Clear information about how we handle personal data.

01

Scope of this policy

This policy applies to the corporate website operated by BMPAPPS Private Limited (“BMPApps”, “we”, “us” or “our”). It covers information handled when you browse this website, contact us about the company, send a career enquiry or communicate about possible research participation.

External websites linked from this corporate site are governed by their own privacy policies. This policy is limited to BMPApps company communications, careers and voluntary research participation conducted through or initiated from this website.

02

Personal data we handle

Information you choose to provide

When you email BMPApps, we may receive your name, email address, organisation, role, message and any information or attachments you include. A career enquiry may include your résumé, employment history, education, skills, portfolio links and other details you decide to share.

Website and technical information

Our hosting, network and security infrastructure may process technical information needed to deliver and protect the site, such as an IP address, browser and device type, requested page, referring page, date and time, and diagnostic or security events.

Third-party resources

This website currently requests font files from Google Fonts. When your browser loads those files, it connects directly to Google and shares technical request information such as your IP address and browser details. Google handles that information under its own privacy terms.

BMPApps does not currently set first-party advertising or analytics cookies on this corporate website.

03

How and why we use personal data

Depending on how you interact with us, we may use personal data to:

• respond to company, partnership, media, support or other enquiries;
• review career-interest messages and communicate about possible opportunities;
• invite, screen or communicate with people who voluntarily express interest in research;
• operate, maintain, troubleshoot and secure the website;
• understand technical performance using limited operational information;
• prevent misuse, investigate security events and protect our rights; and
• meet applicable legal, regulatory or lawful governmental requirements.

We process personal data for a lawful purpose, based on your consent where required or another basis permitted by applicable law. You are not required to email us or provide optional information.

04

Research, ideation and innovation

Understanding real problems is part of the BMPApps product-development process. Website visitors are not automatically enrolled in research, and we do not treat an ordinary website visit as consent to participate.

If BMPApps conducts interviews, surveys, usability sessions, prototype testing or another activity involving participants, we will provide project-specific information before participation. That notice will explain what is collected, why it is needed, whether a session is recorded, how the information will be used, who may receive it, how long it will be kept and how participation can be stopped.

Participation will be voluntary unless a different lawful basis is clearly identified. Where practical, research findings used for ideation and product decisions will be aggregated or de-identified. We will not publish a participant’s identity or attributed feedback without permission.

05

When personal data may be shared

We do not sell personal data. We may make limited disclosures to:

• hosting, infrastructure, email, security and other service providers working for BMPApps;
• professional advisers such as legal, accounting or security specialists where necessary;
• governmental, regulatory, judicial or law-enforcement bodies when disclosure is lawfully required; or
• a successor or relevant party in a proposed reorganisation, financing, merger, acquisition or transfer, subject to appropriate confidentiality safeguards.

Service providers are expected to use personal data only for the services they provide to BMPApps and to protect it appropriately.

06

How long we retain information

We retain personal data only for as long as reasonably necessary for the purpose for which it was received, including responding to an enquiry, considering a career profile, completing an agreed research activity, maintaining security records and satisfying legal or record-keeping requirements.

Retention periods can differ by context. We delete or de-identify information when it is no longer reasonably needed, unless continued retention is required or permitted by law. You may contact us if you want us to review information previously submitted by email.

07

How we protect information

We use reasonable technical and organisational safeguards intended to protect personal data against unauthorised access, alteration, disclosure, loss or misuse. Safeguards are reviewed in proportion to the nature of the information and the way it is handled.

No internet transmission or storage system can be guaranteed to be completely secure. Please avoid emailing sensitive personal data that is not necessary for your enquiry.

08

Your privacy choices and requests

Subject to applicable law and relevant exceptions, you may ask us to:

• confirm whether we hold personal data about you and provide information about its processing;
• correct or update inaccurate or incomplete personal data;
• erase personal data that is no longer needed;
• withdraw consent for future processing where processing depends on consent; or
• address a concern or grievance about our handling of personal data.

Send a request to support@bmpapps.com. Please describe your request and the interaction through which you provided the information. We may need to verify your identity before acting, and some information may be retained where law permits or requires it.

India’s Digital Personal Data Protection Act, 2023 and its implementing rules are subject to phased commencement. BMPApps will apply the rights and obligations that are in force and applicable to its processing, while offering the request channels described above as part of our privacy approach.

09

Children’s privacy

This corporate website is intended for a general and professional audience and is not designed to collect personal data from children. We do not knowingly solicit personal data from a child through this website. A future product or research activity involving children would require a separate age-appropriate process and any consent required by applicable law.

10

International processing

Some technology and service providers may process information from locations outside your state or country. Where personal data is transferred or made available across borders, BMPApps will take steps appropriate to the information, provider and requirements of applicable law.

11

Changes to this policy

We may update this policy as the website, company activities, technology or legal requirements change. The “Last updated” date will identify the current version. If a change materially affects how information already provided to us is handled, we will take reasonable steps to provide additional notice where appropriate.

12

Privacy and grievance contact

Questions, requests and privacy grievances can be sent to:

We will review the request and respond within the period required by applicable law. You may also use any complaint or appeal mechanism available to you under applicable data-protection law.

Legal framework reference: Digital Personal Data Protection Act, 2023 — India Code.