Privacy Policy

Quick Web Go

Last updated: 30 July 2026

1. Scope — this policy covers two different things

Please read this section first, because Quick Web Go handles two distinct sets of personal data and the rules for each differ.

(A) Data about you, our customer. If you are a broker who enquires about or subscribes to Quick Web Go, we collect data about you to run our business. For this data we are the Data Fiduciary and this policy governs it in full.

(B) Data about your website's visitors. When someone submits an enquiry on a website we host for you, that data belongs to your business. For this data you are the Data Fiduciary and we are only a Data Processor acting on your instructions. Your own privacy notice governs it. Section 2 explains what this means in practice.

This policy is issued by RYTTIME ONLINE SERVICES PRIVATE LIMITED (CIN U74120UP2015PTC069015), which operates the Quick Web Go service, under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology Act, 2000 and rules made under it.

2. The two roles, in plain terms

The DPDP Act distinguishes the party who *decides* why personal data is processed (the Data Fiduciary) from the party who merely *processes it on instruction* (the Data Processor).

What this means for you as a broker:

• The leads captured on your site are yours. We hold them for you.
• The duty to tell your visitors what you do with their details, and to obtain consent where the Act requires it, is yours. Your website includes a privacy page for exactly this purpose; you must complete it with content appropriate to your business.
• If one of your visitors asks you to delete their data, correct it, or tell them what you hold, you must answer. We will give you the technical means and will act on your instruction.
• We will never use your leads for our own purposes. See §5.

We have written it this way because it is legally accurate and because it puts each duty on the party that can actually discharge it. We cannot know why you collected a lead or what you promised the person; you cannot administer the database. Neither of us should be answerable for the other's part.

3. Data we collect as Data Fiduciary (about you, our customer)

3.1 When you enquire

• Name, mobile number, email address
• Brokerage or firm name, and city
• The plan and theme you expressed interest in
• Anything you write in the message field

Why: to respond to your enquiry, and to follow up on it. Lawful basis: your consent, given by submitting the form, and our legitimate need to answer a business enquiry you initiated.

3.2 When you subscribe

• The above, plus billing name and address
• Your nominated domain name
• Payment reference, amount, date and status

We do not collect or store your card, netbanking or bank-account details. Payment is by UPI, handled entirely inside your own UPI app between your bank and ours.

We do record the UPI ID you paid from and the transaction reference (UTR) — we need both to match your payment to your account, to issue a receipt, and to send a refund to the right place if you ask for one.

Why: to provide the Service, issue invoices, meet tax and accounting obligations, and handle refunds and disputes. Lawful basis: performance of our contract with you, and compliance with law.

3.3 When you use our Site

• Basic technical data: IP address, browser and device type, pages viewed, referring page.
• Analytics, only if analytics is enabled — see §6.

Why: to keep the Site working, secure and reasonably fast, and to understand which pages are useful.

3.4 When you contact support

The content of your emails and WhatsApp messages to us, so we have a record of what was asked and what we did.

4. Data we process as Data Processor (your website's visitors)

On a website we host for you, we process, on your behalf:

• enquiry-form submissions — typically name, mobile number, email and message;
• basic server logs, including visitor IP addresses, kept for security and troubleshooting.

We process this data only:

• to make it available to you;
• to operate, secure, back up and troubleshoot your website;
• as you instruct us, in writing;
• as we are required to by law.

We do not analyse, profile, enrich, aggregate, sell, rent, share or market to your visitors, and we do not use their data to train anything.

5. What we never do

Stated separately because it is the commitment brokers ask about most:

• We never sell or rent personal data. Not yours, not your visitors'. There is no circumstance in which we would.
• We never share your leads with another broker. Every Quick Web Go website is a separate deployment with its own database. There is no shared lead pool, no cross-site matching, and no common pipeline — cross-broker exposure is prevented by the architecture, not merely promised in this document.
• We never use your leads to market our own product to them.
• We never contact your clients except where you ask us to for a technical reason, or where the law compels us.

