Governance & Privacy Transparency•Review Draft — Subject to Final Owner Approval

Privacy Policy

Effective Date: October 2026 · Official Brand: Zelvori (https://zelvori.software) · Contact: hello@zelvori.software

Notice to Visitors & Legal Counsel: This Privacy Policy accurately reflects the actual technical implementation of the Zelvori website as a static GitHub Pages site with client-side mailto workflows. Official registration particulars and final statutory determinations under the Digital Personal Data Protection Act, 2023 are subject to formal legal review.

01. Scope & Commitment

Zelvori (“we”, “our”, or “us”) operates the digital engineering website located at https://zelvori.software. We design and engineer secure digital products, web applications, and custom software systems.

We believe privacy must be engineered into systems from the ground up, not merely claimed in marketing copy. This Privacy Policy details what information is collected, how it is handled, how our client-side enquiry workflows operate, and your rights under applicable data protection frameworks.

02. Information We Genuinely Collect

Because our website is engineered using a static architecture, our data collection is strictly minimal:

A. Project Enquiries via Mailto (Client-Side Only)

When you use our Project Inquiry Builder at /contact/, your inputs (name, email, company, selected service, estimated budget, message) are compiled into a standard mailto: link on your own device. The form does not transmit your details to any Zelvori server or web database. Your email client opens a pre-composed message, and data is only transmitted to us if you choose to click send in your email application.

B. Direct Email Communications

If you contact our engineering desk directly at hello@zelvori.software, we retain your email address and message thread solely for answering your technical inquiry, assessing project feasibility, and executing commercial agreements.

C. Standard Infrastructure Access Logs

Like all websites hosted on cloud content delivery networks (GitHub Pages and any upstream CDN), standard network access logs (such as visitor IP addresses, browser user-agent headers, and request timestamps) may be processed transiently by the infrastructure provider for DDoS mitigation, edge security, and network diagnostics. Zelvori does not correlate infrastructure logs with individual user identities.

03. Cookies, Tracking Pixels & Telemetry

Zero Tracking Architecture

The Zelvori website does not set tracking cookies, use third-party analytics pixels (such as Google Analytics or Meta Pixel), or run behavioral session recorders (such as Hotjar or Clarity). You do not need to accept cookie banners because we do not set tracking cookies on your device.

04. Outbound Affiliate Links & Hostycare Referrals

Our website includes educational hosting recommendations and referral links to third-party web hosting providers, specifically Hostycare (/hosting/hostycare/ and /affiliate-disclosure/).

When you click an affiliate link:

  • You leave the Zelvori website and navigate to Hostycare's external domain (hostycare.com or affiliate.hostycare.com).
  • The destination URL contains referral campaign parameters (such as tid1=zelvori) to credit Zelvori with any qualifying purchase.
  • Zelvori does not receive your payment credentials, credit card numbers, billing address, or account passwords from Hostycare.
  • All subsequent interactions, account creation, data storage, and hosting payments are governed entirely by Hostycare's independent Privacy Policy and Terms of Service.

05. Digital Personal Data Protection Act (DPDP Act, 2023) Assessment

As an India-founded digital product engineering partner, Zelvori is monitoring the implementation of India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the draft Digital Personal Data Protection Rules, 2025 published by the Ministry of Electronics and Information Technology (MeitY).

Our Current Data Fiduciary Approach:

  • Specified Purpose: Contact details are processed only to respond to project enquiries or execute agreed engineering contracts.
  • Data Minimisation: We do not ask for personal identification numbers, government IDs, or sensitive financial data on our public site.
  • Withdrawal of Consent: You may request the deletion of your email contact records at any time by writing to our designated address.
  • Legal Review Status: Full statutory enforcement dates, Data Protection Board notifications, and formal consent manager integrations are subject to ongoing MeitY commencement schedules and independent legal counsel review.

06. Client Confidentiality & Project Data Isolation

When a client enters a formal engagement with Zelvori:

  • All proprietary source code, application schemas, and business workflows are protected under bilateral Non-Disclosure Agreements (NDAs).
  • Client source code is hosted exclusively in client-approved, access-restricted repositories (e.g. client GitHub/GitLab orgs).
  • Production secrets, database credentials, and cloud API keys are never committed to public version control or stored on the public marketing site.
  • Detailed architecture controls and SSDLC gates are documented in our Security & Trust Centre.

07. Data Retention & Deletion

Email correspondence regarding exploratory enquiries that do not advance to a signed contract is purged after 12 months, or sooner upon written request. Contractual and financial records for paid projects are retained only as required by statutory accounting and tax regulations.

08. Privacy Inquiries & Grievance Redressal

To exercise your data privacy rights, request deletion of your email correspondence, or raise questions regarding our data handling:

Zelvori Privacy Desk

Email: hello@zelvori.software

Response Window: Typical reply within 24–48 business hours.