Privacy Policy
Last updated:
At a glance
See how we collect, use, share and retain personal data when you use our sites, chat or services. You can request access, correction or erasure, or withdraw consent, by emailing [email protected].
Notice version: 2026-11-03 · Effective: 3 November 2026 · Last updated: 3 November 2026
Company: TROIDX CORPORATION PRIVATE LIMITED ("Troid X", "we", "us", "our") · CIN: U62013UP2026PTC249101 · GSTIN: 09AANCT2570J1ZU
Registered office: Lucknow, Uttar Pradesh, India
Privacy and grievance contact: [email protected] · General contact: [email protected]
Websites: troidx.com and troidx.ai (each a "Site", together the "Sites")
1. About this policy
Troid X is a brand of TROIDX CORPORATION PRIVATE LIMITED. We design, build and market software for businesses: websites, mobile apps, custom software, AI features, cloud work and digital marketing.
This one policy covers both of our websites, troidx.com and troidx.ai. The same company is responsible for both. It explains what personal data we handle when you visit either Site, send an enquiry or ask for a call on troidx.com, use our Live Manager chat, submit an idea on troidx.ai, or work with us as a client.
For India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"), we are the Data Fiduciary for this data. Where the EU or UK GDPR applies, we are the controller.
When we build or run software for a client and handle personal data on that client's behalf, the client decides how that data is used. Our contract with the client covers that work, not this policy.
How the Sites work today: troidx.com takes project enquiries, call requests and chat on a quote-only basis. troidx.ai has an idea submission form. Neither Site has customer accounts or logins, and you cannot pay online on either Site.
2. What we collect
Project enquiry form (troidx.com). Your name, work email, the service you need and your project details. If you choose to add them, your company name and a budget range. We also record that you ticked the consent box, the time, and the version of this notice you saw. A hidden field and the time you started the form help us filter out spam bots.
Request a call (troidx.com). Your name and phone number, an optional preferred time, and your device's time-zone setting so we can call at a sensible hour. We also record your consent, the time and the notice version.
Live Manager chat (troidx.com). The messages you type and a chat session ID. If you leave your details in the chat, we collect your name, email, optional phone number, the service you need and an optional budget, together with your consent, the time and the notice version. These contact details go into separate form fields, not the chat text. See section 4.
Idea form (troidx.ai). Your name, email, country, your idea and the problem it solves. If you choose to add them, your company, budget, timeline and a link. You must confirm that you are 18 or older and give consent, using two separate unticked boxes. We record both, with the time and the notice version you saw. We use idea submissions to review your idea and reply to you. Submitting an idea does not send it to any AI service.
Emails and calls. If you write to us or speak to us directly, we keep what you send and our replies. If our team records your details from a call, event or referral, we note where they came from and send you this notice when we first contact you.
How you found us (only if you allow it). If you turn this on in , the Site you are using remembers campaign tags in the link you used (such as UTM tags), the page you landed on, the referring site and any ad click IDs (such as gclid or fbclid). These details are sent with an enquiry or idea submission so we can see which channels bring enquiries. Before you make a choice, they are held only in the open page's memory and are not saved.
Approximate country. When you send a form, our server may work out a rough country from network information supplied by our hosting or security provider. We use it to understand and route enquiries, not to find where you are. The globe on the troidx.com home page is decorative. It does not use your location and does not ask for it.
Site statistics (only when switched on). If we switch on our self-hosted Umami statistics on either Site, they count pages viewed, referring site, browser and device type, and approximate country, as totals only. They set no cookies and do not store your IP address. They do not run if your browser sends Do Not Track or Global Privacy Control, and you can turn them off in . They are not switched on in troidx.com's current configuration.
Security and bot protection. Our servers log technical details of requests, such as IP address, browser type, time and the page requested, to keep the Sites secure. If we switch on Cloudflare Turnstile for our forms and chat on either Site, Cloudflare checks technical signals from your browser to tell people from bots.
