Legal Policy

Privacy Policy

Last updated: August 2026 • UpgradeUX Studio

UpgradeUX ("UpgradeUX," "we," "us," or "our") is a web design, development, and AI automation studio based in Navi Mumbai, Maharashtra, India. This Privacy Policy explains how we collect, use, share, and protect information when you visit upgradeux.in (the "Site"), contact us, book a call, or engage us for services (the "Services").

By using the Site or our Services, you agree to the practices described in this policy. If you do not agree, please do not use the Site or Services.

01. Information We Collect

a) Information you give us directly

Contact/inquiry form: Name, email address, phone number (optional), project interest, and message.
Discovery call bookings: Name, email, and scheduling details, collected via our booking tool (Cal.com).
WhatsApp/email communication: Your phone number, name, and the content of messages you send us.
Project-related information: Once you become a client, we may collect brand assets, business content, login credentials (e.g. hosting, domain registrar, CMS), and material needed to deliver the project.
Payment-related information: Payment confirmations, UPI/bank transaction references, or billing details. We do not store full card numbers — online checkouts use certified PCI-compliant processors.

b) Information collected automatically

Standard website usage data (pages visited, browser type, device type, approximate location, referring site) via performance analytics tools to maintain site speed and security.

02. How We Use Your Information

We use your information strictly to:

Respond to inquiries and schedule discovery calls;
Prepare quotes, proposals, and contracts;
Design, develop, test, and deliver your project;
Communicate about project status, invoices, and support;
Improve our Site and Services;
Comply with legal and tax obligations.

We do not sell or monetize your personal data.

03. How We Share Information

We share information only where necessary, with:

Service providers & tools we use to run our business — e.g. Cal.com (scheduling), WhatsApp/Meta (messaging), email provider, code/hosting platforms (e.g. GitHub, Vercel), and payment processors.
Third parties you ask us to work with (e.g. your hosting provider, domain registrar).
Legal authorities, if required by law, court order, or to protect our legal rights.

We do not share your data with third parties for their own marketing purposes.

04. Cookies

Our Site may use minimal cookies or similar tools for basic functionality and to understand site traffic. You can control cookies through your browser settings; disabling them will not affect core content.

05. Data Storage & Security

We take reasonable technical and organisational measures to protect your information, in line with the Information Technology Act, 2000 and applicable Indian cybersecurity rules. All client API keys and access credentials are kept in encrypted vaults.

06. Data Retention

We retain personal data only as long as necessary for the purposes above — typically for the duration of our engagement plus a reasonable period afterward for legal, accounting, or support purposes — after which it is deleted or anonymised.

07. Your Rights

Subject to the Digital Personal Data Protection Act, 2023 (DPDPA) and applicable Indian law, you have the right to:

Access the personal data we hold about you;
Request correction or updating of inaccurate data;
Request erasure of your data (subject to statutory retention needs);
Withdraw consent for optional processing;
Raise a grievance regarding how your data is handled.

08. Children's Privacy

Our Site and Services are intended for businesses and individuals aged 18 and above. We do not knowingly collect data from minors.

09. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest revision. Continued use of the Site after changes means you accept the updated policy.