How we handle your data.

Each Pinegrass product has its own privacy policy, linked from inside the app: Zaffo. This page covers the corporate side: the pinegrass.in website, recruitment, partnerships, vendor relationships, and internal infrastructure.

Pinegrass Technologies Pvt. Ltd. is the data fiduciary for pinegrass.in under India’s Digital Personal Data Protection Act, 2023.

Nothing except standard server logs (IP, user-agent, requested path) retained for thirty days for operational integrity. No cookies, no analytics trackers, no fingerprinting, no third-party scripts.

Pinegrass routes inbound across four aliases. Use the one closest to your intent:

• connect@pinegrass.in — general questions, partnerships, press.
• dev@pinegrass.in — engineering, integrations, bug reports.
• privacy@pinegrass.in — privacy, DPDPA, data requests, takedowns. Also the security disclosure inbox.
• admin@pinegrass.in — vendor, billing, ops, statutory notices.

Messages are retained for the active conversation plus up to three years for compliance. Pinegrass does not sell, rent, or share message contents with third parties.

Under India’s Digital Personal Data Protection Act, 2023 you have the right to a copy of your personal data, the right to correct it, the right to erase it, the right to nominate a person to act on your behalf, and the right to grievance redressal. Email privacy@pinegrass.in with the request type in the subject line. Pinegrass will acknowledge within seven days and resolve within thirty.

Designated under section 8(9) of the DPDP Act, 2023 as the point of contact for grievance redressal on behalf of the Data Fiduciary.

Acknowledgements within seven days; resolution within thirty. Full corporate identifiers on /legal.

Vulnerability reports go to privacy@pinegrass.in. The full responsible-disclosure posture, scope, and PGP key live on /security.

The “Last updated” date above moves whenever anything material changes. Previous versions are available on request to privacy@pinegrass.in.