Last updated: 8 November 2026

Privacy policy

This policy explains how Squiggle Developer, a digital studio based in Bengaluru, Karnataka, India, run by the team behind Squiggle Brains (“we”, “us”) handles personal data when you use dev.squigglebrains.com or contact us. We are the Data Fiduciary for this data under the Digital Personal Data Protection Act, 2023 (DPDP Act). We also follow the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

1. What we collect

• Contact form: your name, business name, mobile or WhatsApp number, email, the services or package you are interested in, your preferred date, time and language, and your message.
• Free audit form: your name, business name, area, a Google Maps link or business name, your website address, mobile number, email and your main concern. We store links as plain text and do not open them automatically.
• Technical data: to stop spam we keep a one-way hashed form of your IP address and email for up to one day. Our hosting provider keeps standard server logs (IP address, browser type, page requested) for security.

We do not ask for passwords, bank or card details, Aadhaar, health information or any other sensitive personal data. Please do not send it to us. This site is meant for business owners and is not directed at children under 18.

2. Why we use it, and on what basis

We use your data only to reply to your enquiry, arrange the call or audit you asked for, prepare a quote, and keep a record of what was discussed. You give consent by ticking the box on the form. We do not sell your data, use it for advertising, or send you marketing messages unless you ask us to.

3. Who processes it for us

• Google Firebase / Google Cloud: website hosting, server code and the database that stores enquiries. The database and server run in Google's Mumbai (asia-south1) region.
• Resend: delivers the notification email to our inbox and your confirmation email. Resend may process email data outside India.
• WhatsApp (Meta): only if you choose to message us on WhatsApp. Meta's own privacy policy applies to that chat.

These providers act on our instructions under their data processing terms. Data may be transferred outside India as permitted by section 16 of the DPDP Act. We will share data with authorities only when Indian law requires it.

4. How long we keep it

Enquiries are deleted automatically 12 months after they arrive. If you become a client, we keep project and billing records for as long as tax and accounting law requires (generally eight years). You can ask us to delete an enquiry sooner.

5. How we protect it

The site runs only over HTTPS. Enquiries sit in a database that cannot be read from the browser. Only the studio owner can open the admin, using a verified sign-in link, and the admin session ends after 30 minutes of inactivity. We limit repeated form submissions to block spam. If a personal data breach affects you, we will inform you and the Data Protection Board of India as the DPDP Act requires.

6. Your rights

Under the DPDP Act you can:

• ask what personal data we hold about you and how it is used;
• ask us to correct, complete, update or erase it;
• withdraw your consent at any time (this does not affect anything done before you withdrew);
• nominate another person to exercise these rights if you die or become unable to; and
• raise a grievance with us, and then with the Data Protection Board of India if you are not satisfied.

Email hello@squigglebrains.com from the address you used on the form. We may ask you to confirm it is you. We reply within 7 days and resolve requests within 30 days.

7. Cookies

The public site sets no cookies, runs no analytics and uses no advertising trackers. The only cookie we use is a strictly necessary, secure sign-in cookie for the studio owner on the admin page.

8. Grievance Officer

In line with Rule 5(9) of the 2011 Rules and the DPDP Act, you can reach our Grievance Officer at hello@squigglebrains.com with the subject “Grievance”. We acknowledge grievances within 48 hours and resolve them within 30 days.

9. Changes

If we change this policy, we will update the date at the top of this page. Significant changes will be shown on this page before they take effect.