1. Introduction & Executive Commitment
Throughout Technologies Pvt. Ltd. ("Throughout Technologies", "we", "us", or "our"), established in 2017 in Indore, Madhya Pradesh, India, operates as an enterprise software engineering studio and technology consultancy. We are committed to safeguarding the confidentiality, integrity, and privacy of information entrusted to us by our clients, partners, website visitors, and users of our digital platforms (including a4tool, Hello24x7, Gapalyze, and Sweetpay).
This Privacy Policy explains what information we collect, why we collect it, how it is processed and stored, and your rights under applicable data protection laws, including the General Data Protection Regulation (GDPR - Regulation (EU) 2016/679), the California Consumer Privacy Act (CCPA/CPRA), and the Digital Personal Data Protection Act (DPDP Act, India).
2. Information We Collect
We collect information across the following categories:
A. Information You Directly Provide
- Client Inquiries & Consultations: Name, work email address, company name, phone number, project scope, budget range, and technical specifications submitted via our contact forms or consultation booking calendars.
- Job Applicants & Developers: Resume/CV, GitHub profiles, LinkedIn URLs, portfolios, employment history, and contact details submitted via our Careers portal.
- Account & Identity Credentials: For users of our SaaS products (e.g., a4tool), we store user names, work email addresses, encrypted password hashes, and OAuth profile tokens.
B. Client Intellectual Property & Source Code
In the course of executing software engineering contracts, Dedicated Squads, and custom solutions:
- Code Repositories: We access client repositories exclusively within client-managed organizations (e.g., GitHub Enterprise, GitLab, Bitbucket) or isolated Throughout tenant vaults.
- Confidentiality: All client code, database dumps, proprietary algorithms, and API secrets are protected under strict Non-Disclosure Agreements (NDAs) and never used for public model training or shared across tenant boundaries.
C. Automatically Collected Technical Data
- Device & Connection Telemetry: IP address, browser type and version, operating system, device screen resolution, referring URLs, and session timestamps.
- Usage Metrics: Pages viewed, navigation flows, and feature engagement monitored via privacy-compliant analytics.
3. How We Use Your Information
We process your data strictly for legitimate business purposes:
- Contract Performance: Delivering full-stack software development, architectural consulting, dedicated developer staffing, and technical support.
- Communications & Triage: Responding to sales inquiries, technical RFPs, scheduling architecture reviews, and sending project milestone notifications.
- Security & Zero-Leak Enforcement: Monitoring platform logs for unauthorized intrusion, DDoS attempts, credential stuffing, and code exfiltration.
- Legal & Regulatory Compliance: Fulfilling statutory tax accounting, audit compliance, and contractual obligations.
4. Data Security & Storage Architecture
We enforce rigorous technical and organizational measures (TOMs):
- Encryption in Transit & at Rest: All data exchanged over public networks is encrypted via TLS 1.3 / HTTPS. At-rest databases and backups utilize AES-256 encryption.
- Role-Based Access Control (RBAC): Access to client project assets is restricted strictly to assigned engineers and project leads using multi-factor authentication (MFA).
- Automated Dependency Scans: Regular vulnerability scans, Dependabot alerts, and static code analysis (SAST) integrated into our CI/CD pipelines.
5. Third-Party Sub-Processors
We work only with vetted cloud infrastructure and service providers:
- Cloud Infrastructure: Amazon Web Services (AWS), Google Cloud Platform (GCP), Vercel Inc.
- Database & Queue Providers: PostgreSQL Cloud Clusters, Redis Cloud.
- Email & Communications: Google Workspace, AWS SES, Resend.
- Payment & Invoicing: Stripe Inc., Razorpay.
6. Your Data Rights
Depending on your jurisdiction (GDPR, CCPA, DPDP), you possess the following rights:
- Right to Access & Portability: Request a copy of the personal data we hold about you in a structured format.
- Right to Rectification: Request correction of inaccurate or incomplete records.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data where retention is no longer legally required.
- Right to Object & Restrict Processing: Withdraw consent for marketing communications at any time.
To exercise any of these rights, email our Data Protection Officer at: privacy@throughouttechnologies.com.
7. Contact Information & Governance
Throughout Technologies Pvt. Ltd.
Corporate Headquarters: Indore, Madhya Pradesh, India (Pin 452001)
Email: hello@throughouttechnologies.com
Website: https://throughouttechnologies.com
Phone: +91 96303 03150