Privacy Policy
Last updated: August 11, 2026
1. Overview
Infinite Castle ("we", "our", or "us") respects your privacy and is committed to protecting digital personal data. This Privacy Policy outlines how we collect, use, store, and process personal information when you visit or interact with our website at infinitecastle.dev (the "Site").
We adhere to applicable data protection laws, including India's Digital Personal Data Protection (DPDP) Act, 2023, the Information Technology Act, 2000 (and applicable IT Rules), and international standards such as the General Data Protection Regulation (GDPR).
2. Information We Collect
We strictly practice data minimization and collect only the information necessary to fulfill your requests and operate the Site reliably:
- Contact & Inquiry Data: Information you voluntarily provide when filling out our contact forms, including your full name, business email address, phone number, organization name, and message payload.
- Basic Usage & Technical Data: Standard HTTP web server logging data, such as IP addresses, browser engine types, operating system telemetry, referring URLs, and timestamp headers.
Note: We do not collect sensitive personal data or financial payment credentials on this Site.
3. How We Use Information
We process the personal information we collect exclusively for lawful business purposes:
- To respond directly to your technical inquiries and schedule engineering consultations.
- To communicate project updates and business correspondence requested by you.
- To monitor, secure, and maintain the infrastructure integrity of our Site.
- To satisfy statutory and legal compliance obligations under Indian law.
5. Data Sharing & Processors
We do not sell, rent, or trade your personal data. We disclose information only to trusted service providers who assist us in operating our Site under strict confidentiality agreements:
- Cloud Infrastructure & Hosting: Reputable third-party cloud infrastructure and hosting providers for web application delivery and data storage.
- Form Processing & Communications: Secure email and form service providers for relaying business inquiries directly to our team.
- Legal Authorities: When required by statutory subpoena, court order, or regulatory mandate under Indian law.
6. Data Retention
Contact inquiry data is retained only for as long as necessary to fulfill the specific operational purpose for which it was submitted, or as mandated by legal, tax, and accounting retention schedules under applicable Indian law. Once data is no longer required, it is securely purged or anonymized.
7. Your Rights (DPDP Act & International Frameworks)
Under India's Digital Personal Data Protection Act, 2023 (and subject to applicable GDPR/CCPA regulations for international visitors), as a Data Principal you possess specific statutory rights:
- Right to Access: Request a summary of personal data being processed and the processing activities undertaken.
- Right to Correction & Erasure: Request the correction of inaccurate or misleading data, or the deletion of personal data no longer necessary for the original purpose.
- Right of Grievance Redressal: Submit grievances regarding data processing directly to our designated Grievance Officer.
- Right to Nominate: Nominate an individual to exercise your data principal rights in the event of incapacity or death.
To exercise any of these rights, please contact our Grievance Officer at info@infinitecastle.dev.
8. Statutory Grievance Officer Disclosure
In accordance with the Information Technology Act, 2000, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the DPDP Act, 2023, the details of our designated Grievance Officer are set forth below:
Designation: Data Protection & Statutory Grievance Officer
Entity: Infinite Castle
Email: info@infinitecastle.dev
Postal Address: New Wadaj, Ahmedabad, Gujarat - 380013, India
Response Commitment: We acknowledge receipt of all formal data privacy grievances within 48 hours and commit to investigating and resolving valid requests within 30 days of receipt.
9. International Data Transfers
As an entity based in Gujarat, India, your data may be processed on secure infrastructure located in India or managed globally by cloud service providers adhering to standard data protection clauses and technical security controls.
10. Changes to This Policy
We may update this Privacy Policy periodically to reflect operational, legal, or regulatory modifications. Updates will be posted on this page with an updated "Last updated" date.
11. Contact Us
For general privacy inquiries or questions regarding our data practices, please reach out to us at info@infinitecastle.dev.