6. Cookies and analytics

Our Site uses only what it needs to function. We do not use advertising or cross-site tracking cookies.

Analytics: not currently enabled. We do not run Google Analytics or any other analytics tool on quickwebgo.com. If that changes, this section will be updated before it goes live to name the tool, state that it sets cookies, describe IP handling, and offer a way to opt out.

Websites we build for you may include analytics if you ask for it. Where they do, disclosing that to your visitors is your responsibility as Data Fiduciary.

7. Who else touches the data (sub-processors)

We use a small number of third parties. Each is used for a defined purpose, and each is expected to keep the data confidential and secure.

We will keep this table current. If we add a sub-processor that handles your leads, we will tell you before it starts.

About the WhatsApp link. The WhatsApp button on our site is an ordinary click-to-chat link. Selecting it opens your own WhatsApp app with a message ready to send — nothing about you is sent to Meta by our website, and we do not use the WhatsApp Business API. If that ever changes, Meta would become a sub-processor and we would add it to the table above before the change took effect.

Cross-border transfers. No current sub-processor stores personal data outside India. Our hosting provider's data centres are in India. We do not use an email/SMTP provider, and we do not use the WhatsApp Business API, so neither raises a cross-border transfer today. If any of that changes, we will update this table and this statement before it takes effect.

8. How long we keep data

Invoices are kept even after you leave, because we are legally required to keep them. They contain your billing details, not your leads.

9. Your rights under the DPDP Act

As a Data Principal in respect of the data we hold about you (category A in §1), you may:

• ask what we hold about you and how it is processed;
• have it corrected if it is inaccurate or incomplete;
• have it erased, unless we are required to keep it — invoices being the main exception;
• withdraw consent where consent is our basis, though this may mean we can no longer provide the Service;
• nominate another person to exercise these rights on your behalf in the event of death or incapacity;
• complain to us, and then to the Data Protection Board of India if we do not resolve it.

To exercise any of these, contact our Grievance Officer (§12). We will respond within 30 days.

If you are a visitor to a broker's website, please contact that broker directly — they decide what happens to your data. If you cannot reach them, write to us and we will pass your request on.

10. How we protect data

Summarised here; set out fully in our Information Management Policy, which this policy incorporates by reference.

• Encryption in transit (HTTPS/TLS) on every site we host.
• One deployment and one database per customer — no shared data store.
• Access on a least-privilege basis, limited to those who need it to do the work.
• Regular backups, held separately from live data.
• Prompt application of platform and dependency security updates.
• Server-side validation of every form submission; no client-side-only checks.

We do not claim to be impregnable. No provider honestly can. What we commit to is reasonable, documented, proportionate security and honest, prompt disclosure if something goes wrong.

11. If there is a data breach

If a breach affects personal data we hold, we will:

1. contain it and assess what was affected;
2. notify the Data Protection Board of India as the DPDP Act requires;
3. notify you without undue delay, and in any event within 72 hours of becoming aware, telling you what happened, what data was affected, and what we are doing;
4. where the breach affects your visitors' data, support you in meeting your notification duty to them as Data Fiduciary;
5. record the incident and what we changed to prevent recurrence.

12. Grievance Officer

Name: Rahul Srivastav Designation: Founder Email: GRO@quickwebgo.com Address: 6th Floor, Tower B, Lotus Business Park 107, Sector 127, Noida, Uttar Pradesh 201313

We acknowledge within 48 hours and aim to resolve within 30 days. If you are not satisfied, you may escalate to the Data Protection Board of India.

13. Children

Quick Web Go is a business service and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe we have, tell us and we will delete it.

14. Changes

We may update this policy. If a change materially affects how we handle your data, we will notify you by email at least 30 days before it takes effect. The "last updated" date above always reflects the current version.

Contact: hello@quickwebgo.com · +91 93102 68826