Discover
000
IBOY

Privacy Policy

Privacy that respects your data.

Last Updated: April 2026

This page explains what we collect, why we collect it, and how we protect it when you use iBOY services, forms, and digital products.

By accessing this website or submitting a project request, you agree to this policy and consent to processing required for communication, project planning, and service delivery.

01 / Data We Collect

We collect the following categories of personal data depending on how you interact with us:

  • Contact Data: Name, email, phone, and company name submitted via forms.
  • Project Data: Requirements, briefs, reference links, and shared assets.
  • Billing Data: Billing address and GST number. We do not store payment credentials; these are handled by encrypted third-party gateways.
  • Usage Data: IP address, browser type, device type, and session duration collected automatically.
  • Communication: Emails and chat records related to project delivery.

We do not collect sensitive personal data (Aadhaar, IDs, etc.) unless explicitly required for a specific legal engagement.

02 / How We Use Data

Your data is processed for:

  • Service Delivery: Managing workflows and coordinating milestones.
  • Legal/Tax: Complying with Indian accounting and GST filing requirements.
  • Security: Monitoring access and maintaining system integrity.
  • Marketing: Newsletters and tech insights (with explicit opt-in only).

Legal Basis (DPDPA 2023):

Consent, Contractual Necessity, Legal Obligation, and Legitimate Interest.

03 / Storage & Security

Stored via Supabase (Postgres/RLS) and Vercel edge infrastructure. Data is primarily stored in Singapore and the United States.

Breach Protocol: Confirmed breaches result in notification within 72 hours to the email address on record.

We enforce JWT-based auth, RLS boundaries, and TLS 1.2+ encryption for all data in transit.

04 / Your Rights

Under DPDPA 2023, you hold the right to Access, Correction, Erasure, Data Portability, Consent Withdrawal, and Nomination.

Grievance Officer (India):

Jai, Founder — iBOY Innovation Hub

Email: hello@iboyhub.com

05 / Cookies & Analytics

We use Vercel Analytics (privacy-preserving, no cross-site tracking). No ad-tracking pixels (Meta/Google) are active on this site.

Disabling optional cookies via your browser will not affect site functionality.

06 / Retention Schedule

Contact / Inquiry12 Months
Active ProjectDuration + 12m
Billing Records5 Years
NewsletterUntil Unsubscribed

07 / Third-Party Data Sharing

We never sell your data. Shared only with: Supabase, Vercel, Razorpay/Stripe, and Google Workspace. All bound by strict data processing agreements.

08 / Children's Data

Not directed at individuals under 18. If data has been submitted by a minor without consent, contact hello@iboyhub.com for prompt erasure.

09 / Marketing & Newsletters

Subscription form requires explicit consent. You may unsubscribe via the email link or by contacting us. Unsubscription is processed within 48 hours.

10 / Cross-Border Transfers

By using our services, you consent to data processing in Singapore and the US. We ensure safeguards consistent with Indian data protection laws.

11 / Policy Updates

Material changes trigger email notification to active clients 14 days before the change takes effect. Continued use constitutes acceptance.

12 / Contact & Grievance

Access/Erasure: hello@iboyhub.com

Security: support@iboyhub.com

Verification may be required before processing requests.

Security posture

JWT auth · RLS · least privilege

We isolate admin operations, require authenticated access, and rely on Supabase RLS for row-level boundaries.

Data minimization

Only what we need

We keep forms lean and do not ask for sensitive data unless required for billing or access control.

Transparency

Clear retention + access

You can request export, correction, or deletion. We’ll explain exactly what is stored and why.

Contact

For privacy requests (access, correction, deletion) email hello@iboyhub.com. For security disclosures, email support@iboyhub.com.

Response time

We aim to respond within 7 business days.

Verification

We may verify identity before processing requests.