Effective Date: October 5, 2026

INTRODUCTION AND OVERVIEW

This Global Privacy Policy and Data Processing Agreement establishes the operational parameters, data processing mechanics, and mutual security protocols governing the relationship between Betwene (“we,” “our,” or “the Agency”) and our commercial clients, website visitors, and prospective business partners (“you,” “your,” or “the Data Principal”). We design, develop, and host interactive web applications, specializing in high-performance digital infrastructure for small and medium-sized trade businesses.

Consistent with standard international web development and cloud-hosting operations, this document outlines our data lifecycle practices. We believe transparency is the foundation of long-term commercial relationships. This policy dictates how information is collected through our intake funnels, managed across our cloud infrastructure, and ultimately retired. By interacting with our digital properties, utilizing our custom web calculators, submitting information through our smart onboarding funnels, or engaging our monthly care plans, you acknowledge and consent to the data practices defined within this comprehensive legal framework.

ENTITY IDENTIFICATION AND DATA FIDUCIARY STATUS

Under the parameters of the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000, Betwene operates as the designated Data Fiduciary for information collected directly through our proprietary platforms. Betwene is a registered commercial entity operating strictly from the Republic of India. When you engage our services to build outward-facing web applications or provide your business details for a project setup, we act as the central authority determining the purpose and means of processing that specific data. This establishes a clear corporate boundary, ensuring that all data handling protocols are managed centrally through our Indian operational headquarters.

GOVERNING LAW AND EXCLUSIVE INDIAN JURISDICTION

To provide consistency and clear legal administration across international borders, this policy and all associated operational agreements are governed exclusively by the laws of the Republic of India, without regard to its conflict of law principles. By engaging our agency, both parties agree that any dispute, interpretation, enforcement action, or claim arising out of this privacy policy shall be subject to the exclusive jurisdiction of the competent courts located in New Delhi, India. This mutual security protocol prevents fragmented legal interpretations and ensures a predictable, standardized venue for dispute resolution.

EXPLICIT APPLICABILITY TO CROSS-BORDER CONTRACTS

Our agency specializes in serving commercial trade clients located in Western markets, specifically within the United States. Data originating from foreign clients is collected, routed, and processed strictly under contractual performance with an Indian service entity. Pursuant to Section 17(1)(d) of the DPDP Act, specific regulatory exemptions apply to Indian companies processing the personal data of individuals outside the territory of India pursuant to a standardized commercial contract. Therefore, the processing of international business data is anchored fundamentally in Indian statutory law, prioritizing the legal frameworks of our operational base over localized foreign tort regimes.

SCOPE OF LEAD AND INTAKE CAPTURE DATA

We collect specific operational data to engineer custom web applications and facilitate our highly automated onboarding pipeline. When you utilize our smart intake funnels, custom chatbot endpoints, or Formspree integration forms, we collect B2B data points. This includes commercial entity names, primary service niches, target municipal locations, operational email addresses, and specific trade technical requirements. This collection is governed by strict purpose limitation. The data is processed actively and solely to generate staging previews, configure instant quote calculators, deploy client deliverables, and establish commercial communication channels.

ASYNCHRONOUS DEMO VIDEOS AND STAGING PERMISSIONS

To deliver massive upfront value without requiring time-intensive synchronized meetings, our sales engineering process utilizes asynchronous demonstration technology. We routinely aggregate public commercial data, brand assets, and service areas to build fully functional preview applications on staging subdomains utilizing GitHub and Hostinger. We then record asynchronous walk-through videos utilizing Loom. By interacting with our agency or requesting a free site concept, you grant us permission to utilize publicly accessible business details or voluntarily submitted intake data across our private staging environments and asynchronous demonstration recordings to validate proof-of-concept builds.

DE-IDENTIFICATION AND SYNTHETIC PII PLACEHOLDERS

We constantly monitor market trends, competitor layouts, and industry-specific technical specifications to ensure our architectural designs reflect modern standards. While market research is utilized to train our internal layout systems and Next.js component structures, we enforce a strict de-identification protocol for all showcased master sample sites. Any specific competitor Personally Identifiable Information (PII), including exact physical addresses, real contact credentials, or proprietary business names extracted during market analysis, is ruthlessly stripped from the final codebase. All external client-facing sample sites utilize highly professional, synthetic generic placeholders to prevent unauthorized data storage and protect intellectual property.

THIRD-PARTY INFRASTRUCTURE SUB-PROCESSORS

We engage industry-leading cloud vendors to ensure enterprise-grade uptime, rapid deployment, and optimized performance for your digital assets. Our operational stack utilizes specialized sub-processors including, but not limited to, Hostinger and Vercel for high-speed cloud hosting, Cloudinary for dynamic image delivery, GitHub for code repository management, Google Workspace for internal communication, and TrulyInbox alongside SalesHandy for B2B outreach coordination. While we vet our sub-processors for strict adherence to global security standards, our agency assumes zero vicarious liability for unforeseen upstream server outages, independent network breaches, or infrastructure degradation occurring exclusively on these third-party platforms.

