1. Overview & Data Controller
This Privacy Policy explains how Rakebig Services ("we," "us," or "our"), operating the websitehttps://www.rakebig.com, collects, processes, protects, and stores information when you browse our site, engage us for custom Perfex CRM development, commission SaaS platforms, implement AI automation workflows, or make electronic payments via our payment gateway partner, Razorpay.
We adhere to the provisions of the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection (DPDP) Act, 2023 of India.
2. Information We Collect
We collect only the minimum necessary personal and technical data required to evaluate your requirements, deliver software services, execute milestone contracts, and fulfill statutory tax invoicing obligations:
2.1 Personal & Business Contact Information
- Contact Particulars: First and last name, business email address, direct phone number, and WhatsApp contact details.
- Company Details: Business name, industry domain, company website URL, and registered physical billing address.
- Commercial Identification: GSTIN (Goods and Services Tax Identification Number), PAN, or national corporate identification numbers for issuing compliant tax invoices in India.
2.2 Project Specifications & Technical Access Credentials
- Technical specifications, database schemas, feature roadmaps, and workflow documentation submitted during project consultations.
- Server SSH keys, staging credentials, Git repository invitations, or third-party API tokens (e.g., WhatsApp Business API, OpenAI keys) provided exclusively under non-disclosure agreements to enable software deployment.
2.3 Automatically Collected Device & Diagnostic Data
- Internet Protocol (IP) address, approximate geographic location (city/country level), operating system, browser type, device identifiers, and timestamped server access logs.
3. Razorpay Payment Gateway & Payment Security
We maintain the highest security standards for all electronic financial transactions conducted on our site.
All online payments for software services, CRM modules, retainers, and consultations are processed securely throughRazorpay Software Private Limited ("Razorpay").
Rakebig Services does NOT collect, store, or process sensitive payment credentials—such as full 16-digit credit or debit card numbers, Card Verification Values (CVV/CVC), net banking passwords, or UPI PINs—on our servers or databases.
3.1 How Razorpay Safeguards Your Financial Data
- Tokenization & Encryption: When you execute a transaction via Razorpay, your payment details are transmitted directly through bank-grade 256-bit SSL/TLS encryption to Razorpay's PCI-DSS Level 1 certified vault.
- Accepted Modes: Razorpay supports Unified Payments Interface (UPI via Google Pay, PhonePe, Paytm, BHIM), major Credit and Debit Cards (Visa, Mastercard, RuPay, American Express), Net Banking across 50+ major banks, and verified digital wallets.
- Transaction Confirmation: Upon successful transaction clearance, Razorpay transmits only an encrypted transaction token, transaction ID, payment method descriptor (e.g., "UPI" or "Visa ending in 1234"), and authorization status to our system to generate your formal receipt.
- Regulatory Compliance: Razorpay operates in full compliance with Reserve Bank of India (RBI) payment aggregator regulations, including card-on-file tokenization rules.
4. How We Use Collected Data
We process personal information strictly on lawful grounds—specifically for the performance of our commercial contracts, compliance with legal obligations, and our legitimate business interests in delivering reliable software:
- Service Delivery: To build, customize, and maintain your Perfex CRM, web applications, Flutter mobile apps, SaaS platforms, and AI automations.
- Commercial Invoicing: To issue official Statements of Work, calculate milestone charges, generate GST-compliant invoices, and track payment status via Razorpay.
- Client Communication: To schedule kickoff calls, provide development sprint updates, deliver technical documentation, and respond to support enquiries.
- Security & Operational Integrity: To prevent fraudulent orders, detect unauthorized API usage, debug system crashes, and ensure system uptime.
- Statutory Compliance: To maintain mandatory accounting ledgers, tax filings, and legal records as required by Indian law.
5. Third-Party Disclosures & Sub-Processors
We do not sell, rent, lease, or trade your personal information to third parties, advertisers, or data brokers.
