Privacy policy

This website is run by Quvor Enterprises (“Quvor”, “we”, “us”), a product engineering studio based in Mumbai, India. We are responsible for the personal data described in this policy.

Contact for anything in this policy: contact@quvor.com.

This policy covers this website, the enquiry form and the emails you send us. Work we do for clients is covered by our contract with each client, including how we handle any personal data we process on their behalf.

Emails you send us. If you write to us, we receive your name, email address and anything you choose to include, such as details about your company or project.

How the site is used. We count visits with Umami, an analytics service that uses no cookies. It records the pages visited, how you arrived, your approximate country, and your device and browser type. It does not store your IP address, and it cannot follow you across other websites.

Preferences kept in your browser. The site remembers your light or dark theme in your browser’s local storage. This stays on your device and is never sent to us.

The enquiry form. If you use it, we receive what you enter: your name, work email, company or product (optional), your stage, the problem you describe, your timeline and your budget range. We treat it exactly like an email to us. The site has no accounts or newsletter. We do not ask for, and do not want, sensitive personal data such as health, financial or identity-document information.

Server logs. Like any web server, ours records each request, including the IP address and browser type, to keep the site secure and to stop spam through the enquiry form.

We use the information to:

• reply to your email or enquiry and discuss possible work together;
• understand which pages are useful, so we can improve the site;
• keep the site secure and working;
• meet our legal obligations.

Our legal bases, where the GDPR applies, are: our legitimate interest in answering enquiries and running our business (emails), and in understanding how the site is used (analytics without cookies); and legal obligation where the law requires us to keep records. Under India’s Digital Personal Data Protection Act, 2023, we rely on your consent or on the legitimate uses the Act allows, such as when you voluntarily send us your details to get a reply.

We do not send marketing emails from this website, and we do not use your data for automated decisions that affect you.

This site sets no cookies. Our analytics work without them.

Your theme is stored in local storage, not as a cookie, and only your browser can read it.

We do not sell or rent personal data, and we do not share it for advertising.

We use a small number of service providers who handle data for us under contract: Cloudflare (hosting the site and protecting it from spam and attacks), Umami (analytics), Zoho ZeptoMail (delivering enquiries from the form to us), and our email provider. They may only use the data to provide their service to us.

We may disclose information if the law requires it, or to protect our rights, our clients or the public.

We keep emails and enquiries for as long as we need them for your enquiry or our work together, and as long as the law requires. We keep server logs only as long as we need them to keep the site secure.

Umami stores analytics data in the EU. We keep it for as long as it helps us understand how the site is used.

Access to personal data is limited to the people who need it and protected by strong credentials. We keep our systems updated and back them up securely. No system is perfectly secure, but we take care proportionate to the data we hold.

Depending on where you live, you can ask us to:

• tell you what personal data we hold about you and give you a copy;
• correct or update it;
• delete it;
• stop or restrict using it, or object to how we use it;
• withdraw any consent you have given, at any time.

To make a request, email contact@quvor.com. We will reply within one month, or sooner where the law requires. If you are unhappy with our answer, you can complain to your local data protection authority, or in India to the Data Protection Board of India once it is in operation.

We are based in India, and our service providers may process data in other countries, including the United States. Where the GDPR applies, we rely on appropriate safeguards for these transfers, such as the European Commission’s standard contractual clauses used by our providers.

This website is for businesses and is not aimed at children. We do not knowingly collect personal data from anyone under 18.

The site links to other websites, such as LinkedIn and products we have built. Their privacy practices are their own; please read their policies.

If we change this policy, we will update it here and change the date at the top. If the change is significant, we will say so on the site.