Back to Home

Privacy Policy

Last updated: February 10, 2026

CodeMetrics ("Company," "we," "us," or "our"), a software development company registered and operating in Ghaziabad, Uttar Pradesh, India, is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, disclose, and safeguard your information when you visit our website, engage our software development services, or interact with us in any manner.

This Privacy Policy is published in compliance with the Information Technology Act, 2000 ("IT Act"), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), and the Digital Personal Data Protection Act, 2023 ("DPDP Act") of India. By accessing our website or using our services, you consent to the collection, use, and processing of your information as described herein.

1. Information We Collect

1.1 Personal Information Provided by You

We collect personal information that you voluntarily provide when you:

  • Fill out a contact form or request a consultation
  • Request a project quote or proposal
  • Subscribe to our newsletter or marketing communications
  • Apply for employment or freelance positions
  • Enter into a service agreement or contract with us
  • Participate in surveys, webinars, or promotional events
  • Communicate with us via email, phone, or other channels

This information may include: full name, email address, phone number, company name, job title, billing address, GST identification number (GSTIN), PAN details (for Indian clients), project requirements, and any other information you choose to provide.

1.2 Sensitive Personal Data or Information (SPDI)

As defined under the SPDI Rules, we may collect sensitive personal data including financial information (bank account details, payment card details) and passwords only where strictly necessary for providing our services, and only with your explicit consent.

1.3 Automatically Collected Information

When you visit our website, we automatically collect certain technical information, including:

  • IP address and geolocation data
  • Browser type, version, and language preferences
  • Operating system and device information
  • Pages visited, time spent, and navigation patterns
  • Referring URL and exit pages
  • Date and time of access

1.4 Information from Third Parties

We may receive information about you from third-party sources such as business partners, marketing platforms, publicly available databases, and social media platforms, to the extent permitted by applicable law.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide, operate, maintain, and improve our software development services
  • To process and respond to your inquiries, quote requests, and service requests
  • To enter into and perform contracts for software development, web development, mobile app development, website customization, legacy system migration, and other IT services
  • To process payments, generate invoices, and maintain financial records as required under Indian taxation laws (including GST compliance)
  • To send you marketing and promotional communications (only with your prior consent, which you may withdraw at any time)
  • To communicate project updates, milestones, and deliverables
  • To improve our website, services, and user experience through analytics
  • To protect against fraud, unauthorized access, and security threats
  • To comply with applicable laws, regulations, and legal obligations under Indian law
  • To enforce our Terms of Service and other agreements
  • To respond to lawful requests from governmental authorities

4. Disclosure of Information

We do not sell, trade, or rent your personal information to third parties. We may disclose your information in the following limited circumstances:

  • Service Providers and Sub-contractors: We may share information with trusted third-party vendors, cloud hosting providers, payment processors, and sub-contractors who assist us in operating our business and delivering services, subject to appropriate confidentiality and data protection obligations
  • Business Transfers: In the event of a merger, acquisition, reorganization, or sale of all or a portion of our assets, your information may be transferred as part of that transaction
  • Legal Requirements: We may disclose information when required to do so by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, property, or safety, or the rights, property, or safety of others
  • Professional Advisors: We may share information with our legal counsel, auditors, accountants, and other professional advisors as necessary
  • With Your Consent: We may share information with your explicit consent or at your direction

In all cases, we ensure that any third party receiving your data is bound by appropriate confidentiality and data protection obligations consistent with this Privacy Policy and applicable Indian law.

5. Data Storage and Security

We implement reasonable security practices and procedures as required under the SPDI Rules and the IT Act, including but not limited to:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Implementation of access controls, firewalls, and intrusion detection systems
  • Regular security assessments and vulnerability testing
  • Employee training on data protection and confidentiality
  • Secure disposal of data that is no longer required
  • Documented information security policies and incident response plans

Our security practices are aligned with international standards including ISO/IEC 27001 principles. We maintain comprehensive security policies as mandated under Rule 8 of the SPDI Rules.

However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security. You acknowledge that you provide your personal information at your own risk, and the Company shall not be liable for any unauthorized access resulting from circumstances beyond its reasonable control.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience and collect analytics data. For detailed information about the types of cookies we use, their purposes, and how to manage your cookie preferences, please refer to our Cookie Policy.

