Your Digital Privacy is Our Priority.

Welcome to Aarti Web Technology ("Company", "we", "our", "us"). We operate under a strict Privacy-by-Design philosophy: data protection and security are not retrofitted afterthoughts, but foundational pillars embedded directly into the source code, database architecture, and deployment blueprints of our digital products.

By accessing our website, purchasing commercial software platforms from our marketplace, or engaging our engineering teams for custom web and mobile development, you acknowledge and agree to the information practices detailed in this binding policy.

We collect only the essential data required to architect, deliver, and maintain enterprise software solutions. Data collection is categorized as follows:

• Personal Identifiable Information (PII): Full legal names, professional corporate email addresses, phone numbers, WhatsApp handles, and company billing details submitted during consultation or product purchase.
• Technical Telemetry & Server Diagnostics: IP addresses, browser specifications, operating system versions, HTTP header telemetry, and system interaction logs automatically collected for security monitoring and load optimization.
• Application Source & Client Databases: For clients engaging our cloud migration or custom engineering services, client code and databases are stored in isolated encrypted environments accessible solely by NDA-bound engineers.

Your information is processed strictly for legitimate engineering and business operational purposes:

• Architecting, developing, and deploying custom software and mobile applications.
• Processing automated perpetual software license key generation and marketplace fulfillment.
• Executing secure financial transactions, invoicing, and tax compliance auditing.
• Facilitating 24/7 SLA technical support, emergency patch updates, and APM performance monitoring.
• Enforcing legal contracts and protecting against cyber fraud or unauthorized code distribution.

We implement a defense-in-depth security model across our infrastructure:

• Data in Transit: Mandatory HTTPS/TLS 1.3 encryption for all web requests and API endpoints.
• Data at Rest: AES-256 bit hardware-level disk encryption for production database instances.
• Access Controls (RBAC): Multi-Factor Authentication (MFA) and strict Role-Based Access Control enforcing least-privilege principles.
• Automated Audits: Bi-weekly automated vulnerability scanning, dependency auditing, and penetration testing.

As a global technology partner serving clients across the UK, USA, UAE, and India, our privacy frameworks comply with international regulations:

• GDPR (European Union): Full compliance with Article 17 (Right to Erasure) and Article 20 (Data Portability).
• Information Technology Act, 2000 (India): Adherence to Section 43A and Information Technology (Reasonable Security Practices) Rules.
• Cloud Infrastructure Partners: Our hosting providers (AWS, DigitalOcean, GCP) hold active SOC 2 Type II and ISO 27001 certifications.

Regardless of your geographic location, you possess explicit rights regarding your personal and corporate data:

• Right of Access: Request a complete export of all personal data held by our organization.
• Right to Rectification: Update or correct inaccurate professional contact or billing details.
• Right to Erasure ("Right to be Forgotten"): Request full deletion of your contact records from active databases.
• Data Portability: Obtain your source code, database dumps, and license keys in standard formats.

We utilize essential third-party service providers to deliver specialized functionality (e.g. AWS S3 for asset delivery, Stripe/Razorpay for payment processing). All third-party integrations are vetted for security compliance and operate under strict data processing agreements (DPAs).

We use essential cookies strictly for session authentication, CSRF token validation, and performance optimization. We do not use intrusive cross-site tracking cookies.

Aarti Web Technology maintains radical transparency regarding payment collection, billing milestones, perpetual licensing, and refund terms:

1. Payment Gateway & Processing Methods

All financial transactions are conducted through PCI-DSS Level 1 compliant payment gateways (Stripe, Razorpay) or direct institutional bank wire transfers (NEFT / RTGS / IMPS / SWIFT Wire). We accept major credit/debit cards, UPI, and international wire transfers. Invoices are issued in INR (for Indian entities) or USD (for international clients).

2. Milestone Payment Structure (Custom Projects)

Custom software engineering and mobile development projects adhere to strict milestone-based payment schedules outlined in the Master Services Agreement (MSA):

• Initial Deposit (30%): Due prior to discovery, database schema architecture, and sprint kickoff.
• Beta Milestone (40%): Due upon functional staging deployment, core API integration, and client demo review.
• Final Release & Handover (30%): Due prior to production launch, domain DNS pointing, and 100% GitHub repository transfer.

3. Commercial Marketplace Software Licensing

Pre-built software platforms (Aarti ERP, CRM LeadBot, Multi-Vendor Marketplace) are sold under a One-Time Perpetual Source Code License. Payment is 100% upfront before initial source code deployment assistance.

If you have questions regarding payment processing, invoice verification, refund requests, or data protection compliance, please contact our Legal & Billing Department: