Privacy Policy

Personal Information: Name, email address, phone number, and company details when you contact us or use our services.

Usage Data: Information about how you interact with our website, including pages visited, time spent, and navigation patterns.

Technical Data: IP address, browser type, device information, and operating system.

Cookies: This website uses cookies and similar technologies to enhance your browsing experience. The Itoby mobile app uses none — it stores only a sign-in token and your appearance preference on your device.

Your account: your email address, the role your organisation has been given, and the name and contact details recorded against your account.

If you are billed through IIPL Renting: your lease and the unit it covers, the invoices raised against it, payments made and their gateway reference, receipts issued, maintenance complaints you raise together with any photographs or files attached to them, and documents shared with you or uploaded by you.

Activity: actions taken inside the product — who changed what, and when — are written to an audit log, which is how a billing or complaint record can be explained later.

The app carries no advertising, no analytics and no tracking. We do not sell personal information or share it with data brokers.

To provide and maintain our services, including web development, mobile app development, and digital marketing solutions.

To communicate with you about projects, updates, and promotional offers.

To improve our website and services based on your feedback and usage patterns.

To comply with legal obligations and protect our rights.

We implement industry-standard security measures to protect your personal information.

All data transmissions are encrypted using SSL/TLS protocols.

Access to personal data is restricted to authorized personnel only.

We regularly review and update our security practices to ensure data protection.

Access: You have the right to request copies of your personal data.

Rectification: You can request correction of inaccurate or incomplete data.

Erasure: You can request deletion of your personal data under certain circumstances.

Data Portability: You can request transfer of your data to another service provider.

Write to info@itobyinfotech.com and we will respond within thirty days. We may ask you to confirm your identity first, so that we are not handing your records to someone else.

Under India's Digital Personal Data Protection Act, Itoby Infotech Pvt Ltd is the Data Fiduciary for this information, and Sector-4, Noida, UP, India is where a grievance should be sent. If we do not resolve it, you may escalate to the Data Protection Board of India.

Supabase hosts the database, authentication and file storage behind the Itoby app. Data is held in their managed infrastructure.

Razorpay processes card, UPI and netbanking payments. Payment details are entered on Razorpay's own checkout and are never handled by us. We receive and store only the outcome and its reference, so an invoice can be marked paid and a receipt issued.

Neither is given your data for their own purposes, and we do not add others without changing this page first. We will also disclose information where the law requires it, or to establish or defend a legal claim.

Our providers may store and process data outside India, including in the European Union and the United States. Where personal data leaves the country it was collected in, it is protected by the contractual terms we hold with those providers.

We do not sell your personal information to third parties.

Enquiries: up to two years from your last contact with us, unless you ask for removal sooner.

Account and rental records: for as long as your lease or relationship with us is active.

Invoices, payments and receipts: eight years after the financial year they belong to, as Indian tax law requires. These cannot be deleted on request while that period runs.

Audit log entries: for as long as the records they explain are held.

Itoby accounts are created by an administrator at your organisation rather than by self sign-up, so they are closed the same way. Ask your administrator, or write to us directly.

To request deletion, email info@itobyinfotech.com from the address on the account with the subject "Delete my account". We will action it within thirty days.

Closing an account removes your access and your profile.

Financial records we are required to retain — invoices, payments and receipts — are kept for the period described above and then deleted.

The Itoby app is a business tool. It is not directed at children, it is not designed for them, and we do not knowingly collect information from anyone under 18.

If you believe a child has given us information, write to us and we will remove it.

We may update this Privacy Policy from time to time to reflect changes in our practices.

Significant changes will be communicated via email or prominent website notice.

Continued use of our services after updates constitutes acceptance of the revised policy.

We encourage you to review this policy periodically.