Privacy Policy

Below: what Nimtree Infotech learns about you through nimtreeinfotech.com, what becomes of it, who else handles it, how long it survives, and what you are entitled to demand. This covers the website only. Material you email us directly, or that changes hands during a project, is treated on the same principles but governed by the engagement agreed with you.

Who is responsible

Nimtree Infotech is a software and digital services business registered in Rajkot, Gujarat, GSTIN 24BSVPG8807R1ZQ. We build custom software, websites and mobile applications. The registered address sits at the foot of every page. Privacy correspondence goes to contact@nimtreeinfotech.com and reaches the person accountable for it; responsibility is not delegated to an outside agent.

What we end up holding

From the enquiry form

That form is the one place on this site that asks you for anything. Submitting it sends us:

• Your name.
• A company or business name, if you type one.
• Your email address.
• A phone number, if you type one.
• The service you picked from the list.
• Whatever you wrote in the message box.
• Your tick confirming we may use the above to answer you.

Name, email, service and message are what make the form worth sending. Company name and phone number are optional; an enquiry without them is handled identically. Keep passwords, card and bank details, identity document numbers and anything comparably sensitive out of the message box. Where a project genuinely requires material of that kind, a secure route for it gets agreed first.

From the servers

The machines delivering this site keep short technical records of the requests they answer: originating IP address, the browser and operating system your device reports, which page was requested, which page referred you, and the time. None of it builds a profile and no attempt is made to work out who you are. It exists so pages get served correctly, faults can be traced, and scraping or a denial-of-service attempt can be noticed and blocked.

The enquiry endpoint also rate-limits, so a single source cannot flood it. That requires keeping the requesting IP address in memory briefly. It never reaches a database, is never tied to your enquiry, and does not survive a restart of the server instance that handled the request.

Why we use it

What arrives through the form is used to:

• Establish what you are actually asking for.
• Answer you, and ask whatever follow-up questions a real answer requires.
• Prepare an estimate, proposal or scope document where that is warranted.
• Correspond about a project you decide to go ahead with.
• Keep a record of the exchange for business and accounting purposes.

Never for marketing. No mailing list, no newsletter, and nothing passed to anyone not directly involved in answering you.

On what basis

The form carries a checkbox confirming we may use your details to reply; that consent is what we rely on. If we go on to work together, the information is also processed because performing the contract requires it, and because an Indian business has record-keeping obligations to satisfy. Withdraw consent whenever you like by writing to contact@nimtreeinfotech.com, and we will stop using your details for everything except a record we are required to keep.

What happens to an enquiry

No database sits behind this website. On submission the server checks the fields, discards anything it does not recognise, and forwards the enquiry to our business mailbox as an email. Nothing is written to disk here, stored in a content management system, queued, or exposed through an admin screen, because none of those exist on this site.

Once the email arrives, your information lives in a business email account, and that mailbox’s security and retention govern it from then on.

Who else handles it

Deliberately few. These parties process information because of how the site is put together. Naming them describes the architecture; it is not a partnership, an endorsement or a certification, and each operates under terms and a privacy policy of its own.

• Resend carries enquiry emails from here to our mailbox, so their contents pass through it in transit.
• Vercel hosts and serves the site and produces the request logs described above.
• Cloudflare, where the site is served through it, sits in front of the hosting to route traffic and filter automated abuse, processing request data in order to do so.
• Our business email provider, which necessarily stores and processes what is sent to us.

Some of these operate infrastructure outside India, so your information may be processed on servers in other countries. We rely on the contractual and security commitments those providers publish, and none is authorised to use your information for purposes of its own.

Cookies and measurement

No advertising technology and no cross-site tracking runs on this website. A hosting or security provider in front of it may set a strictly necessary cookie to keep the service working. The Cookie Policy sets that out in full.

This website sets no cookies of its own and loads no measurement script on this deployment: no Google Analytics, no heat-mapping, no session recording, no marketing pixel. If that changes, this page and the Cookie Policy will be updated to describe it.

How it is protected

• HTTPS throughout, so what you type into the form is encrypted in transit.
• Transport security and the related response headers are set at framework level, limiting content injection and clickjacking.
• Every field is validated on the server as well as in the browser, and unrecognised fields are discarded.
• A hidden honeypot field and a rate limit suppress automated submissions.
• Because enquiries are never stored here, there is no website database to breach.
• Access to the mailbox that receives enquiries is limited to the people who need it to answer you.

No method of transmission or storage is perfectly secure, and we will not claim one. What can be said is that the number of places your information sits has been kept as small as the work allows.

How long it lasts

Enquiry emails stay in the business mailbox while they remain useful for the purpose they were sent for, and for as long as tax, accounting and contractual record-keeping in India require. Correspondence that goes nowhere is deleted once it is plainly irrelevant. Ask for your enquiry to be deleted at any point and it will be, unless a specific legal obligation requires a record. Server and security logs are short-lived and kept by our hosting and security providers on their own schedules.

What we never do

• Sell, rent or trade personal information. Not now and not previously.
• Pass your details to advertisers, data brokers or lead-generation services.
• Use your information for automated decisions carrying legal or similarly significant consequences.
• Knowingly collect anything from children. This site addresses businesses and has no feature aimed at a child; if you believe a child has sent us something, write in and it will be deleted.

What you may require

You can ask us to:

• Confirm whether we hold personal information about you, and supply a copy.
• Correct whatever is wrong or incomplete.
• Delete what we no longer need.
• Stop using your information for a particular purpose.
• Treat earlier consent as withdrawn.

Write to contact@nimtreeinfotech.com, ideally from the address you first wrote from, or describe the enquiry well enough for us to find it. Expect a question or two confirming the request is yours. A reasonable request costs nothing. If the way we handle it does not satisfy you, say so and it gets looked at again.

Other websites

Where this site links somewhere that is not ours, that site’s own privacy policy governs what happens there. We have no control over how another organisation treats your information, and a link is not approval of its practices.

When this changes

This page gets revised when the website changes or the law requires it. The date at the top is the date of this version. Anything material will appear here before or as it takes effect, so a second look before your next enquiry is worthwhile.