secure. We encourage customers to also adopt strong security practices.

7. Children’s Privacy

Our services are not intended for children under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has shared personal data with us, please contact our Grievance Officer for removal.

8. Your Rights

• Access: Request a copy of the data we hold about you.
• Correction: Update or rectify inaccurate information.
• Erasure: Request deletion of your data, subject to legal/regulatory obligations.
• Consent Withdrawal: Withdraw marketing consent or opt out of non-essential communications at any time.
• Portability: Request transfer of your data to another provider where feasible.

These rights are provided under the DPDP Act, 2023 and, where applicable, under GDPR/CCPA.

9. Mobile Application — PRECISION Support (Android)

The PRECISION Support Android app (in.precisiontech.support) is a thin native client that lets our customers, leads, vendors, resellers and reseller partners access our customer portal from their mobile device. This section supplements (and does not replace) the rest of this Policy, and applies specifically to data handled by the mobile app.

9.1 Information the app collects

• Email address: entered at sign-in to receive a one-time password (OTP). We do not use passwords; OTPs expire in 10 minutes and are never reused.
• Device information: manufacturer, model, Android version, app version, app build number, app package name, and a server-issued device identifier (UUID). Used to register your device against your account, manage active sessions, enforce single-device policies for sensitive actions, and target compatible app updates.
• Session and authentication data: short-lived access tokens (60 minutes) and longer-lived refresh tokens (90 days) stored encrypted at rest using Android Keystore. Login timestamp and IP address are logged on the server for security audit and for the “Active sessions” screen.
• Diagnostic and crash logs: anonymous error events, stack traces, network failure codes, and basic device context (model, OS version, app version) sent to our servers to diagnose bugs and improve stability. Logs do not contain your password, OTP, ticket content, or any service-specific data.
• Push notification token (FCM) (planned, future release): when notifications are enabled, Google issues an opaque token for your device that we use to deliver service alerts. The token is stored against your device record and revoked when you sign out or uninstall the app.

9.2 Information the app does not collect

• Your phone fingerprint, face, PIN, pattern or password. The optional “App lock” feature uses your phone’s built-in unlock — Android handles authentication entirely on your device. We never see, store, or transmit your biometric or PIN data.
• Contacts, photos, files, location, microphone, camera, SMS or call logs. The app does not request these permissions.
• Advertising identifiers. The app does not use Google Advertising ID and does not show ads.
• Behavioural tracking by third-party analytics SDKs. We do not embed Google Analytics, Facebook SDK, or any other behavioural-analytics third-party SDK in the app.

9.3 How your data is protected in the app

• Encryption in transit: All API and web traffic uses HTTPS with TLS 1.2 or above. The app pins the issuing certificate authority — connections are rejected if the chain does not match the official PRECISION certificate, blocking man-in-the-middle attacks even on hostile Wi-Fi networks.
• Encryption at rest: Tokens and device identifiers are stored in Android Keystore (hardware-backed where the device supports it).
• Optional app lock: Re-authenticates with your phone biometric / PIN every time the app opens or after a configurable idle period. When enabled, the app preview in the Recents screen is blanked and screenshots inside the app are blocked.
• Multi-device awareness: You can view all devices currently signed in to your account, and revoke any of them at any time, from inside the app.

9.4 Account and data deletion (in-app)

In line with Google Play’s account-deletion requirements, you can request account closure or a copy of your personal data without leaving the app:

• Sign out / remove device: available in the app under Profile → Security → Active sessions. Removes the current or any selected device from your account immediately and revokes its refresh token.
• Request account closure: available under Profile → Account → Request closure. Submits a closure request to our team. We acknowledge within 7 working days and complete deletion or anonymization within 30 days, except where we are required to retain records by law (e.g. tax records, Digital Signature KYC, billing records under the Companies Act).
• Export my data: available under Profile → Account → Export my data. We email a machine-readable copy of your personal data to your registered email address within 14 days.
• Email fallback: if you are unable to use the in-app option, you may email support@precisiontech.in with the subject line “Account Closure Request” or “Data Export Request” from the email address registered with us.

Closure does not delete data that is required to remain on file for legitimate legal, regulatory, or contractual reasons — for example invoices, GST records, Digital Signature KYC, or active service contracts. We will tell you what (if anything) we are obliged to retain and for how long.

9.5 Sub-processors used by the mobile app

• Google LLC — distribution of the app via Google Play, crash reporting via Android Vitals, and (when push notifications are enabled in a future release) Firebase Cloud Messaging.
• Our hosting provider — the app communicates only with servers operated by PRECISION on infrastructure based in India.

9.6 Children

The PRECISION Support app is a B2B tool intended for the authorized representatives of organisations that hold an account with us. It is not directed at, marketed to, or intended for use by children. The app is rated PEGI 3 / Everyone for content but should only be used by adults responsible for the underlying account.

10. Changes to This Policy

We may update this Policy periodically. The “Last Updated” date at the top of this page will reflect the most recent revision. Continued use of our website, services, or mobile app after updates signifies acceptance of the revised Policy.

11. Contact & Grievance Redressal

If you have any concerns, complaints, or requests regarding your personal data — including data handled by the PRECISION Support mobile app — you may contact our designated Grievance Officer:

We will acknowledge your request within 7 working days and resolve complaints within 30 days, in accordance with the DPDP Act, 2023 and other applicable data protection laws.