INTERNATIONAL DATA TRANSIT AND CLOUD ROUTING

Modern Next.js web architecture relies on distributed cloud environments to deliver instantaneous load times. Information entered into our web applications, interactive calculators, or intake forms may transit through global Content Delivery Networks (CDNs), foreign data centers, or our primary operational terminals in India. By utilizing our services and deploying applications on our infrastructure, you acknowledge and authorize this international routing of data. This transit protocol ensures geographic redundancy and load balancing, protecting your website from localized server bottlenecks.

MANDATORY GRIEVANCE REDRESSAL MECHANISM

In strict compliance with statutory mandates, including the Information Technology Rules, we maintain a dedicated Grievance Redressal mechanism. Data Principals seeking to report a security concern, request data modification, or address a privacy grievance must direct their correspondence to our designated Grievance Officer via our official compliance email channels. Our internal administrative protocols dictate a structured review process, guaranteeing an initial response and engagement SLA within thirty days of verifiable receipt. This mechanism ensures all concerns are documented, investigated, and resolved through official corporate channels before any external escalation is considered.

COMPREHENSIVE DISCLAIMER OF CONSEQUENTIAL DAMAGES

The digital environments we build are highly optimized marketing tools, but they operate alongside unpredictable external factors including search engine algorithm shifts, user browser configurations, and third-party API dependencies. We explicitly disclaim any and all liability for consequential, indirect, or downstream damages. We hold no financial responsibility for lost commercial revenue, interrupted business operations, corrupted inbound contractor leads, or fluctuations in conversion velocity resulting from service downtime, technical malfunctions, or internet transmission anomalies. Our responsibility is strictly limited to maintaining the functional code and hosting infrastructure as defined in our service agreements.

AGGREGATE CAP ON FINANCIAL LIABILITY

To maintain our heavily subsidized upfront setup structure and predictable flat-rate monthly pricing, we enforce a strict aggregate cap on all financial liabilities. In the event of a proven legal claim, data discrepancy, or service failure arising under this privacy policy or associated commercial agreements, Betwene’s total cumulative financial liability shall never exceed the exact monetary amount actually paid by the specific client for the monthly care plan in the three months immediately preceding the event giving rise to the claim, or the initial setup fee, whichever is lower. This agreed liquidated damage ceiling protects our agency from disproportionate operational risk.

AUTOMATED TOOL AND INTERACTIVE DATA ACCURACY

Our web applications frequently feature interactive components, including instant quote estimators, local service radius calculators, and dynamic intake triage forms. These elements utilize localized React state logic and predefined mathematical formulas to provide immediate front-end value to your website visitors. All figures, estimates, and automated results generated by these tools are strict approximations intended for marketing engagement. We provide no guarantee regarding the commercial accuracy, binding nature, or job-site applicability of these automated estimates. The end business owner retains full responsibility for verifying all project costs and finalizing binding consumer agreements off-platform.

DATA RETENTION LIFECYCLE AND INACTIVE SITE ERASURE

Our business model relies entirely on the continuous maintenance provided through our ongoing monthly care plan. The data retention lifecycle is inextricably linked to this active subscription. When a commercial client actively cancels their care plan, or if billing fails and remains unresolved, the associated cloud hosting infrastructure is terminated. Consequently, the staging environment, production Next.js codebase, interactive formulas, and associated digital assets are systematically retired and purged from our active server environments. This operational workflow ensures we do not endlessly hoard data for inactive accounts while enforcing the reality that non-paying users cannot expect perpetual cloud hosting or historical backup retrieval.

TAX, FINANCIAL, AND STATUTORY COMPLIANCE RETENTION

While we respect the principle of data minimization, specific financial records are strictly exempted from general erasure requests. To comply with Indian taxation frameworks, the Goods and Services Tax (GST) Act, the Income Tax Act of 1961, and cross-border export documentation requirements, we legally must retain all commercial billing records, transaction logs, export invoices, and associated business identification metadata. These financial artifacts are securely archived for the mandatory statutory period—which extends up to eight years—regardless of account cancellation. This legal obligation supersedes any general right-to-be-forgotten requests concerning transaction histories.

INTELLECTUAL PROPERTY OVER ANONYMIZED AGGREGATIONS

Every interaction with our web architecture provides data that helps us build faster, more efficient digital products. We reserve the irrevocable, worldwide right to compile, fully de-identify, and utilize anonymized operational metrics derived from our platform infrastructure. This includes studying aggregate conversion trends, calculator engagement drop-off rates, and UI kinetic interaction heatmaps. Because this data is completely stripped of identifiable client characteristics, it falls outside the scope of personal data regulations. We leverage this anonymized intelligence solely to optimize our master Next.js deployment pipelines and improve the conversion mechanics of our codebase.

OUTBOUND B2B COMMUNICATIONS AND OUTREACH PROTOCOLS

Our primary growth engine involves highly targeted, localized business development. We identify public commercial entities and engage them through direct cold email sequencing and outbound communication frameworks managed through dedicated Google Workspace environments and deliverability platforms like SalesHandy. We classify this outreach strictly as legitimate B2B correspondence aimed at commercial enterprises rather than individual consumer marketing. We maintain clean operational hygiene by embedding an effortless, automated opt-out mechanism in all outbound email sequences. Recipients who indicate a desire to unsubscribe are immediately added to our internal suppression lists, halting further automated correspondence.

