Privacy Policy

1. Introduction

Welcome to Muffincode. We are committed to protecting your privacy and handling your personal data with transparency, integrity, and care. This Privacy Policy explains what information we collect when you visit our website (muffincodes.com), use our services, or communicate with us — and how we use, store, and protect that information.

By using our website or engaging our services, you agree to the collection and use of information as described in this policy. If you do not agree with any part of this policy, please do not use our website or services.

This policy is written in plain English so you can actually understand it — no confusing legal jargon.

2. Who We Are

Muffincode is a software development and technical services agency owned and operated by:

• Business Name: Muffincode
• Founder / Data Controller: Rohit Kumar
• Website: www.muffincodes.com
• Email: hello@muffincodes.com
• Location: India
• Services: Full-stack web development, AI integration, cloud engineering, CRM/ERP development, Shopify/WordPress development, and white-label technical services.

When this policy refers to "Muffincode", "we", "us", or "our", it means Rohit Kumar operating as Muffincode.

3. Information We Collect

We collect information in the following ways:

3.1 Information You Provide Directly

When you fill out a contact form, book a consultation, send us an email, or engage our services, we may collect:

• Your full name
• Email address
• Phone number (if provided)
• Company name and role
• Project details, requirements, and any other information you choose to share
• Payment information (processed securely via Razorpay or Stripe — we do not store card details)

3.2 Information Collected Automatically

When you visit muffincodes.com, we may automatically collect:

• IP address and approximate geographic location
• Browser type and version
• Device type (desktop, mobile, tablet)
• Pages visited, time spent, and click behaviour
• Referral source (how you found us)
• Cookies and similar tracking technologies (see Section 7)

3.3 Information from Third Parties

If you contact us via LinkedIn, WhatsApp, or other platforms, we may receive your name and any information you choose to share in that message.

4. How We Use Your Information

We use the information we collect for the following purposes:

We will never sell, rent, or trade your personal information to any third party for their marketing purposes.

5. How We Share Your Information

We do not sell or trade your personal data. We may share it only in the following limited circumstances:

5.1 Service Providers

We use trusted third-party tools to operate our business. These providers only access your data to perform specific tasks on our behalf and are obligated to protect it:

• Razorpay / Stripe — payment processing
• Google Analytics — website analytics (anonymised data)
• Google Workspace — email and document management
• WhatsApp Business — client communication
• Zoho / Notion — project management (if applicable)

5.2 Legal Requirements

We may disclose your information if required to do so by law, court order, or government authority, or if we believe in good faith that such disclosure is necessary to protect our rights, protect your safety, or prevent fraud.

5.3 Business Transfer

If Muffincode is ever acquired, merged, or its assets transferred, your data may be transferred as part of that transaction. You will be notified in advance.

6. How Long We Keep Your Data

We retain your personal information only for as long as necessary for the purposes described in this policy:

• Client project data — retained for 3 years after project completion for legal and support purposes
• Enquiry data (non-clients) — retained for 12 months, then deleted
• Payment records — retained for 7 years as required under Indian tax law
• Website analytics — anonymised data retained for 26 months (Google Analytics default)
• Email correspondence — retained for 2 years from last contact

You may request deletion of your data at any time (see Section 9 — Your Rights).

7. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to improve your experience and analyse website traffic.

Types of Cookies We Use

• Essential cookies — required for the website to function correctly (cannot be disabled)
• Analytics cookies — help us understand how visitors interact with our site (Google Analytics)
• Preference cookies — remember your settings and choices
• Marketing cookies — used to show relevant ads (only if you consent)

You can control cookie preferences through your browser settings at any time. Disabling certain cookies may affect the functionality of the website. By continuing to use our website, you consent to our use of essential cookies.

8. How We Protect Your Data

We take data security seriously and implement appropriate technical and organisational measures to protect your personal information:

• HTTPS encryption on all pages of muffincodes.com
• Secure, password-protected email and project management systems
• Payments processed via PCI-DSS compliant payment gateways (Razorpay / Stripe) — we never store card numbers
• Limited access — only Rohit Kumar has access to client data
• Regular security reviews of our tools and processes

While we take every reasonable precaution, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we commit to notifying you promptly if a data breach occurs that affects your information.

9. Your Rights

As a user or client of Muffincode, you have the following rights regarding your personal data:

• Right to Access — you can request a copy of the personal data we hold about you
• Right to Correction — you can ask us to correct inaccurate or incomplete information
• Right to Deletion — you can request that we delete your personal data (subject to legal retention requirements)
• Right to Object — you can opt out of marketing communications at any time
• Right to Data Portability — you can request your data in a portable format
• Right to Withdraw Consent — where processing is based on consent, you may withdraw it at any time

10. Third-Party Links

Our website may contain links to third-party websites (such as social media profiles, payment platforms, or tools we recommend). We are not responsible for the privacy practices or content of those websites. We encourage you to read the privacy policies of any third-party sites you visit.

11. Children's Privacy

Our website and services are not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected data from a minor without parental consent, we will delete it immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we will:

• Update the 'Last Updated' date at the top of this page
• Post a notice on our website homepage
• Notify active clients by email where appropriate

Continued use of our website or services after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:

• Name: Rohit Kumar
• Business: Muffincode
• Email: hello@muffincodes.com
• Website: www.muffincodes.com
• Response Time: Within 2 business days