++++
Entity: Neubofy (Neubofy Technologies). Slogan: Your Technology Department, Without Building One.
Core Model: External technology department, fractional CTO advisory, specialist talent orchestration, and independent code verification gate.
Data Sale Policy: Zero data sale. Neubofy has never sold, rented, or shared personal data for cross-context behavioral advertising.
Sovereign Data Residency: Cloud Firestore is located in Google Cloud asia-south2 (Delhi, India); Cloudflare D1 and KV databases are located in European Union Jurisdiction; Zoho CRM and Books are hosted in India Data Centers; Resend email is hosted in AWS us-east-1 (USA).
DPDP Act 2023 Compliance: grievance support at privacy@neubofy.in.
California CCPA / CPRA: Zero cross-context behavioral advertising.
Effective Date: March 2025 • Last Updated: October 13, 2026
Neubofy operates as an external technology department and delivery orchestration platform. We never sell, rent, monetize, or trade your personal, commercial, or technical information to data brokers, ad networks, or external marketers. Data collected through our portals is processed solely for operational software orchestration, real-time live human assistance, and verified engineering delivery.
This Data Protection Charter governs how Neubofy (“we”, “our”, or “us”) acts as a Data Fiduciary / Controller when collecting, processing, and safeguarding information across our main website (neubofy.in), our client intake portal (/start), our consultation booking portal (booking.neubofy.in), and our specialist recruitment console.
Our governance framework is specifically harmonized to comply with:
Neubofy provides enterprise software orchestration, technical consultation, and verified software delivery for commercial businesses, startup founders, and independent specialists.
We collect only the information needed to provide support, assess a project, operate our services, and meet applicable legal obligations. We do not sell, rent, or trade personal information.
Neubofy minimizes data dispersion by using certified, enterprise-tier sub-processors. Data is stored strictly in accordance with sovereign territorial requirements:
| Sub-processor | Operational Role | Data Residency Region | Regulatory Safeguard |
|---|---|---|---|
| Zoho Corporation Pvt. Ltd. | Zoho CRM (Lead intake), Zoho Books (Billing), Zoho Desk, Zoho Projects | India Data Centers | DPDP Act 2023 & ISO 27001 |
| Google Cloud / Firebase | Cloud Firestore database storage for main portal, candidate ATS records, and admin credentials | asia-south2 (Delhi, India) | Indian Sovereign Data Residency |
| Cloudflare, Inc. | Edge CDN, DDoS mitigation, Bot Turnstile, Cloudflare D1 Database & KV storage for booking and knowledge base | EU Jurisdiction (European Data Centers) | Standard Contractual Clauses (SCC) |
| Resend, Inc. | Automated transactional email dispatch (career receipts, application updates, and security alerts) | United States (AWS us-east-1) | Data Processing Addendum (DPA) & TLS 1.3 |
In accordance with the ePrivacy Directive and DPDP Act transparency guidelines, below is the exhaustive list of cookies and storage keys utilized across Neubofy portals:
| Identifier | Type / Origin | Category | Lifespan | Purpose & Trigger |
|---|---|---|---|---|
| cf_clearance / __cf_bm | HTTP Cookie (Cloudflare) | Strictly Necessary | 30m - 1 year | Edge DDoS mitigation, Cloudflare Turnstile anti-bot gate, and firewall security. |
| firebase:authUser:* | IndexedDB / LocalStorage | Strictly Necessary | Session | Maintains secure token state for authenticated candidate portal and recruitment admin. |
Notice at Collection: In the preceding 12 months, Neubofy has collected business contact details (name, email, phone, company) and professional capability URLs submitted voluntarily by clients and candidates.
Zero Sale or Sharing of Personal Data: Neubofy has not sold personal information and has not shared personal information for cross-context behavioral advertising in the preceding 12 months, as defined under the California Consumer Privacy Act (CCPA/CPRA). We do not collect or process sensitive personal information for inferring characteristics about consumers.
Neubofy programmatically listens for the browser-level Global Privacy Control (GPC) signal (Sec-GPC: 1 or navigator.globalPrivacyControl === true). When detected, our platform automatically sets all non-essential tracking and live telemetry to denied without requiring manual interaction.
California and US residents may exercise statutory rights to know, delete, or correct their information by writing to privacy@neubofy.in without discrimination.
Under the Indian DPDP Act 2023 (Sections 11–14), you hold the following statutory rights free of charge:
Request a summary of personal data held about you and processing activities undertaken.
Update inaccurate capability details or request complete deletion of your records.
Under DPDP Act 2023, nominate another individual to exercise rights on your behalf in case of incapacity.
For specific personal data deletion (Right to Erasure / RTBF) or to export your technical records, consultation intake dossiers, and account data, connect directly with our support team at support@neubofy.in from your registered email.
Neubofy’s digital platforms, client portals, and engineering services are exclusively directed to enterprises, founders, and individuals who have reached the legal age of majority in their jurisdiction (e.g., 18 years of age in India under the Indian Majority Act, 1875). We do not permit minors to use our platform or engage our services.
In accordance with Section 9 of the Digital Personal Data Protection (DPDP) Act, 2023 (India) and the Children's Online Privacy Protection Act (COPPA, US):
We retain project consultation records for the duration of active scoping and commercial engagement, or until you request account erasure. Specialist application dossiers are maintained for active matching with engineering contracts. Inactive applicant accounts are reviewed and scrubbed periodically.
Technical safeguards include TLS 1.3 encryption in transit, AES-256 encryption at rest, Cloudflare Turnstile anti-bot gates, role-based access control (RBAC), and hashed session storage using Web Crypto API. Neubofy adheres to the Cyber Security Directions issued by the Indian Computer Emergency Response Team (CERT-In) for security monitoring and incident reporting.
Neubofy operates as an early-stage startup based in Jehanabad, Bihar, India. We do not hide behind corporate bureaucracy or complex grievance ticketing layers. If you have questions about this policy, want to know what data we hold, or wish to exercise your rights to data correction or erasure under applicable law (including DPDP Act 2023), reach out directly:
Location: Jehanabad, Bihar 804408, India
Privacy Queries: privacy@neubofy.in
General Enquiries: contact@neubofy.in
We review and address data requests directly and aim to respond to all legitimate requests within 48 to 72 hours.