Privacy Policy

Global Privacy Policy

Effective Date: February 24, 2026

Applicability: Global (India, USA, EU, UK)

At INSIDER 360, we value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website insider360x.com or engage our software consultancy services. At INSIDER 360, we operate as a global software consultancy. This policy outlines our commitment to data protection and privacy under the Indian DPDP Act (2026), the EU/UK GDPR, and US State Laws (CCPA/CPRA).

1. Information We Collect

We collect information that identifies, relates to, or could reasonably be linked to you (“Personal Data”):

• Identity Data: Full name, business title, and legal entity name (e.g., your client’s company name).
• Contact Data: Email address, phone number, and physical business address.
• Transaction Data: Details about payments made to/from you and services purchased from us (including records of high-value transactions).
• Technical Data: IP address, browser type, time zone setting, and location data (collected via our website and during Video KYC processes).
• Project Data: Source code, API keys, and database structures provided to us for the purpose of software development and consultancy.

2. How We Collect Your Data

• Direct Interaction: Information you provide by filling in forms on our site or communicating with us via email, chat, or phone.
• Automated Technologies: As you interact with our website, we may automatically collect Technical Data about your equipment and browsing patterns.
• Third Parties: We may receive data from payment processors (like Wise) and identity verification partners (like IDfy) during the business onboarding and KYC process.

3. Purpose of Data Processing

Under the DPDP Act 2026, we process your data based on Consent or Contractual Necessity. We use your data to:

• Provide software consultancy and development services.
• Manage our relationship with you (invoicing, support, and legal notices).
• Comply with statutory obligations (GST reporting, RBI/FEMA regulations, and AML/KYC requirements).
• To facilitate secure international payments through authorized Payment Aggregator – Cross Border (PA-CB) entities, ensuring compliance with RBI’s 2026 reporting standards.
• Ensure the security of our website and services.

4. International Compliance Standards

GDPR (EU & UK)

For clients in the EEA/UK, we process data under Contractual Necessity and Legal Obligation. We use Standard Contractual Clauses (SCCs) for transferring data to our development center in Bangalore, India.

CCPA/CPRA (United States)

• No Sale of Data: We do not sell or share your personal or business data for behavioral advertising.
• Right to Delete: You may request data deletion, subject to our statutory financial retention requirements.
• Non-Discrimination: We will not discriminate against any client for exercising their privacy rights.

5. Data Sharing and Transfers

• Service Providers: We share data with trusted partners who assist in our operations (e.g., ICICI Bank for payments, AWS for hosting, and our Legal Counsel).
• International Transfers: As a software exporter, your data may be stored on servers located outside of India (e.g., US-based cloud servers). We ensure all transfers comply with the cross-border rules of the DPDP Act 2026.
• Reporting to Specified Authorities: We share transaction data with ICICI Bank (Authorized Dealer Category-I) to ensure the legal closure of export entries in the EDPMS portal.
• Legal Obligations: We may disclose data if required by law or to protect the safety of INSIDER 360.

6. Data Security

We have implemented robust technical and organizational security measures, including:

• Encryption: Use of SSL/TLS certificates for all data in transit and AES-256 for data at rest.
• Access Control: Limiting data access to only those employees or contractors who have a business “need-to-know.”

7. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes we collected it for, including satisfying legal, accounting, or reporting requirements.

• Financial Records: Retained for 7-8 years to comply with Indian Tax and RBI/FEMA audit laws.
• Project Data: Source code and technical assets are typically deleted 180 days after project termination unless otherwise agreed.

8. Your Rights (Data Principal Rights)

Under the DPDP Act 2026, GDPR, and CCPA, you have the right to:

• Information: To know what data we hold about you.
• Correction/Erasure: To update or delete your data (subject to legal retention).
• Withdraw Consent: You may withdraw your consent for processing at any time.
• Grievance Redressal: To report concerns to our Grievance/Data Protection Officer.

9. Cookies and Tracking

Our website uses cookies to enhance user experience. You can set your browser to refuse cookies, though some site functionalities may be affected.

10. Grievance Redressal & Data Protection Officer (DPO)

In compliance with global privacy laws, for any queries or to exercise your rights, contact:

• • Grievance Officer: MEGHA J
  • Designation: Proprietor & Designated Data Protection Officer, INSIDER 360
  • Response Timeline: Acknowledgment within 48 hours; resolution within 15 business days.
  • Registered Business Address: 79, 1st Main, 4th Cross, Kempegowda Nagar, Bengaluru (Bangalore) Urban, Karnataka, 560091
  • Operational Hours: 10:00 AM – 6:30 PM IST (Monday to Friday). Physical meetings at the registered office are strictly by prior appointment only.
  • Primary Contact 
    • Official Communication Email: compliance@insider360x.com
    • Phone: +91 9742301034
  • Statutory Identifiers: 29CABPM4575R1ZT | PAN: CABPM4575R
  • Primary Service Classification:
    • SAC 998313 : Information Technology (IT) Consulting & Support
    • SAC 998311 : Management Consulting and IT Management Services.
    • SAC 998319 : Other IT Services (Misc)