Privacy & Data Security Policy
Our legally binding commitment to safeguarding proprietary source code, institutional databases, and student/client data in full accordance with the Digital Personal Data Protection (DPDP) Act, 2023 and the Information Technology Act, 2000.
Executive Data & Code Confidentiality Undertaking
duperTech (operating since 2022) provides software engineering solutions for colleges, higher education institutes, private enterprises, and government institutions. We operate with zero tolerance for unauthorized data exposure. All client source code, database architectures, and institutional records remain the exclusive proprietary property of the client, protected under strict Non-Disclosure Agreements (NDAs) and statutory Indian legal frameworks.
1. Statutory Framework & Scope of Policy
This Privacy and Data Protection Policy ("Policy") governs the operational, development, and hosting practices of duperTech ("Company", "we", "our", or "us"), headquartered in New Delhi, India. This document applies to all digital applications, enterprise resource planning (ERP) platforms, web portals, and custom software developed for commercial enterprises, autonomous educational institutions, universities, and state/central government colleges.
This Policy is formulated in strict compliance with:
- The Digital Personal Data Protection (DPDP) Act, 2023.
- The Information Technology Act, 2000 (including the 2008 Amendment).
- The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
- Applicable institutional public procurement standards and government cloud data sovereignty mandates.
2. Client Source Code Security & Non-Disclosure (NDA)
We recognize that proprietary algorithms, application logic, and codebase constitute mission-critical trade secrets. duperTech assumes legal responsibility for maintaining ironclad source code isolation and security:
Isolated Repositories
Every project codebase is housed in strictly segregated, private, encrypted Git repositories. No cross-client code sharing, mixing, or multi-tenant repository bleeding is permitted.
Principle of Least Privilege
Access to client codebase and staging environments is restricted exclusively to authorized senior engineers assigned to that client, governed by hardware 2FA and cryptographic access keys.
Zero Code Monetization / No Re-Use
Custom bespoke source code, schema architecture, and business logic created for your organization will never be sold, licensed, distributed, or repurposed for any competing entity.
Clean Codebase Handover
Upon contractual milestone settlement, 100% full unencumbered ownership of the source code and build pipelines is transferred to the client without backdoors or proprietary lock-ins.
3. Institutional, College & Government Data Sovereignty
In our capacity as a technology partner pitching to and serving government colleges, polytechnics, universities, and corporate enterprises, we enforce data sovereignty protocols:
- Territorial Data Residency: All institutional data, including student records, marks, examination databases, fee ledgers, and faculty credentials, are hosted strictly within sovereign Indian data centers (MeitY-empaneled cloud providers such as AWS India / Azure India / NIC servers or client-specified on-premise institutional data centers).
- Zero Data Sale or Commercialization: duperTech strictly refrains from selling, leasing, profiling, or monetizing any academic, institutional, or client corporate data.
- Role-Based Access Control (RBAC): Administrative dashboards engineered by duperTech implement granular RBAC, ensuring that institutional staff, examination controllers, and principals have cryptographically segregated access logs.
4. Technical & Cryptographic Safeguards
duperTech incorporates the following industry-recognized security measures across all deployments:
5. Security Incident Response & Support Schedule
In accordance with the DPDP Act 2023 and CERT-In directions, duperTech maintains a structured incident escalation mechanism:
Standard Security & Support Window: Monday to Saturday, 10:00 AM to 6:00 PM IST.
Breach Notification Window: In the highly improbable event of a validated security incident affecting institutional or enterprise data, duperTech shall notify the affected client and nodal authorities without undue delay within statutory timelines.
Emergency Hotline: 24/7 emergency escalation is maintained for mission-critical institutional server disruptions and critical data integrity threats.
6. Data Retention, Sanitization & Exit Protocol
Upon completion or termination of a client contract:
- All staging data, credentials, and customer assets are securely delivered to the client's designated administrator.
- Within thirty (30) days of verified final delivery and contract conclusion, duperTech securely purges all cached client development instances and staging database dumps following NIST 800-88 sanitization standards.
- Written Certificate of Sanitization can be issued upon formal request by government or enterprise compliance officers.
7. Grievance Officer & Statutory Contact
For formal legal notices, data protection audits, government tender compliance verifications, or grievance redressal: