Privacy Policy

Sumanix Solutions, based in Pune, Maharashtra, India, provides software development, white-label engineering, AI integration, e-commerce, CRM, and healthcare-technology-adjacent development services. This Privacy Policy explains how we collect, use, store, and share information in connection with our Services, our website, and our engagements with clients and their end users.

By using our website, engaging us as a service provider, or otherwise interacting with us, you agree to the terms of this Privacy Policy.

1. Information We Collect

We may collect the following categories of information:

• Contact & Business Information: Name, email, phone number, company name, billing/shipping address, and project requirements submitted via forms, email, or proposals.
• Technical Information: IP address, browser type, device identifiers, cookies, log data, and usage analytics collected through our website and tools.
• Client Project Data: Any data, content, credentials, or materials shared with us by clients for the purpose of delivering Services, including data processed on behalf of clients within applications we build or maintain (e.g., healthcare-technology platforms, e-commerce stores, CRM systems).
• Communications: Records of correspondence, support tickets, and feedback.

2. How We Use Information

We use collected information to:

• Deliver, maintain, and improve our Services;
• Communicate with clients and prospects regarding projects, invoices, and support;
• Develop, train, and improve internal tools, processes, and AI-assisted workflows, including the use of aggregated or de-identified data for internal analytics and service improvement;
• Market our Services, including showcasing anonymized or client-approved project outcomes, case studies, and testimonials;
• Comply with legal obligations and enforce our agreements;
• Protect against fraud, misuse, or security incidents.

3. Data Ownership & License

Unless otherwise agreed in a signed Statement of Work or contract:

• All source code, frameworks, internal tools, templates, and reusable components developed by Sumanix Solutions, including those built during a client engagement, remain the intellectual property of Sumanix Solutions except for the specific client-facing deliverable licensed to the client upon full payment.
• We retain a perpetual, royalty-free right to reuse general know-how, non-confidential methodologies, and non-identifiable code patterns developed during any engagement for future projects.
• We may use anonymized or aggregated data derived from client projects for internal benchmarking, AI model improvement, and service enhancement.

4. Sharing of Information

We may share information with:

• Sub-contractors/Team Members: Our internal team and vetted sub-contractors working under confidentiality obligations.
• Third-Party Service Providers: Cloud infrastructure (AWS), analytics, payment processors, and other vendors necessary to operate our Services.
• Legal & Compliance: Government authorities, regulators, or courts where required by law, or to protect our legal rights.
• Business Transfers: In connection with a merger, acquisition, restructuring, or sale of assets.

We do not sell personal information to third parties for their independent marketing purposes.

5. Data Retention

We retain client and project data for as long as reasonably necessary to fulfill the purposes outlined in this policy, including for ongoing support, legal, accounting, or dispute-resolution purposes, even after a project or engagement concludes, unless a client's contract specifies a shorter retention period in writing.

6. Client Responsibility for End-User Data

Where Sumanix Solutions builds or maintains an application, platform, or system on behalf of a client (e.g., healthcare, ride-hailing, e-commerce, or CRM platforms), the client is solely responsible for:

• Obtaining necessary consents from their own end users/patients/customers;
• Ensuring their use of the platform complies with applicable data protection laws (e.g., India's Digital Personal Data Protection Act 2023, HIPAA if applicable in the US, GDPR if applicable in the EU);
• Configuring the application appropriately for their regulatory environment.

Sumanix Solutions acts as a technology development vendor and, unless expressly agreed in writing, is not a data controller/fiduciary or data processor with independent compliance obligations toward the client's end users.

7. Limitation of Liability

To the maximum extent permitted by law, Sumanix Solutions shall not be liable for any indirect, incidental, special, or consequential damages, or any loss of data, revenue, or business, arising from:

• Use or inability to use our Services or any application we develop;
• Unauthorized access to data by third parties, except where caused by our gross negligence or willful misconduct;
• Client's failure to implement recommended security practices or compliance measures.

Our total liability for any claim arising from our Services shall not exceed the total fees paid by the client for the specific engagement giving rise to the claim.

8. Cookies & Analytics

Our website may use cookies and similar tracking technologies to improve user experience and gather analytics. Continued use of our website constitutes consent to our use of cookies.

9. Security

We implement reasonable technical and organizational measures to protect information; however, no method of transmission or storage is 100% secure, and we do not guarantee absolute security.

10. Your Rights

Subject to applicable law, individuals may request access to, correction of, or deletion of their personal information by contacting us at hello@sumanixsolutions.com. We will respond as required by applicable law, but reserve the right to retain information necessary for legitimate business, legal, or contractual purposes.

11. Changes to This Policy

We may update this Privacy Policy at any time at our sole discretion. Continued use of our Services or website after changes are posted constitutes acceptance of the updated policy. We are not obligated to individually notify clients or users of changes unless required by law.

12. Governing Law

This Privacy Policy shall be governed by the laws of India, and any disputes shall be subject to the exclusive jurisdiction of the courts in Pune, Maharashtra.