You may control cookies through your browser settings. However, disabling certain cookies may affect the functionality and your experience on our website. By continuing to browse our website without adjusting your cookie settings, you consent to our use of cookies as described in our Cookie Policy.

7. Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required under applicable Indian law, whichever is longer. Specifically:

  • Client project data: Retained for the duration of the project and a minimum of 8 (eight) years thereafter, as required under the Income Tax Act, 1961, and GST regulations
  • Financial records: Retained for a minimum of 8 (eight) years as per Indian tax and accounting regulations
  • Marketing data: Retained until you withdraw your consent or unsubscribe
  • Website analytics data: Retained for up to 26 months
  • Job application data: Retained for up to 2 (two) years from the date of application

After the applicable retention period, your data will be securely deleted or anonymized. The Company reserves the right to retain data for longer periods where required by law or for the establishment, exercise, or defence of legal claims.

8. Your Rights

Under the DPDP Act, 2023, and the SPDI Rules, you have the following rights with respect to your personal data:

  • Right to Access: You may request confirmation of whether we hold your personal data and obtain a summary of the same
  • Right to Correction: You may request correction or updating of inaccurate or incomplete personal data
  • Right to Erasure: You may request deletion of your personal data, subject to any legal obligation requiring its retention
  • Right to Withdraw Consent: Where processing is based on your consent, you may withdraw such consent at any time. Withdrawal of consent shall not affect the lawfulness of processing carried out prior to the withdrawal
  • Right to Grievance Redressal: You may raise a grievance with our Grievance Officer (details below)
  • Right to Nominate: Under the DPDP Act, you may nominate another individual to exercise your rights in the event of your death or incapacity

To exercise any of these rights, please contact our Grievance Officer using the details provided in Section 12 below. We will respond to your request within 30 (thirty) days or such other period as prescribed under applicable law. The Company reserves the right to verify your identity before processing any such request and may decline requests that are unreasonable, repetitive, or not required under applicable law.

9. Cross-Border Data Transfers

As a software development company serving clients globally, your personal data may be transferred to and processed in countries other than India, including countries where our cloud hosting providers, sub-contractors, or affiliate offices operate.

Any such transfer will be carried out in compliance with the provisions of the DPDP Act and the SPDI Rules, and we will ensure that adequate safeguards are in place to protect your personal data. We shall not transfer your personal data to any country or territory that has been restricted by the Central Government of India under the DPDP Act.

By using our services and providing your personal data, you consent to such cross-border transfers as may be necessary for the provision of our services.

10. Children's Privacy

Our services are intended for businesses and individuals who are at least 18 years of age. We do not knowingly collect personal data from children under the age of 18. If we become aware that we have inadvertently collected personal data from a child, we will take reasonable steps to delete such information promptly. If you believe that a child has provided us with personal data, please contact us immediately using the details provided below.

11. Changes to This Policy

We reserve the right to update or modify this Privacy Policy at any time at our sole discretion. Any changes will be effective immediately upon posting the revised Privacy Policy on our website with an updated "Last updated" date. Your continued use of our website or services after the posting of any changes constitutes your acceptance of such changes. We encourage you to periodically review this page for the latest information on our privacy practices.

12. Grievance Redressal

In accordance with the IT Act, 2000 and the SPDI Rules, 2011, the following officer has been appointed as the Grievance Officer for the purpose of addressing any grievances or concerns regarding the processing of your personal information:

Grievance Officer

CodeMetrics

Email: info@codemetrics.in

Address: Codemetrics Infotech Pvt. Ltd., OC-702, Gaur City Centre, Gautambuddha Nagar, Ghaziabad, Uttar Pradesh 201318

The Grievance Officer shall acknowledge receipt of any complaint within 48 (forty-eight) hours and endeavour to resolve the grievance within 30 (thirty) days from the date of receipt. If you are dissatisfied with the resolution, you may approach the Data Protection Board of India established under the DPDP Act, 2023, or the appropriate adjudicating officer under the IT Act, 2000.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

CodeMetrics

Email: info@codemetrics.in

Address: Codemetrics Infotech Pvt. Ltd., OC-702, Gaur City Centre, Gautambuddha Nagar, Ghaziabad, Uttar Pradesh 201318

This Privacy Policy is governed by and construed in accordance with the laws of India. Any disputes arising under or in relation to this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of competent jurisdiction in Ghaziabad, Uttar Pradesh, India.