COOKIES, LOCAL STORAGE, AND SESSION-STATE MANAGEMENT

To ensure our interactive web applications function flawlessly without requiring heavy backend database calls, we utilize specific browser-level storage mechanics. We deploy technical, essential cookies and standard HTML5 Local Storage protocols to maintain active session states. This allows our custom cost estimators to remember variables as a user advances through a multi-step form, and ensures UI preferences load correctly upon page refresh. We do not deploy intrusive, cross-site behavioral tracking pixels for the purpose of third-party advertising aggregation. Our storage deployment is strictly limited to maintaining the immediate functional state and performance architecture of the specific application you are visiting.

DATA SECURITY SAFEGUARDS AND REASONABLE PRACTICES

Betwene implements comprehensive administrative, physical, and technical safeguards designed to ensure the integrity, confidentiality, and availability of all processed data. We enforce strict HTTPS/TLS encryption protocols across all active staging and production URLs to protect data in transit. Our internal engineering teams operate under strict access controls, isolating code repository commits and separating staging environments from live production servers. While we maintain these industry-standard defensive postures, no internet-based transmission protocol or cloud storage environment is mathematically immune to sophisticated zero-day exploits. We commit to executing reasonable security practices but cannot guarantee absolute, impenetrable security against unforeseeable threat vectors.

STATUTORY DATA PRINCIPAL RIGHTS

We recognize and respect the foundational rights granted to Data Principals under modern statutory frameworks. Depending on the nature of your interaction with our agency, you maintain specific administrative rights regarding your submitted information. You possess the right to request a descriptive summary of the personal data actively processed by our systems. You maintain the right to request the correction of demonstrably inaccurate information, the right to nominate a legal representative in the event of incapacity, and the right to withdraw previously granted consent for active marketing communications. Requests to exercise these rights must be routed formally through our designated grievance channels for verification and processing.

20.0 OPERATIONAL SCOPE BOUNDARIES AND EXCLUDED DATA

Our engineering scope is intensely focused on building high-engagement lead generation websites for service contractors. We explicitly establish strict operational boundaries regarding the classification of data permitted on our network. Clients and visitors are strictly prohibited from submitting, routing, or requesting the storage of highly sensitive data categories through our basic intake forms or chatbot widgets. This includes, but is not limited to, active credit card numbers, government-issued social security digits, secure banking pins, or protected medical and healthcare records. We build marketing architecture, not PCI-DSS compliant payment vaults or HIPAA-regulated medical databases. The transmission of excluded sensitive data completely voids our standard security liabilities.

BUSINESS TRANSFERS AND CORPORATE REORGANIZATION

Digital agencies must remain agile in a shifting economic landscape. In the event that Betwene undergoes a strategic corporate reorganization, an asset sale, a merger, or an acquisition by a larger entity, the digital assets and operational databases we manage are considered standard commercial property. We reserve the explicit right to transfer customer records, staging environment databases, active codebase licenses, and operational data to the successor entity without re-soliciting separate, independent consent from each individual client. This ensures continuous, uninterrupted hosting and maintenance of your digital properties during any administrative transition.

AGE VERIFICATION AND PROHIBITION OF CHILDREN'S DATA

Our services, web applications, and outbound outreach campaigns are engineered entirely for adult commercial business owners and professional trade contractors. We declare unequivocally that our website and associated development services are intended strictly for users who have reached the legal age of majority, which is eighteen years of age. We proactively prohibit minors from submitting data, utilizing our calculators, or interacting with our business onboarding funnels. By establishing this absolute boundary, we immunize our operational platform against the onerous obligations, specialized consent mechanisms, and severe penalties associated with processing the digital data of minors.

FORCE MAJEURE AND THIRD-PARTY INFRASTRUCTURE FAILURE

The continuous operation of modern web applications relies on a fragile global network of fiber optics, municipal power grids, and third-party data centers. Our agency is protected by the doctrine of frustration regarding events entirely outside our direct physical control. We shall not be held in breach of our service obligations, nor held liable for data inaccessibility, caused by Force Majeure events. This includes international undersea cable cuts, severe regional natural disasters, catastrophic cloud server outages on platforms like Hostinger or Vercel, targeted national government firewall blocks, or sudden payment gateway halts. In such events, our operational timeline is paused until external infrastructure stabilizes.

UNILATERAL POLICY MODIFICATIONS AND ACCEPTANCE

The regulatory landscape governing international data transfers and cloud architecture evolves constantly. To ensure strict, ongoing compliance with rolling statutory rules, including updates to the DPDP Act, Betwene retains the unilateral right to amend, restructure, or update this Global Privacy Policy at our sole discretion. Any structural modifications will be reflected directly on this page with an updated effective date. We operate under the standard commercial protocol that your continued use of our web properties, interaction with our calculators, or retention of our monthly care plan following any such published changes constitutes your full, binding acceptance of the revised privacy framework.