Privacy policy and data handling.
How progressKODE (a Thoratech brand) collects, uses, stores and protects personal data submitted through this website and any associated forms, applications, careers and business enquiries.
// Last updated. Drafted for v1 launch. Will be reviewed by qualified counsel before formal publication.
1. Who we are
This website is operated by Thoratech Innovations Pvt Ltd, the legal entity behind the progressKODE brand. Our registered office is in Pune, India. The data controller for personal data collected on this site is Thoratech Innovations Pvt Ltd. Contact us at hello@progresskode.com.
2. What data we collect and through which channels
We collect personal and business data only through channels where you actively choose to share it with us. Specifically:
- Business enquiry forms. Name, company, work email, phone number, sector, area of interest, free text message, page from which the form was submitted, timestamp.
- Demo requests. The fields above plus the product you asked to see.
- Careers and applications. Information you include in your email when you apply by mail (name, role applied for, CV attachment, links to your work, location, years of experience). We do not accept file uploads on this website. All career interactions happen by email.
- Direct email and phone. Any information you share when you reach out to us by email or telephone, including WhatsApp.
- Server logs. Standard technical metadata generated by web servers (IP address, browser, operating system, referrer, time of access). Used only to protect the site, debug issues and detect abuse.
3. Why we collect it
We process this data only to do the following:
- Respond to your enquiry, demo request or job application.
- Discuss whether we can work together and scope a possible engagement.
- Provide ongoing service, support and AMC communication where a contract is in place.
- Keep reasonable business records, comply with tax and statutory obligations and defend or assert legal rights.
- Protect the site from spam, abuse and security threats.
We do not sell, rent or share your personal data with third parties for their own marketing purposes. We do not profile you for advertising.
4. Lawful basis
Where the GDPR or comparable laws apply, we rely on the following lawful bases: your consent (every form requires an explicit consent tick), our legitimate business interest in evaluating prospective work and applications, and where applicable, the necessity to perform a contract or comply with a legal obligation.
5. How long we keep it
Enquiry records are retained for as long as the conversation is active and for a reasonable archival period afterwards (typically up to 36 months) for our business records and analytics. Career applications are retained for up to 12 months unless you are taken into an active hiring process. You can ask us to delete your data at any time by writing to hello@progresskode.com.
6. Security and storage
Data is transmitted over HTTPS and stored on access-controlled infrastructure with role-based access, encrypted storage and audit logging. Production access is restricted to a named set of internal personnel. We do not place submitted personal data in URL query strings.
ISO 27001 certification is on our active roadmap (in progress). SOC 2 is planned. We maintain a GDPR ready posture today.
8. Sharing with service providers
Limited and named third parties process data on our behalf strictly to deliver this website and our services. These currently include our cloud hosting provider, our email provider and our analytics provider. Each is bound by a data processing agreement and may not use your data for their own purposes.
9. Your rights
You have the right to access, correct, export or delete your personal data, and to object to or restrict our processing of it. You also have the right to withdraw your consent at any time. To exercise any of these rights, write to hello@progresskode.com. We respond within a reasonable period and at most within thirty days.
10. Cross-border transfers
Our primary data residency is India. Where data is processed by a service provider outside India, we ensure appropriate safeguards (standard contractual clauses or equivalent) are in place.
11. Children
This is a business website. We do not knowingly collect personal data from anyone under sixteen.
12. Changes to this policy
We may update this policy from time to time. Material changes will be reflected on this page with a revised "last updated" date. Continuing to use the site after a change indicates acceptance of the revised policy.
13. Contact
For any privacy question, data subject request or complaint, write to hello@progresskode.com. Mailing address: Thoratech Innovations Pvt Ltd, Pune, India.