Privacy Policy

01 Who we are

RIGPA Tech Private Limited (“RIGPA”, “we”, “us”) is a private limited company incorporated in India, CIN U74999TN2016PTC112576, with its office at 19 Aziz Nagar Main Road, Kodambakkam, Chennai 600007, Tamil Nadu, India.

For the purposes of India's Digital Personal Data Protection Act, 2023 (the “DPDP Act”) we are the Data Fiduciary for personal data collected through this website. Where the EU or UK General Data Protection Regulation applies, we are the Controller.

02 The short version

This website is deliberately quiet. There are no forms, no sign-ups, no accounts, no advertising pixels and no tracking cookies. You can read every page without giving us anything.

• We do not ask you for personal data anywhere on this site.
• We use no advertising or social tracking of any kind, and no product that identifies you across sites.
• Our CDN, Cloudflare, counts page views for us. It is cookieless, sets nothing on your device, and Cloudflare states it does not collect visitors’ personal data.
• One item is stored on your device: your light or dark theme preference. It never leaves your browser.
• Your browser fetches fonts from Google, which means Google receives your IP address. This is the only third party the pages contact.
• If you email us, we hold that email and reply to it. Nothing more.

The rest of this policy sets out the detail the DPDP Act and the GDPR require.

03 What this policy covers

This policy covers the website at rigpa.in and email you send to our published addresses.

It does not cover:

• Our products. Amigo.care and Vaango AI are separate services with their own terms and privacy notices. Using this website tells you nothing about how those products handle data.
• Client engagements. When we build or operate software for a client, that client is the Data Fiduciary or Controller for the data in their system; we act on their instructions as a Data Processor under the agreement signed with them. Their privacy notice governs, not this one.
• Other websites. Sites we link to are outside our control and have their own policies.

04 What we collect

Nothing you type into this website

There is no contact form, search box, newsletter field or login on any page. Every “Start a project” and “Contact” link opens your own email client. We never receive keystrokes, form data or drafts.

Email you choose to send us

If you write to [email protected] we hold your email address, your name if you give it, and whatever you put in the message and its attachments. We use it to answer you and to carry the conversation forward if it becomes a project.

Job applications

If you apply for a role we hold your CV and the details in it — contact details, work history, education, and anything else you choose to include — so we can assess your application and get back to you. Please do not send us health data, government identity numbers, or other sensitive information at the application stage; we do not need it and will delete it if it arrives.

Server logs

Our hosting provider records standard technical information for every request: IP address, timestamp, the page requested, referring page, and browser user-agent. These logs exist to keep the site available and to investigate abuse or attacks. We do not use them to build profiles of visitors, and we do not combine them with anything else.

05 Stored on your device

This site sets no cookies. It stores exactly one value in your browser's local storage:

Because this is a preference you actively set and it never leaves your device, no consent banner is required. We would rather not show you one.

06 Third parties this site contacts

Loading a page on rigpa.in causes your browser to contact:

That is the complete list. There is no Google Analytics, no tag manager, no Meta or LinkedIn pixel, no chat widget, no embedded video, no third-party advertising script and no A/B testing tool on this site. The site's Content Security Policy permits scripts only from our own domain, so an outside tracker cannot be added by accident.

07 Why we are allowed to use it

Under the DPDP Act, we process your personal data on the basis of the consent you give by voluntarily writing to us or applying for a role, and, where applicable, for the legitimate use of responding to a communication you initiated.

Under the GDPR, where it applies to you, our legal bases are:

• Legitimate interests (Art. 6(1)(f)) — replying to your email, assessing job applications, keeping the site secure and available, and keeping records of what we agreed with whom. Our interest in running and defending a business does not override your rights here, because the data involved is minimal and you chose to send it.
• Steps prior to entering a contract (Art. 6(1)(b)) — discussing a possible engagement or a possible employment relationship at your request.
• Legal obligation (Art. 6(1)(c)) — where Indian tax, company or employment law requires us to keep something.

08 Sharing and transfers

We do not sell personal data, and we never will. We do not share it for anyone else's marketing.

We share it only with:

• Service providers who help us operate — our hosting provider and our email provider — each bound by contract to process data only on our instructions and to keep it secure.
• Professional advisers — accountants and lawyers, where they need it and under a duty of confidence.
• Authorities — where we are legally required to disclose, after satisfying ourselves the request is lawful.
• A successor — if the business or part of it is ever sold or reorganised, under equivalent protection.

International transfers

We are based in India and our data is held in India, other than email and fonts, which involve providers operating globally. If you are in the EEA or the UK, sending us personal data means it will be processed in India. India has not received an EU adequacy decision, so where required we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum or IDTA for the UK) with the providers involved, together with the security measures described below. Ask us and we will tell you which safeguard applies to a given transfer.

09 How long we keep it

10 Your rights

You can ask us to do any of the following, free of charge, by writing to the Grievance Officer below. We will respond within 30 days.

If you are in India (DPDP Act, 2023)

• Access a summary of the personal data we hold about you and what we do with it.
• Have inaccurate or incomplete data corrected, updated or completed.
• Have your data erased when it is no longer needed for the purpose you gave it for.
• Withdraw consent at any time, as easily as you gave it — this does not affect processing already carried out.
• Nominate another person to exercise these rights on your behalf if you die or become incapable of doing so.
• Raise a grievance with us, and escalate it to the Data Protection Board of India if you are not satisfied with our answer.

If the GDPR applies to you

• Access a copy of your personal data.
• Rectification of inaccurate data, and erasure (“right to be forgotten”).
• Restriction of processing, and objection to processing based on legitimate interests.
• Data portability, where processing is by automated means and based on consent or contract.
• Complaint to your local supervisory authority. If you are in Ireland that is the Data Protection Commission; in the UK, the Information Commissioner's Office.

We may ask you for enough information to be confident we are talking to the right person before we act — not to obstruct the request, but so we do not disclose your data to someone else.

11 Grievance Officer

Questions, requests and complaints about personal data go to our Grievance Officer, appointed as required by the DPDP Act:

We acknowledge every request on receipt and answer substantively within 30 days. If our answer does not resolve it, you may complain to the Data Protection Board of India, or to your supervisory authority if you are covered by the GDPR.

12 Children

This website is aimed at businesses and is not directed at children. We do not knowingly collect personal data of anyone under 18, and we do not track, profile or serve advertising to children — the site does none of those things to anyone. If you believe a child has sent us personal data, tell us and we will delete it.

13 Security

The site is served over HTTPS with HSTS, a strict Content Security Policy, and a restrictive permissions policy that switches off camera, microphone and geolocation access. Email accounts are protected with multi-factor authentication, access is limited to the people who need it, and provider contracts require confidentiality and security.

No system is perfectly secure. If a personal data breach occurs that is likely to affect you, we will notify the Data Protection Board of India and affected individuals as the DPDP Act requires, and the relevant supervisory authority within 72 hours where the GDPR applies.

14 Changes to this policy

If we add anything to the site that changes what we collect — an analytics tool, a contact form, a chat widget — we will update this policy before that change goes live, not after. The effective date and version number at the top always reflect the current text. Material changes will be flagged on this page.

15 Contact us

Privacy questions, data requests and everything else reach us at [email protected]. Put “Privacy” in the subject line and it will be routed to the Grievance Officer.

See also our Terms of Use.