Privacy Policy

1.Who we are

Qreative Apps, a sole proprietorship owned and operated by Charanjeet, based in Punjab, India (“Qreative Apps”, “we”, “us”), is a custom software, SaaS, and mobile & web engineering studio. We design, build and maintain iOS, Android and web applications, custom APIs and integrations for clients worldwide.

We are the data controller for personal data collected through this website and in the course of our own business relationships. For data inside software we build or maintain for a client, the client is the controller and we act as their processor under the applicable services agreement.

Contact for all privacy matters: [email protected].

2.What this policy covers

This policy applies to:

• The website at qreativeapps.com and its subdomains.
• Enquiries, proposals, contracts, invoicing and support for our engineering services and plans.
• Our own products and apps, unless a product publishes its own privacy policy, in which case that policy applies to data collected inside the product.

It does not cover third-party websites or services we link to, or software we build for clients once it is delivered and operated by them.

3.Information we collect

Information you give us

• Contact details when you email us or use the contact form: name, email address, company and the content of your message.
• Project and account information when you engage us: business details, billing address, tax identifiers where required, project requirements, and access credentials you choose to share for repositories, hosting or app store accounts.
• Support requests including bug reports, screenshots, logs and device information you send us.

Payment information

Online payments are processed by our payment gateway provider. Card numbers, bank details and payment credentials are entered directly with the payment provider and are never stored on our systems. We receive a transaction reference, the amount, currency, payment status and the billing name and email needed to issue an invoice and reconcile the payment.

Information collected automatically

• Technical data such as IP address, browser type, device type, referring page, pages visited and approximate location derived from the IP address, collected through server logs and any analytics tool in use.
• Preferences stored in your browser, such as the display currency you select on our pricing pages and the time of your last free performance audit. These are kept in local storage on your device and are not sent to us.

Free website tools

When you enter a website address into one of our free tools, our server fetches that page once to run the checks and returns the result to your browser. We do not store the address, the page or the report. Your IP address is held in memory for up to one minute to limit how many checks can be run, then discarded. The performance audit additionally asks Google’s PageSpeed Insights service for lab metrics directly from your browser, which sends the website address and your IP address to Google under Google’s privacy policy. Browser-only tools such as the image compressor, colour contrast checker and JSON formatter process your data entirely on your device and send nothing to us.

Client project data

While building or maintaining software for a client we may have access to end-user data held in that software. We process it only on the client’s documented instructions, only to the extent needed to perform the work, and under the confidentiality and data-processing terms of the services agreement.

4.How we use your information

• To respond to enquiries and prepare proposals and quotes.
• To deliver the services and plans you purchase, including access to repositories, environments and support channels.
• To issue invoices, process payments, handle refunds and keep the accounting records the law requires.
• To provide developer support and communicate about releases, incidents and maintenance windows.
• To operate, secure and improve this website, including detecting abuse and diagnosing errors.
• To comply with legal obligations and to establish, exercise or defend legal claims.

We do not sell personal data, and we do not use your data for third-party advertising. We only send marketing email with your consent, and every such message includes a way to opt out.

5.Legal bases for processing

Where the EU or UK General Data Protection Regulation applies, we rely on the following bases:

• Contract: to respond to your request before a contract and to perform the services you have purchased.
• Legal obligation: tax, accounting and anti-fraud requirements.
• Legitimate interests: running and securing our website and business, and communicating with existing clients about services they use, balanced against your rights.
• Consent: optional marketing communications and any non-essential cookies, which you can withdraw at any time.

For individuals in India we process personal data in accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and the rules made under them.

6.How we share information

We share personal data only with service providers who need it to run our business, each bound by contract to protect it:

• Payment processing: our payment gateway provider, to take payments and issue refunds.
• Hosting and infrastructure: the providers that host this website, our repositories, build pipelines and cloud environments.
• Email and communication tools used to answer enquiries and provide support.
• Accounting and invoicing tools used to issue invoices and keep financial records.
• Professional advisers and authorities where required by law, to enforce our terms, or to protect the rights, property or safety of any person.

We may share data with a successor in the event of a merger, acquisition or sale of assets, subject to this policy. We do not share personal data with data brokers or advertisers.

7.International transfers

We are based in India and work with clients and service providers worldwide, so personal data may be transferred to and processed in countries other than your own. Where data protection law requires it, we use recognised safeguards such as standard contractual clauses or transfer to countries with an adequacy decision, and we require our providers to do the same.

8.How long we keep data

• Enquiries that do not lead to a project: up to 24 months, so we can respond if you come back.
• Client records, contracts and support history: for the life of the relationship and up to 7 years afterwards, to meet accounting, tax and limitation-period requirements.
• Invoices and payment records: as long as tax law requires, typically 8 years in India.
• Server logs: normally no longer than 90 days unless needed to investigate an incident.
• Access credentials shared for a project: deleted or revoked at the end of the engagement, and we ask you to rotate them.

9.Security

We protect personal data with measures appropriate to the risk, including encryption in transit, encrypted storage for credentials, multi-factor authentication on our accounts, least-privilege access to client systems, dependency and vulnerability monitoring, and secure development practices such as code review and automated testing. No method of transmission or storage is completely secure; if we become aware of a breach affecting your data we will notify you and any regulator as the law requires.

10.Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you and receive a copy.
• Correct inaccurate or incomplete data.
• Request deletion of your data, subject to our legal retention obligations.
• Restrict or object to certain processing, including direct marketing.
• Receive your data in a portable format.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with your data protection authority.

To exercise any right, email [email protected]. We will verify your identity and respond within 30 days, or sooner where the law requires. We will not discriminate against you for exercising your rights.

If you are an end user of software we built for a client, please contact that client directly; we will assist them in responding to your request.

11.Cookies and local storage

This website uses only strictly necessary storage: browser local storage to remember your chosen display currency and the time of your last free audit, and any cookies our hosting provider sets for security and load balancing. We do not use advertising cookies. If we introduce analytics that require consent, we will ask for it first through a banner you can decline.

You can clear or block storage in your browser settings; the site will continue to work, defaulting to US dollars.

12.Children

Our services are for businesses and adults. We do not knowingly collect personal data from anyone under 18 through this website. If you believe a child has provided us with personal data, contact us and we will delete it.

13.Third-party links and services

Our website and products may link to third-party sites and services, including app stores, payment pages and our own product websites. Their privacy practices are governed by their own policies, which we encourage you to read.

14.Changes to this policy

We may update this policy as our services or the law change. The “Last updated” date at the top shows the current version. For material changes we will notify active clients by email. Continued use of our website or services after a change means you accept the updated policy.

15.Contact us

Qreative Apps (Sole Proprietorship)
Proprietor: Charanjeet
Punjab, India
Email: [email protected]
Web: qreativeapps.com/contact