Privacy Policy

Lumisha India Private Limited. Last updated: 4 October 2026.

• Who we are
• What we collect
• WhatsApp
• How we use it
• Who we share it with
• How long we keep it
• Your rights
• Contact

1. Who we are

This policy explains how Lumisha India Private Limited ("Lumisha", "we", "us") collects, uses and protects personal data when you visit lumisha.in, contact us, apply for a job, or message us, including on WhatsApp. We are the data fiduciary (the party that decides how your data is used) under India's Digital Personal Data Protection Act, 2023.

Our affiliate Lumisha LLC (Dover, Delaware, USA) serves some of our US clients. Where Lumisha LLC handles your data, it follows this policy too.

2. What we collect

• Contact details you give us: name, company, email, phone or WhatsApp number, and what you write to us through the quote form, email, phone or WhatsApp.
• Job applications: the details on our careers form and your resume, such as name, age, email, phone, education, experience and address.
• Client work: business contact details and records our clients share with us so we can do the work they hire us for.
• Bookings: if you book a call through Calendly, the name, email and time you choose.

Our website does not use advertising or tracking cookies, and we do not run analytics that profile visitors.

3. WhatsApp messages

4. How we use your data

• To answer your questions and send quotes.
• To provide our services to clients and keep records of that work.
• To assess job applications and contact candidates.
• To meet legal, tax and accounting duties.
• To keep our systems and people safe and prevent misuse.

We use your data with your consent, or where the law allows it without consent, such as for employment, to meet a legal duty, or for a purpose you have willingly given the data for.

5. Who we share it with

We do not sell personal data. We share it only with:

• Service providers who help us run the business, under contract: Meta (WhatsApp), Google (email and documents), Calendly (call booking), GitHub (website hosting) and Railway (our HR and calling software).
• Our clients, when you are part of the work we do for them.
• Authorities, when the law requires it.

Some of these providers store data outside India, including in the USA. We use providers who protect data with appropriate safeguards.

6. How long we keep it

• Enquiries and WhatsApp chats: up to 24 months after our last contact.
• Job applications from people who do not join: up to 12 months after our last contact.
• Client, employee and accounting records: as long as the contract lasts and then as long as tax and labour laws require, usually 8 years.

7. How we protect it

Access is limited to the people who need it, accounts are protected by sign-in, and sensitive details such as PAN and bank account numbers are stored encrypted. No system is perfectly secure, but if a breach affects you, we will tell you and the Data Protection Board of India as the law requires.

8. Your rights

You can ask to see the data we hold about you, correct it, delete it, or withdraw your consent at any time. You can also name someone to act for you. Send one email to info@lumisha.in with the subject "My data". We reply within 30 days. Withdrawing consent does not affect anything we did before.

If you are not happy with our answer, you can complain to the Data Protection Board of India.

9. Children

Our services are for businesses and adults. We do not knowingly collect data from anyone under 18.

10. Changes to this policy

We may update this policy. The date at the top shows the latest version. If a change is important, we will tell people we are in touch with.

11. Contact and Grievance Officer