This Privacy Policy explains how SKYLabs India Private Limited, a company incorporated under the Companies Act, 2013 and operating the brand “Invictus IMC” (“Invictus”, “we”, “us”, “our”) collects, uses, shares and protects personal data when you use invictusimc.com (the “Platform”). We process personal data in accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and rules made under it. By using the Platform you agree to this Policy.
1. Data we collect
| Category | Examples | Source |
|---|---|---|
| Account and contact | Name, company name, mobile number, email, city, login credentials, last login time | You |
| Business and application | Capabilities, materials, processes, certifications, industry, requirements | You |
| Orders and bids | Part names, quantities, drawings and files you upload, bid prices, notes, deadlines | You |
| Payment records | Payment ID, order ID, amount, status and time. We do not receive or store your card number, CVV, UPI PIN or bank passwords. | Razorpay and you |
| Technical | Browser type, device information, pages visited, approximate location from IP address | Automatically |
| Communications | Emails, WhatsApp or phone messages with our team | You and us |
2. Why we use your data
- To create and manage your account and verify who you are.
- To review and publish Orders, show Orders to Manufacturers, collect and compare Bids, and manage awards.
- To process payments and prevent fraud and misuse.
- To send service messages: account, order, bid status, payment and security notices, by email, SMS or WhatsApp.
- To improve the Platform, fix errors and understand usage.
- To comply with law and enforce our Terms.
We process data on the basis of your consent and, where permitted by law, for legitimate uses such as performing a service you requested, complying with legal obligations and preventing fraud. You can withdraw consent at any time (see Section 7), though some services may then not be available.
3. How we share data
We do not sell your personal data. We share it only as follows:
- Between Buyers and Manufacturers. Invictus acts as principal and manages communication. A Buyer’s identity and contact details are not shared with Manufacturers, and a Manufacturer’s contact details are not shared with Buyers, unless the relevant party has agreed in writing. Manufacturers may see Order details; Buyers may see Bid summaries as the Platform provides.
- Service providers. Razorpay (payments), Supabase (database and file storage), Vercel (hosting), Resend (email delivery) and messaging providers, strictly to operate the Platform. These providers are bound to process data only on our instructions or under their own privacy terms.
- Legal and safety. Where required by law, court order or a government authority, or to protect rights, safety and security.
- Business transfers. If Invictus is involved in a merger, acquisition or restructuring, data may be transferred subject to this Policy.
4. Payments
Payments are handled by Razorpay Software Private Limited on its own secure systems. When you pay, you are subject to Razorpay’s terms and privacy policy. We receive only the payment status and reference details needed to record and reconcile your payment.
5. Cookies and local storage
We use essential browser storage and similar technologies to keep you signed in and to make the Platform work. Third-party services such as the Razorpay checkout may set their own cookies. You can control cookies in your browser settings, but parts of the Platform may not work without them.
6. Retention
We keep personal data only as long as needed for the purposes above and to meet legal, tax, accounting and dispute-resolution requirements. Payment and invoicing records are retained for the period required by applicable law. When data is no longer needed, we delete or anonymise it.
7. Your rights
Subject to applicable law, you may: access the personal data we hold about you; ask us to correct or update it; ask us to erase it; withdraw your consent; nominate another person to exercise your rights in the event of death or incapacity; and raise a grievance. To exercise a right, email connect@invictusimc.com from your registered email or mobile number. We will respond within a reasonable period and no later than required by law. You may also approach the Data Protection Board of India once it is operational if your grievance is not resolved.
8. Security
We use reasonable technical and organisational safeguards, including encrypted connections (HTTPS), access controls and trusted infrastructure providers. No system is completely secure; please use a strong, unique password and keep it confidential. If a personal data breach affects you, we will notify you and the authorities as required by law.
9. Children
The Platform is for businesses and is not directed at anyone under 18. We do not knowingly collect personal data of children.
10. Third-party links
The Platform may link to external sites (for example WhatsApp). We are not responsible for their privacy practices.
11. Changes
We may update this Policy and will post the new version here with an updated date. Material changes will be communicated through the Platform or by email.
12. Contact and grievance officer
Data Fiduciary: SKYLabs India Private Limited (brand: Invictus IMC), [REGISTERED OFFICE ADDRESS — to be filled].
Grievance Officer: [GRIEVANCE OFFICER NAME — to be filled]
Email: connect@invictusimc.com