Privacy Policy
This Privacy Policy explains how Ninja InfoSec Services Pvt. Ltd. (“Ninja Security”, “we”, “us”) collects and uses personal data through ninjasecurity.co.in and its tools (“the Arsenal”). We process personal data in line with India’s Digital Personal Data Protection Act, 2023 (DPDP).
1. What we collect
- You provide: name, email, phone, organisation, the website/domain you submit for scanning, and any message or briefing.
- Automatically: IP address, browser/device info, and basic usage logs (for security and rate-limiting).
- Payments: processed by Razorpay. We receive a payment confirmation and reference — we never receive or store your full card/UPI/bank credentials.
2. How we use it
- To run the tool you requested and deliver results/reports.
- To respond to enquiries, bookings and support.
- To process payments and issue receipts.
- To prevent abuse and secure our services.
3. Sharing
We share data only with processors that run our service: Razorpay (payments), our email provider, and Vercel (hosting). We do not sell personal data.
4. Retention
We keep enquiry and transaction records for as long as needed for the service and to meet legal/tax obligations, then delete or anonymise them. Scan input you submit is processed transiently and is not used to build a profile of you.
5. Your rights (DPDP)
You may request access to, correction of, or erasure of your personal data, and may withdraw consent, by emailing us. We will respond within the timelines required by law.
6. Grievance Officer
Email: ops@ninjasecurity.co.in. We address complaints promptly as required under the DPDP Act and IT Rules.
Template for review by your legal counsel before relying on it commercially. Replace company registration, address and officer details with your registered particulars.