Client and billing records. If you become a client, we keep your contract, project records, billing name and address, tax details such as GSTIN, invoices and payment records.
We do not ask for sensitive personal data such as health information, government ID numbers, bank details or passwords. Please do not put them in forms or the chat.
3. Why we use your data
| Purpose | Basis |
|---|---|
| Reply to your enquiry, call request or chat, and prepare a proposal | Your consent |
| Review an idea you submit on troidx.ai and reply to you | Your consent |
| Deliver services, send invoices and receive payment | Our contract with you; data you gave us for that purpose |
| Tax, accounting and other legal duties | Legal obligation |
| Keep the Sites secure, prevent spam and abuse, keep security logs | Legal obligation; legitimate uses and interests |
| Count visits with cookieless statistics, when switched on | Legitimate interests (totals only, no cookies) |
| Remember how you found us and link it to an enquiry | Your consent in Cookie settings |
We collect only what each form, chat or contract needs, and we use it only for these purposes.
4. Consent and how to withdraw it
You give consent by a clear action, such as ticking an unticked box or choosing an option in Cookie settings. Nothing is pre-ticked.
Agreeing to be contacted about an enquiry means we will reply about that enquiry. It is not consent to marketing. Allowing "how you found us" storage in Cookie settings is not consent to marketing either. We do not send marketing emails or newsletters. If we start, we will ask for your separate consent first.
You can withdraw consent at any time:
- For enquiries, call requests, chat and idea submissions, email [email protected]. We will stop contacting you about it.
- For browser storage, open from the footer of any page. Each Site keeps its own choice, so set it on each Site you use.
Withdrawing consent does not affect what we did before you withdrew it. We may keep a record of your consent and withdrawal, and any data the law requires us to keep.
5. Troid X Live Manager (AI chat)
- The chat is on troidx.com and is for adults (18+).
- The chat shows a notice before it starts. When you continue, we record the time and the notice version.
- When AI replies are switched on, the assistant uses Google's Gemini API. We automatically remove most personal details, such as names, phone numbers, emails and ID numbers, from your messages before they are stored. A message in which we detect personal details may not be sent to the AI at all. Our removal can miss details written in unusual ways, so please do not share sensitive information in the chat.
- Google processes the chat text it receives under its API terms to produce replies for us. It may process that text outside India.
- Your contact details are collected through separate form fields and stored on our systems. They are not sent to the AI.
- If AI replies are switched off or unavailable, you will see set replies, a member of our team may answer, or the chat will ask you to leave your details.
- A member of our team may join or review a chat.
- AI replies can be wrong. They are general information, not a quote or offer. Only a written Order you accept is binding.
- We do not use the chat to make decisions about you that have legal or similarly significant effects by automated means alone.
6. Who we share data with
We do not sell personal data. We share it only with:
| Recipient | Why | When |
|---|---|---|
| Our hosting provider | Runs both Sites and the system that receives forms, idea submissions and chat | Always |
| Google (Gemini API) | Produces AI chat replies from chat text with most personal details removed. Idea submissions are never sent | Only when AI replies are switched on |
| Cloudflare (Turnstile) | Bot protection on forms, the idea form and chat | Only when Turnstile is switched on |
| Professional advisers, auditors, banks and authorities | Legal, tax and accounting work, or when the law requires it | When needed |
We use service providers under written terms that limit how they can use the data. We do not use Google Analytics, Google Ads, Meta or LinkedIn tags. If we add them, we will update this policy and the Cookie Policy and ask for your consent first.
Online payments are not live on either Site. If we switch them on (we expect to use Razorpay), we will update this policy before we do. If our company is merged or sold, data may pass to the new owner under the same protections.
7. Data outside India
We are based in India. Some providers, such as Google and Cloudflare, may process data in other countries. We transfer personal data out of India only as Indian law allows. Where the GDPR applies, we use a lawful transfer mechanism such as the European Commission's Standard Contractual Clauses.