We share data exclusively with trusted third-party service providers who assist us in operating our business under strict confidentiality agreements:
| Service Provider | Category | Purpose & Protection Standard |
|---|---|---|
| Razorpay | Payment Gateway | Processes card, UPI, and net banking payments securely (PCI-DSS Level 1 certified). |
| Cloudflare / Hetzner / AWS | Hosting & Infrastructure | Encrypted server hosting, DDoS protection, and SSL/TLS certificate delivery. |
| WhatsApp / Meta API | Messaging Infrastructure | Facilitates two-way automated client updates and CRM notifications upon customer request. |
| OpenAI / Anthropic | AI Model Providers | Powers specialized AI agent parsing and data extraction under non-training enterprise API terms. |
| Cal.com | Consultation Scheduling | Allows prospective clients to schedule technical scoping sessions. |
We may also disclose information if required to do so by applicable law, court summons, or regulatory authorities in India, or to protect the legal rights, safety, or property of Rakebig Services and our users.
7. Data Retention & Safeguards
7.1 Retention Duration
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including:
- Active Projects: For the complete duration of the custom development agreement plus the 30-day warranty window.
- Financial & Tax Records: Invoices, transaction logs, and Razorpay payment confirmation IDs are retained for at least seven (7) years in compliance with statutory Indian Income Tax and GST regulations.
- Staging & API Credentials: Staging passwords, SSH keys, or test tokens provided by the Client are securely deleted or rotated within thirty (30) days following final deployment sign-off.
7.2 Security Safeguards
We implement comprehensive technical and organizational safeguards:
- End-to-end TLS 1.3 / SSL encryption for all data in transit across our digital surfaces.
- Access controls governed by the principle of least privilege, requiring multi-factor authentication (2FA) for all engineer accounts.
- Encrypted off-site backups and routine vulnerability patches for cloud staging servers.
8. User Rights (DPDP Act Compliance)
In accordance with the Digital Personal Data Protection (DPDP) Act, 2023 and applicable privacy frameworks, you possess the following rights regarding your personal data:
- Right to Access: You may request a summary of the personal data we hold about you and details of how it is processed.
- Right to Correction & Updating: You may request the rectification of any inaccurate or incomplete personal information.
- Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data, subject to legal or statutory record-keeping exemptions (e.g., GST tax invoices).
- Right of Grievance Redressal: You have the right to register a grievance with our designated Grievance Officer regarding any aspect of data processing.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time by contacting our privacy desk.
To exercise any of these rights, submit a verified request to support@rakebig.com. We will verify your identity and respond within thirty (30) calendar days.
9. Cross-Border Data Transfers
Rakebig Services operates primarily from India and serves international clients across over 25 countries. If you are accessing our services from outside India (such as the United States, United Kingdom, European Union, or UAE), please note that your information will be transferred to, processed, and stored on servers located in India and global cloud data centers (e.g., AWS / Cloudflare). We ensure adequate contractual safeguards are implemented to protect your data wherever it is processed.
10. Children's Privacy
Our website and commercial engineering services are intended strictly for business enterprises, professionals, and individuals who are at least eighteen (18) years of age. We do not knowingly collect or solicit personal information from minors. If we discover that personal data from a child under 18 has been collected without parental consent, we will take immediate steps to delete such data.
11. Grievance Redressal & Officer Details
In compliance with the Information Technology Act, 2000 and the rules made thereunder, as well as theDigital Personal Data Protection Act, 2023, the name and contact details of the Grievance Officer forRakebig Services are provided below:
Entity: Rakebig Services (rakebig.com)
Attention: Grievance Redressal Desk
Official Grievance Email: support@rakebig.com
Direct Telephone: +91 78274 08866
Tech Support Helpline: +91 97825 33298 (Mon–Sat, 10–7 IST)
Alternate Contact: contact@rakebig.in
Response Timeline: Grievance acknowledgement within 48 hours; resolution within thirty (30) days from receipt.
12. Policy Updates & Contact
We may update this Privacy Policy periodically to reflect changes in our service offerings, regulatory guidelines, or payment processing updates with Razorpay. When changes are made, the "Last Updated" date at the top of this document will be revised. Your continued engagement with Rakebig Services following any modifications constitutes your acknowledgment and acceptance of the revised policy.
If you have any questions regarding this Privacy Policy, please contact our support team atsupport@rakebig.com.