Privacy Policy

Bangalore Easycoding LLP (“easyCoding,” “we,” “us,” or “our”) is a product studio incorporated in India, operating our own SaaS products and partnering with a select group of founders. This Privacy Policy explains how we collect, use, disclose and safeguard personal data when you visit our website at easy-coding.io (the “Website”), contact us, or otherwise interact with us.

Registered office: 235, Binnamangala 2nd Floor, 13th Cross Road, Indira Nagar 2nd Stage, Indiranagar, Bengaluru 560038, Karnataka, India. We also operate a studio presence in Berlin, Germany (available on request).

For any privacy question, contact us at info@easy-coding.io.

This Policy applies to personal data we process as a data controller / data fiduciary through the Website and our general business operations. Because we are based in India and operate in and serve clients in the European Union (including Germany), this Policy is designed to address both:

• the Digital Personal Data Protection Act, 2023 (DPDP Act) and the DPDP Rules, 2025 of India; and
• the EU General Data Protection Regulation (GDPR) and applicable German data protection law (BDSG), where you are located in the European Economic Area (EEA).

Where the two frameworks differ, we apply the standard that gives you greater protection.

3.1 Data you give us

• Contact and enquiry data: your name, email address, company, and the content of any message you submit through our contact form or send us by email.
• Project and partnership data: information you share when discussing a potential engagement (e.g. project scope, requirements, business context).

3.2 Data we collect automatically

• Technical and usage data: IP address, browser type and version, device and operating system information, referring pages, pages viewed, and timestamps.
• Cookie and tracking data: identifiers set through cookies and similar technologies, including via Google Tag Manager and any analytics tools it loads (see Section 5).

We do not intentionally collect special categories of data (such as health, biometric, or financial account data) through the Website. Please do not submit such data through the contact form.

We use personal data for the purposes below. Under the GDPR we must have a lawful basis for each purpose; under the DPDP Act we generally process personal data on the basis of your consent or for legitimate uses permitted by law.

The Website uses cookies and similar technologies to function correctly, remember your preferences, and understand how the Website is used. We load Google Tag Manager, which may in turn deploy analytics and marketing tags.

Where required by law (including in the EEA/Germany), non-essential cookies are set only after you give consent through our cookie banner. You can withdraw or change your choice at any time. Please see our separate Cookie Policy for the full list of cookies, their purposes and durations, and instructions on how to manage them in your browser.

We do not sell your personal data. We share it only as follows:

• Service providers / data processors: trusted vendors who process data on our behalf, such as website hosting and infrastructure (e.g. Cloudflare), analytics providers (e.g. Google), and email or communication tools, under contracts that require appropriate safeguards.
• Legal and safety: where required by law, regulation, legal process, or to protect our rights, users, or the public.
• Business transfers: in connection with a merger, acquisition, or reorganisation, subject to this Policy.

We operate between India and the European Union, so your personal data may be transferred to, stored in, or accessed from a country other than the one you are in — including transfers between India and the EEA, and to service providers located elsewhere.

For transfers of personal data out of the EEA, we rely on an appropriate transfer mechanism, such as the European Commission’s Standard Contractual Clauses, together with any additional safeguards required. For transfers governed by the DPDP Act, we transfer personal data only in accordance with applicable Indian law and any restrictions notified by the Government of India.

We keep personal data only for as long as necessary for the purposes described in this Policy, to comply with our legal, accounting, or reporting obligations, and to resolve disputes. Contact-form enquiries that do not lead to an engagement are typically retained for 24 months and then deleted or anonymised. When data is no longer needed, we delete or anonymise it.

Subject to applicable law, you have the following rights over your personal data:

• Access — to obtain confirmation of, and a copy of, the personal data we hold about you and a summary of our processing.
• Correction — to have inaccurate or incomplete data corrected or updated.
• Erasure — to request deletion of your personal data where there is no lawful reason to keep it.
• Withdraw consent — to withdraw any consent at any time, as easily as it was given (this does not affect processing already carried out).
• Grievance redressal and nomination — under the DPDP Act, to have grievances addressed and to nominate another person to exercise your rights in the event of death or incapacity.
• GDPR rights — if you are in the EEA, you also have the rights to restriction of processing, data portability, and to object to processing based on legitimate interests or used for direct marketing.

To exercise any right, contact us at info@easy-coding.io. We will respond within the timeframes required by applicable law. There is no fee unless your request is manifestly unfounded or excessive.

In line with the DPDP Act and the DPDP Rules, 2025, you can contact our Grievance Officer / data protection contact for any questions, requests, or complaints about how we handle your personal data:

If you are in the EEA and believe we have not addressed your concern, you may lodge a complaint with your local data protection supervisory authority. If you are in India and are not satisfied with our response, you may approach the Data Protection Board of India.

The Website is intended for businesses and adults and is not directed at children. We do not knowingly collect personal data from children. In line with the DPDP Act, we do not process a child’s personal data without verifiable consent of a parent or lawful guardian, and we do not undertake tracking, behavioural monitoring, or targeted advertising directed at children. If you believe a child has provided us with personal data, contact us and we will delete it.

We maintain reasonable technical and organisational security measures appropriate to the risk — including encryption in transit, access controls, and vendor due diligence — to protect personal data against unauthorised access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the relevant authorities of a personal data breach where required by law.

We may update this Policy from time to time. We will post the updated version on this page and revise the “Last updated” date above. Where changes are significant, we will take additional steps to inform you as required by law.