8. How long we keep data
We keep personal data only as long as the purpose needs it. After that we delete it or anonymise it, which means removing anything that could identify you. Deletion may not happen on the exact day a period ends.
| Data | How long |
|---|---|
| Enquiries, call requests and chat leads that do not lead to work | 12 months from our last meaningful contact with you |
| Idea submissions (troidx.ai) | 12 months from submission or our last contact with you. If an idea leads to an enquiry or project, it follows that record |
| Chat transcripts (stored with most personal details removed) | 12 months from the last message, or as long as the related enquiry if the chat became one |
| Details our team records from calls, events or referrals | We send you this notice when we first contact you. If you have not responded or consented within 30 days, we use your details only for that one enquiry. After that, the 12-month rule applies |
| Spam submissions | 90 days |
| Messages we could not check for spam because our check was unavailable | 30 days, unless we confirm the enquiry is genuine |
| Client contracts and project records | As long as the work, accounting and any dispute need, and at least as long as the law requires |
| Invoices and payment records | As long as tax and company law require |
| Records of your consent | About 3 years from when the consent was recorded |
| Records of privacy requests | About 3 years after the request is closed |
| "How you found us" details on our systems | Only as long as needed to measure our marketing. The copy in your browser expires after 90 days |
| Security logs with IP addresses | At least 180 days, as Indian law (CERT-In Directions) requires, kept in India |
| Statistics totals, when switched on | Up to 13 months |
| Your Cookie settings choice (in your browser, separately for each Site) | 12 months, or until this policy's version changes |
9. Security
We protect personal data with reasonable safeguards suited to it, including encrypted connections (HTTPS), access limited to people who need it, and security logs. No system is completely secure.
If a personal data breach happens, we will notify the people affected and the authorities as applicable law requires. This includes reporting cyber security incidents to CERT-In within the time its directions set (currently 6 hours) and notifying the Data Protection Board of India once the DPDP Act's breach rules apply.
10. Your rights
Depending on the law that applies to you, you can ask us to:
- give you a summary of the personal data we hold about you, what we do with it, and who we have shared it with;
- correct, complete or update it;
- erase it, unless we must keep it by law;
- stop using it where you withdraw consent;
- resolve a grievance about how we handled it;
- let a person you nominate exercise these rights if you die or cannot act.
If the GDPR applies, you also have rights to restrict or object to processing, to data portability, and to complain to your local data protection authority.
The DPDP Act and its Rules are being brought into force in stages. We will honour these rights in line with the law as it applies, and we already welcome requests by email.
To make a request, email [email protected]. We may ask you to confirm your identity. We will respond within 30 days. We will not treat you less fairly for using your rights.
11. Grievance Officer
Designation: Grievance Officer Company: TROIDX CORPORATION PRIVATE LIMITED Email: [email protected] · Location: Lucknow, Uttar Pradesh, India
We will acknowledge grievances within 24 hours and resolve them within 15 days. If you are not satisfied, you may complain to the Data Protection Board of India.
12. Children
Both Sites, the chat and our services are for businesses and adults. You must be 18 or older to submit an idea on troidx.ai. We do not knowingly collect personal data from anyone under 18. If you think a child has sent us personal data, email [email protected] and we will delete it.
13. Cookies and browser storage
Both Sites use browser storage, not advertising cookies. Necessary storage is always on. Anything else is used only as described in our Cookie Policy. You can change your choice on each Site at any time in .
14. Changes to this policy
When we change this policy, we will post the new version here with a new notice version and "Last updated" date. If a change affects what you agreed to, we will ask for your consent again.
15. Contact
TROIDX CORPORATION PRIVATE LIMITED · Registered office: Lucknow, Uttar Pradesh, India Privacy and grievances: [email protected] · Everything else: [email protected]
Related: Terms of Service · Cookie Policy · Refund and Cancellation Policy