Privacy Policy

Effective date: August 12, 2026

1. Introduction & Launch Context

Efixel ("we", "us", or "our") is an early-stage technology startup preparing its initial service launch in Pune, Maharashtra, India. This Privacy Policy explains how we collect, use, process, and protect information submitted through our public website.

2. Information We Collect

We collect information you voluntarily provide through our website forms and interactive assistant:

• Contact Information: Full name, email address, and phone number (where provided).
• Enquiry & Message Details: Subject lines, message text, and questions submitted via contact or chatbot forms.
• User-Selected Location: For early access and technician registration forms, users select their service or interest area (such as Pune, Pimpri-Chinchwad, Mumbai, or Other custom area).
• Consent Records: Confirmation of explicit consent, consent category, consent policy version, and timestamp.

3. Location Information Disclaimer

The location information collected on our forms is user-selected and user-provided information. It is used solely to understand regional demand, coordinate initial launch logistics in Pune, evaluate potential expansion to additional cities, and plan technician onboarding. We do not collect GPS data, automated browser geolocation, or IP-derived physical location tracking.

4. Technical & Network Information (No Permanent IP Storage)

When you visit our website, our server and security infrastructure may temporarily process technical network metadata, including your IP address and browser user agent, in transient memory for essential operational purposes: rate limiting, DDoS mitigation, spam prevention, and abuse protection.

Important: Efixel may temporarily process technical network information such as IP addresses for security and operational purposes, but IP addresses are not intentionally retained as part of permanent lead records in our databases.

5. How We Use Submitted Information

We use submitted information solely for legitimate operational and communication purposes:

• Responding to inbound questions and customer support enquiries.
• Managing priority early access interest for our upcoming launch.
• Evaluating technician partner registrations and onboarding requirements.
• Maintaining site security, detecting fraudulent activity, and complying with legal obligations.

6. Data Protection & Security Controls

We implement robust technical and organizational security controls to protect your data:

• Encryption at Rest: Sensitive personal fields (names, email addresses, phone numbers, messages, and custom location details) are encrypted using industry-standard AES-128 Fernet cryptography before being stored.
• Access Control & 2FA: Administrative access requires strong Argon2 password hashing, Time-based One-Time Password (TOTP) two-factor authentication, and progressive brute-force lockouts.
• Application Hardening: All forms enforce strict cryptographic CSRF tokens, origin validation, server-side input sanitization, and security response headers (Content Security Policy, HSTS, X-Frame-Options).

While we apply modern defense-in-depth measures, no electronic storage or transmission over the internet can be guaranteed 100% impenetrable.

7. Third-Party Service Providers

We do not sell, rent, or trade your personal data. We may share data only with trusted service providers necessary to operate the platform:

• Cloud Infrastructure & Security: Cloudflare (reverse proxy, DDoS defense, bot protection).
• Database Hosting: MongoDB Atlas (encrypted database storage).
• Communication Services: Secure SMTP email delivery providers.
• Analytics (Consent-Gated): Google Analytics 4 is strictly gated and will only load if you explicitly choose "Accept All" on our cookie consent banner.

8. Data Retention

We retain website enquiries, early access submissions, and technician applications only for as long as reasonably necessary to fulfill communication purposes, plan business operations, maintain security records, and satisfy applicable legal requirements.

9. Your Rights & Grievances

Depending on applicable laws, you may have the right to request access to, correction of, or deletion of your submitted personal information, or withdraw consent for future communications. To exercise any of these rights, please contact our grievance officer at: mailefixel@gmail.com.

10. Minors & Children's Privacy

This website is not directed to children or minors under applicable law. Efixel does not knowingly collect personal information from minors through its public website.

11. Policy Updates

We may update this Privacy Policy from time to time to reflect technological, operational, or legal developments. Revised versions will be published on this page with an updated effective date.