Privacy Policy

1. Introduction

MOULI Software Solutions ("MOULI," "we," "us," "our") provides web development, custom software, mobile app, e-commerce, and digital marketing services. This Privacy Policy explains what personal data we collect — as a website operator and as a service provider to our clients — how we use it, and the rights you have. It applies to:

• Visitors to mouli.io
• Prospective clients who contact us for a quote or consultation
• Clients we have an active or past engagement with
• Individuals whose data we process on a client's behalf while building or maintaining their project (see Section 6)

This Policy does not apply to work sourced through a third-party marketplace such as Upwork — data shared through that platform is governed by the platform's own privacy terms.

2. Who We Are

3. Information We Collect

3.1 Information You Provide Directly

• Contact and inquiry forms: name, email address, phone number, company/organization name, and project details you submit.
• Correspondence: information shared via email, phone, or WhatsApp, including files or attachments you send.
• Engagement information: billing details, invoicing information, and communications exchanged over the course of a project.
• Project materials: any Client Content you provide for us to build into your project (see Section 6 for data belonging to your own customers/users).

We do not ask for or knowingly collect payment card details, government ID numbers, or other sensitive personal data through the Site itself. Payment for engagements, where collected online, is handled through a third-party payment processor that has its own privacy and security practices.

3.2 Information Collected Automatically

When you visit mouli.io, we (and our hosting/analytics providers) may automatically collect IP address and approximate location, browser and device type, pages visited, referring/exit pages, and time and date of visits.

3.3 Cookies and Similar Technologies

We do not currently run analytics or tracking cookies on mouli.io. The Site may use strictly essential cookies required for it to function. If we add analytics in future, this section will be updated to name the specific tool before it goes live. We do not use cookies for third-party advertising or cross-site ad targeting.

4. How We Use Your Information

We use information we collect to:

• Respond to inquiries and provide quotes or proposals
• Deliver, manage, and support client engagements (project communication, invoicing, support requests)
• Operate, maintain, and improve the Site
• Send information you've requested, and — where you've consented — occasional updates about our services
• Detect, prevent, and address technical issues, fraud, or misuse
• Comply with applicable law and enforce our Terms of Service

We do not sell your personal data to third parties.

5. Legal Basis for Processing

Where the Digital Personal Data Protection Act, 2023 ("DPDPA") and its rules apply, we process personal data on the basis of:

• Your consent — e.g., when you submit a contact form or subscribe to updates. You may withdraw consent at any time by contacting us.
• Performance of a contract — processing necessary to deliver services you've engaged us for.
• Legitimate use — e.g., responding to a request you've voluntarily made to us.

6. Data We Process on Behalf of Clients

Some engagements involve building systems that process personal data belonging to our Client's own customers, students, patients, or users (for example, a school management system that stores student and parent records, or an e-commerce store that stores customer orders). For that data:

• MOULI acts as a service provider/processor, not the data controller. We process it only as instructed by the Client, for the purpose of building, testing, or maintaining the Client's system — never for MOULI's own marketing or other purposes.
• The Client remains responsible for having a lawful basis to collect that data and for its own privacy notice to its end users.
• Access to such data during development is limited to what's needed to complete the project, and is subject to the confidentiality terms in our Terms of Service.
• A separate Data Processing Addendum is available on request for engagements involving significant volumes of personal data (e.g., a school ERP or e-commerce platform), setting out security measures, sub-processors, and breach notification commitments in more detail.

7. How We Share Your Information

We do not sell, rent, or trade personal data. We may share it with:

• Service providers who support our operations — e.g., hosting/infrastructure providers, email delivery services, payment processors — under obligations to protect the data and use it only for the purpose we specify.
• Legal and compliance purposes — if required by law, regulation, court order, or governmental request, or to protect our rights, users, or the public.
• Business transfers — if MOULI is involved in a merger, acquisition, or sale of assets, data may be transferred as part of that transaction, subject to this Policy or a policy offering equivalent protection.

8. International Clients and Data Transfers

We serve clients across India and internationally. Where a project or communication involves transferring data outside India (e.g., using an international hosting region a Client requests, or communicating with an overseas Client), we take reasonable steps to protect that data in transit and at rest, consistent with this Policy and the applicable SOW.

9. Data Storage, Security and Retention

• Site and typical project infrastructure is hosted on AWS EC2 (Mumbai region — ap-south-1). We apply reasonable technical and organizational safeguards against unauthorized access, alteration, disclosure, or destruction.
• No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
• We retain personal data only as long as necessary for the purposes described in this Policy — generally for the duration of our relationship with you plus a reasonable period for record-keeping and legal compliance — after which it is deleted or anonymized. Data we process on a Client's behalf (Section 6) is retained or deleted per that Client's instructions and the applicable SOW.

10. Your Rights

Subject to applicable law (including the DPDPA), you have the right to:

• Access the personal data we hold about you
• Correct or update inaccurate or incomplete data
• Withdraw consent for processing based on consent, and request erasure of your data
• Grievance redressal — raise concerns about how we handle your data
• Nominate another individual to exercise these rights on your behalf in the event of death or incapacity

If your data was collected on behalf of one of our Clients (Section 6), please direct access/correction/erasure requests to that Client in the first instance, as they control that data; we will assist them as needed.

To exercise these rights with respect to data MOULI holds directly, contact us at admin@mouli.io.

11. Children's Privacy

The Site itself is intended for businesses and individuals aged 18 and over, and we do not knowingly collect personal data from children through it. Where a Client engagement involves building a system that processes children's data (e.g., a school platform), that data is handled as described in Section 6, under the Client's instructions and applicable law.

12. Third-Party Links

The Site may link to third-party websites (e.g., our social media profiles, client demo sites). We are not responsible for their privacy practices; review their policies separately.

13. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. The "Last Updated" date above reflects the most recent revision. Material changes will be posted on this page; continued use of the Site or an ongoing engagement after changes take effect constitutes acceptance.