Privacy & Data Protection Charter
At DigiVigee, data stewardship is built on transparency, zero-data-monetization, and strict encryption. Here is exactly how your information is handled, secured, and respected.
Zero Data Monetization
We never sell, rent, broker, or commercialize your personal information, client lead lists, or campaign telemetry to data brokers or advertising syndicates. Period.
Bank-Grade Encryption
Every connection is secured with TLS 1.3 in-transit. Stored databases and confidential client credentials are protected with salted Scrypt hashing and AES-256 rest encryption.
Full Erasure & Rights
Complete autonomy over your digital footprint. Exercise your Right to Access, Rectification, or complete Permanent Erasure (“Right to be Forgotten”) within 30 business days.
Overview & Scope of Policy
This Privacy Policy (“Policy”) outlines the standards and methodologies by which DigiVigee (“DigiVigee”, “we”, “our”, or “us”), registered in Gujarat, India, collects, safeguards, utilizes, processes, and disposes of personal data and commercial telemetry.
This Charter applies to all interactions across:
- Our primary public website (digivigee.com) and subdomains.
- Performance marketing, SEO consulting, and web engineering client engagements.
- Client strategy portals, reporting dashboards, and lead-generation funnels.
- Communication via WhatsApp Business API, corporate email, and voice calls.
Categories of Information Collected
We strictly adhere to data minimization principles. We only collect information that is strictly essential to deliver, evaluate, and scale our client marketing partnerships.
| Data Classification | Specific Elements Collected |
|---|---|
| Direct Identifiers | Full Name, official business email, direct telephone/WhatsApp number, company name, registered business address. |
| Commercial & Billing | GSTIN / Tax ID, enterprise invoicing details, bank wire records. (We do NOT store raw credit/debit card numbers). |
| Campaign & Ad Telemetry | Anonymized conversion events, ad spend logs, Meta Ads Manager identifiers, Google Ads asset logs, ROAS calculation signals. |
| Technical & Device Logs | IP address, browser version, device viewport, session cookies, referrers, UTM attribution tracking context. |
Legal Basis & Purpose of Processing
Under the Indian Digital Personal Data Protection (DPDP) Act 2023, EU GDPR (Regulation 2016/679), and international best practices, DigiVigee processes data only on designated legal grounds:
1. Fulfilling Contractual Retainers
To build tailored marketing roadmaps, audit ad funnels, engineer landing pages, deploy programmatic Meta/Google campaigns, and communicate deliverable milestones.
2. Legitimate Commercial Interests
To safeguard our website infrastructure against automated spam, credential stuffing, and bot attacks; to evaluate marketing channel efficacy; and to maintain client service continuity.
3. Explicit Opt-In Consent
When you voluntarily submit your email for our Agency Growth Newsletter or request a custom growth audit. You retain the absolute right to withdraw consent at any time via 1-click unsubscribe links.
Campaign & Advertising Telemetry Safeguards
Official Meta Business Partner Principle: As an official Meta Partner, DigiVigee follows strict tenant isolation. Your audience lists, customer match CSVs, and ad account pixels are NEVER commingled, shared, or matched across client boundaries.
When managing campaigns across Google Ads, Meta Business Manager, or LinkedIn Marketing Solutions:
- Granular Partner Access: We request partner-level or agency access through your native Business Manager. We never request or retain raw user passwords for third-party advertising accounts.
- Hashed Custom Audiences: Any first-party customer audience uploads are normalized and SHA-256 encrypted prior to transmission to ad network endpoints.
- Post-Termination Revocation: Upon retainer completion, all agency partner permissions are severed and localized reporting caches are sanitized within 30 days.
Authorized Third-Party Service Providers
DigiVigee engages trusted sub-processors exclusively to host, secure, and deliver enterprise-grade services. Each processor is contractually bound by rigorous Data Processing Addendums (DPAs):
Primary hosting, encrypted Firestore database storage, and secure authentication services.
Official Meta Business Partner API integration for authorized performance ad execution.
Conversion tracking, organic search console telemetry, and performance reporting.
Edge caching, DDoS mitigation, and global TLS cryptographic termination.
Security & Cryptographic Standards
We implement multi-tiered defense-in-depth security engineered to prevent unauthorized access, alteration, or interception:
TLS 1.3 Transport Security
All HTTP transmissions are strictly forced over HTTPS with modern cipher suites and HSTS enabled.
Salted Scrypt Hashing
Admin portal authentication utilizes computationally expensive salted Scrypt hashes resistant to GPU attacks.
Role-Based Access (RBAC)
Least-privilege permission model ensuring personnel only access records essential to their assigned pod.
Immutable Audit Trails
Every administrative action, permission modification, and login event is logged with forensic timestamps.
Data Retention & Automated Disinfection
We store personal and commercial data only for as long as necessary to achieve the stated business purpose or satisfy regulatory obligations:
- Prospective Inquiries & Leads: Retained for 12 months following last recorded contact. Inactive inquiries are permanently purged from active pipelines.
- Active Client Account Telemetry: Retained throughout the duration of the master service agreement plus 90 calendar days following formal offboarding.
- Invoicing & Tax Records: Retained for 7 fiscal years to comply with Indian statutory requirements under the Companies Act and GST mandates.
Your Fundamental Statutory Privacy Rights
Regardless of your geographic location, DigiVigee provides universal data subject autonomy. You have the direct right to:
Request an itemized digital export of all personal records we hold concerning you.
Request immediate correction or completion of inaccurate, outdated, or incomplete records.
Demand irrevocable deletion of your digital contact footprint (“Right to be Forgotten”).
Obtain your raw campaign and business records in structured, machine-readable JSON/CSV format.
Designated Grievance Redressal & DPO Office
In adherence to Section 10 of India's Digital Personal Data Protection Act 2023 and global privacy accords, DigiVigee has appointed a dedicated Data Protection & Grievance Officer. If you believe your data has been handled inconsistently with this policy, please reach out directly: