Data Policy

1. Purpose

This Data Policy complements our Privacy Policy by explaining, in practical terms, the categories of data we handle, how long we keep them and the safeguards we apply.

2. Categories of data and retention

• Website enquiries (name, email, phone, message) — up to 24 months after last contact.
• Customer account data and business records — for the life of the account; deleted or exported within 30 days of termination on request, then removed from backups within 90 days.
• WhatsApp message logs and opt-in records — retained for the period the business configures, by default up to 12 months, and opt-in/opt-out records for as long as needed to prove consent.
• Uploaded files — product-specific. For AutoPrint, printed files are deleted immediately after printing and unprinted files are deleted after a short period.
• Server and security logs — up to 90 days, longer if needed to investigate an incident.
• Invoices and tax records — as required by Indian law, typically 8 years.

3. Storage and transfers

Data is stored with reputable cloud infrastructure providers. Some providers may process data outside India; where this happens we rely on contractual safeguards and only to the extent permitted by applicable law.

4. Security measures

• Encryption in transit (HTTPS/TLS) and encrypted file transfer.
• Authenticated, role-based access; staff access limited to what their job requires.
• Regular backups and monitoring for suspicious activity.
• Separation between customers' data in multi-tenant products.

5. Use of data and AI

Customer content (messages, documents, photos, business records) is used only to deliver the service. We do not sell it, do not use it for advertising, and do not use it to train third-party AI models. AI features process content solely to produce the output you requested.

6. Data subject requests

You can request access, correction, export or deletion at any time — see the Data Deletion page or write to contact@1techspace.in. Where we process data on behalf of a business customer, we may refer your request to that business.

7. Incident response

If we become aware of a personal data breach we will investigate and contain it, and notify affected customers and authorities without undue delay as required by law.