Privacy Policy
Last Updated: February 15, 2026
Introduction
Cognimit Technologies LLP ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.cognimit.com and use our product engineering, software development, AI workflow, and related technology services.
Please read this Privacy Policy carefully. By accessing or using our website and services, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our services.
Information We Collect
Personal Information You Provide
We may collect personal information that you voluntarily provide to us when you:
- Fill out contact forms or project brief forms
- Subscribe to our newsletter or blog updates
- Request a product consultation or technical quote
- Communicate with us via email, phone, or WhatsApp
- Register for events, webinars, or workshops
- Apply for job positions or developer roles
- Engage us for product engineering, software development, AI, SaaS, or design services
This information may include:
- Full name
- Email address
- Phone number
- Company name and job title
- Project details and requirements
- Business information
- Payment information (for contracted services)
- Resume and professional information (for job applications)
Information Automatically Collected
When you visit our website, we automatically collect certain information about your device and browsing activity, including:
- IP address
- Browser type and version
- Operating system
- Referring URLs
- Pages viewed and time spent on pages
- Click patterns and navigation paths
- Device identifiers
- Location data (city/country level)
- Cookies and similar tracking technologies
Information from Third Parties
We may receive information about you from third parties, such as:
- Social media platforms (if you interact with our social media pages)
- Business partners and referral sources
- Public databases and directories
- Marketing and analytics providers
How We Use Your Information
We use the collected information for the following purposes:
Service Delivery
- To provide, maintain, and improve our product engineering, software development, AI, SaaS, and digital technology services
- To process and fulfill your service requests, project briefs, and technical consultations
- To communicate with you about projects, deliverables, timelines, and milestones
- To provide customer support, technical assistance, and respond to inquiries
- To send project updates, invoices, and service-related communications
- To deliver fractional CTO, dedicated developer, and team augmentation services
Business Operations
- To analyze website usage and improve user experience
- To develop new services and features
- To conduct market research and business analysis
- To manage our business relationships
- To maintain security and prevent fraud
Marketing and Communications
- To send newsletters, promotional materials, and marketing communications (with your consent)
- To inform you about our services, events, webinars, and case studies
- To personalize your experience on our website
- To conduct targeted advertising campaigns
Legal and Compliance
- To comply with legal obligations and regulatory requirements
- To enforce our Terms of Service and other agreements
- To protect our rights, privacy, safety, and property
- To respond to legal requests and prevent illegal activities
Lawful Basis for Processing
Under the General Data Protection Regulation (GDPR) and the Digital Personal Data Protection Act, 2023 (DPDPA), we process your personal data only when we have a valid lawful basis to do so. The following outlines the legal basis for each category of processing:
Consent
We rely on your freely given, specific, informed, and unambiguous consent for:
- Sending marketing emails, promotional offers, and newsletters
- Setting and reading analytics cookies on your device (e.g., Google Analytics)
- Subscribing you to our blog or newsletter mailing lists
- Conducting targeted advertising campaigns
Contract Performance
Processing is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering into a contract:
- Delivering product engineering, software development, AI, SaaS, and related technology services
- Project communication, including updates on deliverables, timelines, and milestones
- Processing service requests, technical consultations, and project briefs
- Sending invoices, receipts, and service-related communications
- Providing fractional CTO, dedicated developer, and team augmentation engagements
Legitimate Interest
We may process your data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms:
- Improving and optimizing our website's user experience and performance
- Conducting business analytics, market research, and internal reporting
- Maintaining the security and integrity of our systems and preventing fraud
- Managing and developing our business relationships
Legal Obligation
We process certain data where it is necessary to comply with a legal obligation to which we are subject:
- Maintaining tax records, invoices, and financial documentation as required under Indian tax law
- Complying with regulatory requirements under the Information Technology Act, 2000 and DPDPA 2023
- Responding to lawful requests from law enforcement and regulatory authorities
- Retaining records as mandated by applicable Indian and international regulations
Consent & Consent Withdrawal
We respect your right to control how your personal data is used. Where we rely on consent as the lawful basis for processing, you have the right to withdraw that consent at any time.
Cookie Consent via Google Consent Mode v2
Our website implements Google Consent Mode v2 to manage analytics and advertising cookies. By default, analytics cookies are denied — no tracking cookies are set on your device until you provide explicit consent via our cookie consent banner, which appears on your first visit to our website.
How to Withdraw Consent
You may withdraw your consent at any time through any of the following methods:
- Clicking "Decline" on the cookie consent banner displayed on our website
- Clearing your browser cookies and cache, which will reset your consent preferences
- Sending a consent withdrawal request via email to support@cognimit.com or deepak@cognimit.com
- Unsubscribing from marketing emails using the "unsubscribe" link provided in every email
Effect of Withdrawal
Withdrawing your consent does not affect the lawfulness of any processing carried out prior to the withdrawal. Upon withdrawal, we will cease the relevant processing activities promptly. Please note that withdrawing consent for essential cookies may impact the functionality of our website.
