Privacy Policy

Information you provide directly

When you contact us, submit a project inquiry, apply for a position, or engage our services, we collect: full name, email address, phone number, company name, job title, project requirements and budget details, résumés and employment history (for recruitment), and billing and invoicing information.

Information collected automatically

When you visit our website we automatically collect: IP address, browser type and version, operating system, pages visited and time spent, referring URLs, and device identifiers. This data is collected via cookies, web beacons, and similar tracking technologies.

We use your personal data for the following purposes:

• →Preparing and delivering project proposals and service engagements
• →Account management, invoicing, and payment processing
• →Customer support and project communication
• →Recruitment screening and candidate evaluation
• →Sending service updates, newsletters, and marketing communications (with your consent)
• →Improving website performance and user experience through analytics
• →Complying with applicable legal and regulatory obligations
• →Exercising or defending legal claims

We process your personal data under the following legal bases in accordance with India's Digital Personal Data Protection Act (DPDP Act, 2023) and other applicable laws:

• →Consent — where you have given clear, informed consent (e.g. marketing communications, cookies)
• →Contractual necessity — where processing is required to fulfil a service agreement with you
• →Legitimate interests — for fraud prevention, website security, and improving our services
• →Legal compliance — where processing is required to meet statutory or regulatory obligations

We do not sell or rent your personal information. We may share your data with:

• →Cloud hosting and infrastructure providers (e.g. AWS, GCP, Azure) under data processing agreements
• →Payment gateway and financial service providers for billing purposes
• →Analytics and marketing platforms (e.g. Google Analytics) under appropriate safeguards
• →Professional advisers including legal counsel, auditors, and accountants
• →Government authorities, regulators, or law enforcement where required by applicable law
• →Business successors in the event of a merger, acquisition, or asset transfer

International transfers

Where personal data is transferred outside India, we ensure appropriate safeguards are in place in accordance with the DPDP Act and applicable cross-border data transfer requirements.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

• →Active client and project data — for the duration of the engagement and applicable warranty period
• →Invoicing and financial records — 7 years in accordance with Indian accounting standards
• →Recruitment data — 1 year from the date of last application activity unless hired
• →Marketing consent records — until consent is withdrawn
• →Website analytics data — as per vendor retention settings (typically 14–26 months)

We implement appropriate technical and organisational measures to protect your personal data, including:

• →TLS/SSL encryption for data in transit
• →Encryption of sensitive data at rest where applicable
• →Role-based access controls and least-privilege principles
• →Regular security assessments and vulnerability patching
• →Employee confidentiality obligations and security awareness training
• →Incident detection, response, and breach notification procedures

No method of transmission or storage is 100% secure. If you become aware of any security vulnerability related to our services, please contact us immediately at privacy@kodiacsolutions.com.

Under applicable data protection law, you have the right to:

• →Access — request a copy of the personal data we hold about you
• →Correction — request correction of inaccurate or incomplete data
• →Erasure — request deletion of your personal data, subject to legal obligations
• →Withdrawal of consent — withdraw consent for processing at any time without affecting prior lawful processing
• →Grievance submission — lodge a complaint with our Grievance Officer
• →Nomination — nominate another individual to exercise rights on your behalf in case of death or incapacity

To exercise any of these rights, contact our Grievance Officer at grievance@kodiacsolutions.com. We will respond within the timelines prescribed by applicable law.

We use essential, analytics, and performance cookies to operate and improve our website. You may manage cookie preferences through your browser settings or our cookie consent tool. Disabling certain cookies may affect website functionality. For full details, see our Cookie Policy.

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The 'Last Updated' date at the top of this page will reflect the most recent revision. Continued use of our website after any update constitutes acceptance of the revised policy.

For any privacy-related queries, requests, or complaints, please contact: