Privacy Policy

Last updated: 28 October 2026

What we collect on this website and in our client work, why, who receives it, how long we keep it, and how to exercise your rights.

1. Who We Are

BuildsInfinity Technologies ("we", "our", "us") is operated by BuildsInfinity Technologies, a sole proprietorship (Udyam Registration No. UDYAM-UP-28-0210008), based in Noida, Uttar Pradesh, India. We build and operate software products and provide custom software, website, web application and mobile app development services.

This policy covers the buildsinfinity.com website, enquiries you send us, applications for roles, and the information we handle when we deliver development services for a client.

2. Our Products Have Their Own Policies

Each of our products has its own Privacy Policy, which governs the data handled inside that product. If your question is about your TrackMyPG or roomXplore account, the product's policy is the one that applies:

3. Information We Collect

We collect only what we need for the purposes in section 4:

  • Enquiries — the name, email, phone number, subject and message you submit through our contact form, or that you send us by email, phone or WhatsApp.
  • Job applications — what you choose to send to our careers inbox: typically your name, contact details, CV, portfolio links and any notes.
  • Client engagements — names, business contact details and project information shared with us while we scope, build and support software for you, and billing details needed to invoice you.
  • Technical information — IP address, browser type and the pages requested, recorded in our hosting provider's server logs to keep the site running and secure.
  • Performance measurements — anonymous page-load timings (such as how long a page took to render) together with the page path. They carry no identifier for you.
  • Website analytics — only if you accept them on the cookie banner. See the Cookie Policy.

4. Why We Use It

  • To reply to your enquiry and, if you ask, to arrange a call or demo.
  • To assess job applications and contact candidates.
  • To scope, deliver, support and invoice the services we have agreed with a client.
  • To keep the website secure, prevent abuse and diagnose problems.
  • To understand aggregate website usage — only with your analytics consent.
  • To meet our legal, tax and accounting obligations.

We do not sell personal data, and we do not add people who send an enquiry to marketing emails. If we ever offer a newsletter, it will have its own separate, optional opt-in.

5. The Basis We Rely On

  • Replying to an enquiry or application — the consent you give by sending it to us, and steps you have asked us to take before a contract.
  • Delivering services to a client — performance of our contract with that client.
  • Security logs and abuse prevention — legitimate uses permitted by law, to keep the site and its users safe.
  • Tax and accounting records — compliance with a legal obligation.
  • Website analytics — your consent, which you can withdraw at any time.

6. Data We Handle for Clients

When we build or support software for a client, we may need access to personal data of that client's own customers or users — for example, in a database we are migrating or a system we maintain. In that case the client decides why and how the data is processed and we act only on their documented instructions, as their Data Processor. We use that data only to deliver the agreed work, keep it confidential, give access only to people working on the project, and return or delete it at the end of the engagement unless the law requires us to keep it.

Where a project needs it, we sign a separate confidentiality or data processing agreement, which prevails over this section.

7. Who Receives It

We share personal data only with service providers that help us run our business — hosting and infrastructure, email and communication tools, code hosting and project management tools, and, with your consent, website analytics — and only as much as each needs to do its job.

Contact form enquiries are received and stored by the same enquiry system that serves TrackMyPG, which we also operate. They are not shared with anyone outside our business.

Beyond these providers, we disclose personal data only where the law requires it, to establish or defend a legal claim, to protect someone's safety, or as part of a merger or acquisition — in which case this policy continues to apply until you are told otherwise.

8. How Long We Keep It

  • Enquiries — for as long as we need to respond and follow up on the conversation, and then deleted. They are not on a fixed automatic schedule; ask us and we will delete yours.
  • Job applications — for up to 12 months after the role closes, so we can consider you for a similar role, unless you ask us to delete them sooner.
  • Client project records — for the duration of the engagement and any support period; personal data held as a processor is returned or deleted at the end, as the contract requires.
  • Invoices and payment records — eight years, as Indian tax and accounting law requires.
  • Server and security logs — only as long as needed to operate and secure the site, and as Indian cyber-security directions require.

9. Security

We use encrypted connections (HTTPS) across the site, restrict access to personal data to the people who need it, and use reputable providers for hosting and email. We do not hold a security certification such as ISO 27001 or SOC 2 and do not claim one.

No system is perfectly secure. If we become aware of a personal data breach affecting you, we will investigate, contain it, tell you without undue delay what happened and what we are doing about it, and make any report to a regulator that the law requires.

10. Your Rights

Under the Digital Personal Data Protection Act, 2023 and other applicable law, you can:

  • Ask for a summary of the personal data we hold about you and how we use it.
  • Ask us to correct, complete or update it.
  • Ask us to erase it, unless the law requires us to keep it.
  • Withdraw consent where we rely on it, such as for website analytics — without affecting what was done before.
  • Nominate someone to exercise these rights for you if you die or become unable to do so.
  • Raise a grievance with us, and if we do not resolve it, complain to the Data Protection Board of India.

To exercise any of these, write to [email protected] with "Privacy request" in the subject line. We may need to verify your identity before acting.

11. Children

This website and our services are meant for businesses and adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us their details, contact us and we will delete them.

12. International Transfers

We are based in India and our data is handled principally in India. Some of the providers in section 7 operate globally, so data may be processed outside India. We use established providers and share only what each needs, and we will follow any restrictions on cross-border transfers that apply under Indian law.

13. Changes to This Policy

The date at the top is the current version. For minor changes we update this page and its date. For material changes — a new purpose for your data or a new kind of processing — we will tell the people affected before the change takes effect, and ask for consent again where the law requires it.

14. Grievance Officer and Contact

For any question, request or complaint about personal data, contact our Grievance Officer. We acknowledge every complaint within 24 hours and resolve it within 15 days.

  • Grievance Officer: BuildsInfinity Technologies
  • Email: [email protected]
  • Phone: +91 79703 70554
  • Address: Noida, Uttar Pradesh, India

Read this policy together with our Terms of Service and Cookie Policy.