Privacy Policy

DuoGen Tech Solutions (“DuoGen”, “we”, “us”) is a technology company based in India. We design and build websites, web and mobile applications, business software, automation and integrations for organisations in India and abroad.

For personal data collected through this website, DuoGen is the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) — that is, we decide why and how it is processed.

This policy explains how we handle personal data when you visit duogen.in, send us an enquiry, chat with our site assistant, apply for a role or otherwise contact us. It is written to meet the DPDP Act, 2023 and the Digital Personal Data Protection Rules, 2025, the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. Personal data we handle for clients inside their projects is governed by the agreement for that project (see section 13).

We only collect what we need to respond to you and run this website:

• Project enquiries. Your name, email address, company, phone number (optional), industry, the services you are interested in, your project description and your preferred contact methods — exactly what you type into the contact form.
• Direct messages. Whatever you choose to share when you email, call or message us on WhatsApp.
• Job applications. Your CV and any details you send when you apply for a role by email.
• Site assistant (Genie). The questions you type into the chat and the recent conversation, so it can answer. Please don't share personal details in the chat.
• Technical data. Your IP address, browser type and the pages requested, which our hosting provider records in standard server logs and which we use to keep the site secure and to limit abuse.

We do not ask for sensitive personal data such as passwords of other services, financial account details, health or biometric information through this website.

• To reply to your enquiry, understand your requirements and prepare a proposal.
• To contact you by the methods you chose.
• To consider your job application.
• To answer questions through the site assistant.
• To keep the website secure, prevent misuse and fix problems.
• To meet our legal, tax and accounting obligations.

We process your personal data on the basis of the consent you give — for example, by ticking the consent box on the contact form or by writing to us — or for the “legitimate uses” the DPDP Act allows, such as information you share with us voluntarily for a specific purpose and compliance with the law.

You can withdraw your consent at any time by emailing connect@duogen.in. Withdrawing is as easy as giving consent. It won't affect anything we did before you withdrew, and we will stop processing the data unless the law requires us to keep it.

We do not sell or rent your personal data, and we do not use it for third-party advertising. We share it only with service providers that help us run this website, under their own privacy and security commitments:

• Google Firebase / Google Cloud — stores enquiries and our team portal data.
• Google Gemini API — generates the site assistant's answers from your questions.
• Cloudflare — hosts and delivers the website.
• Our email provider — for messages you send us.

We may also disclose personal data where required by Indian law, a court order or a lawful request from a government authority.

The public website does not use advertising or tracking cookies and does not run third-party analytics. Our mini-game saves your best score in your browser's local storage; it never leaves your device and you can clear it at any time. The private team portal uses storage needed to keep staff signed in.

We keep enquiry and application data only as long as needed for the purpose it was collected — typically up to three years after our last interaction, so we can follow up on discussions — and then erase it, unless a longer period is required by law (for example, tax and accounting records of clients). Site assistant conversations are not stored by us. You can ask us to erase your data sooner (see section 10).

We follow reasonable security practices as required by the Information Technology Act, 2000 and its rules: encrypted connections (HTTPS), access to enquiry data limited to authorised team members through role-based accounts, database security rules that block public access, and service providers with recognised security certifications. No method of transmission or storage is completely secure, but we work to protect your data and review our safeguards regularly.

Under the DPDP Act, 2023, you have the right to:

• Get a summary of the personal data we hold about you and how we process it.
• Have inaccurate or incomplete data corrected and updated.
• Have your data erased when it is no longer needed or when you withdraw consent.
• Withdraw consent at any time.
• Have your grievances addressed by our Grievance Officer.
• Nominate another person to exercise these rights if you die or become unable to do so.

To exercise any of these rights, email connect@duogen.in. We may ask you to confirm your identity before acting on a request. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

This website is meant for businesses and adults. We do not knowingly collect personal data from anyone under 18 without verifiable consent from a parent or lawful guardian, as the DPDP Act requires. If you believe a child has sent us personal data, contact us and we will delete it.

If a personal data breach occurs, we will act to contain it and will notify the Data Protection Board of India and the affected individuals as required by the DPDP Act and Rules, explaining what happened, the likely impact and the steps we are taking.

DuoGen Tech Solutions is based in India and provides services to clients in other countries. Visitors and prospective clients from outside India are welcome to contact us, submit project enquiries or share business information through our website.

Where applicable, we handle personal information in line with the relevant data protection and privacy laws. Depending on the services offered, where the individuals concerned are located and the nature of the processing, additional legal requirements may apply — for example, the EU or UK General Data Protection Regulation.

If we process personal information on behalf of a client, each party's responsibilities, the security measures that apply and any required data-processing arrangements are set out in the project agreement.

Our service providers may store or process data outside India. Where personal information is transferred internationally, we apply the safeguards required by applicable law, and we do not transfer data to any country restricted by the Government of India under the DPDP Act.

For questions about international privacy matters, contact connect@duogen.in.

If you have a question, request or complaint about how we handle personal data, contact our Grievance Officer:

We will acknowledge your message promptly and aim to resolve it within one month, and in any case within the time required by law.

We may update this policy as our services or the law change. The date at the top shows when it was last updated. If a change materially affects how we use personal data you have already given us, we will tell you and, where needed, ask for your consent again.