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
- Contact inquiries: Retained for 2 years or until you request deletion
- Client project data: Retained for the duration of the engagement plus 7 years for legal and tax purposes
- Marketing data: Retained until you unsubscribe or request deletion
- Website analytics: Retained for 26 months (Google Analytics default)
- Job applications: Retained for 1 year unless you are hired
After the retention period, we will securely delete or anonymize your information.
Your Rights and Choices
Depending on your location and applicable laws, you may have the following rights:
Access and Portability
- Request access to the personal information we hold about you
- Receive a copy of your personal information in a structured, commonly used format
Correction and Update
- Request correction of inaccurate or incomplete personal information
- Update your information through your account settings or by contacting us
Deletion
- Request deletion of your personal information (right to be forgotten)
- Note: We may retain certain information as required by law or for legitimate business purposes
Restriction and Objection
- Request restriction of processing your personal information
- Object to processing of your information for direct marketing purposes
- Opt-out of marketing communications at any time
To exercise any of these rights, please contact us at privacy@cognimit.com or hello@cognimit.com.
Cookie Policy
What Are Cookies
Cookies are small text files stored on your device when you visit our website. We use cookies and similar technologies to enhance your browsing experience, analyze website traffic, and personalize content.
Types of Cookies We Use
- Essential Cookies: Required for the website to function properly. These cannot be disabled.
- Analytics Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics).
- Functional Cookies: Remember your preferences and settings.
- Marketing Cookies: Track your browsing activity to deliver relevant advertisements.
Managing Cookies
Our website uses Google Consent Mode v2 to ensure your cookie preferences are respected. A cookie consent banner is displayed on your first visit, allowing you to accept or decline non-essential cookies. Analytics cookies are blocked by default and are only activated when you explicitly provide your consent by clicking "Accept" on the banner.
You can manage your cookie preferences at any time through the following methods:
- Using the cookie consent banner on our website (accept or decline)
- Adjusting your browser settings to block or delete cookies
- Opting out of Google Analytics by visiting: https://tools.google.com/dlpage/gaoptout
Please note that disabling essential cookies may affect website functionality.
Cookies We Use
| Cookie Name | Purpose | Expiry |
|---|---|---|
_ga | Google Analytics tracking cookie — used to distinguish unique users and analyze website traffic | 2 years |
Data Security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction, including:
- Secure Socket Layer (SSL) encryption for data transmission
- Encrypted data storage
- Regular security audits and vulnerability assessments
- Access controls and authentication mechanisms
- Employee training on data protection
- Secure backup and disaster recovery procedures
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
International Data Transfers
As part of providing our services, your personal data may be transferred to, stored in, and processed in countries outside of India. We disclose the following third-party services that may involve international data transfers:
- Vercel: Our website is hosted on Vercel, with servers located in the United States and other global locations.
- Google Analytics 4: Website analytics data is processed on Google servers, primarily located in the United States.
- Turso: Our database is hosted on Turso, which operates edge locations distributed globally.
We ensure that appropriate safeguards are in place when transferring personal data internationally, including:
- Standard Contractual Clauses (SCCs) approved by relevant regulatory authorities
- Adequacy decisions where applicable
- Ensuring third-party processors comply with equivalent data protection standards
For more information about the safeguards we have in place, please contact us at deepak@cognimit.com.
Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will take the following steps in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA) and other applicable laws:
- Regulatory Notification: We will notify the Data Protection Board of India within 72 hours of becoming aware of a qualifying personal data breach, as required under DPDPA 2023.
- Individual Notification: We will notify affected individuals (Data Principals) without undue delay, providing clear and transparent information about the breach.
Our breach notifications will include:
- The nature and scope of the personal data breach
- The categories and approximate volume of data affected
- The measures taken or proposed to address the breach and mitigate its effects
- Contact details for our Data Protection Officer for further queries
We maintain an internal breach register and conduct post-incident reviews to prevent future occurrences.
Children's Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete such information promptly.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Cognimit Technologies LLP
Email: support@cognimit.com
Phone: +91 93270 57103
Address: A-Block, 606 Prahladnagar Trade Center, B/H Titanium city center, Vejalpur, Ahmedabad, Gujarat, 380051, India
Data Protection Officer: Deepak Nishad (deepak@cognimit.com)
Grievance Officer (as required under IT Act, 2000 — Rule 5(9))
Name: Deepak Nishad
Email: deepak@cognimit.com
Grievance Resolution Timeline: Within 30 days from the date of receipt of the grievance
If you have any grievance relating to the processing of your personal information, you may contact the Grievance Officer at the email address above. The Grievance Officer shall address your grievance expeditiously and in any case within 30 days of receipt.
We will respond to your inquiry within 30 days of receipt.
Legal Compliance
This Privacy Policy complies with:
- Information Technology Act, 2000 (India)
- Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
- Digital Personal Data Protection Act, 2023 (DPDPA) — for Indian Data Principals
- Consumer Protection Act, 2019 (India)
- General Data Protection Regulation (GDPR) — for EEA users
- California Consumer Privacy Act (CCPA) — for California residents
- Other applicable data protection laws and regulations
Acknowledgment: By using our website and services, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.