Privacy Policy

Montque Global Pvt. Ltd. ("Montque Global", "we", "our", "us") is a technology and digital solutions company incorporated under the Companies Act, 2013 in India, operating globally across the USA, UK, UAE, Singapore, Canada, and India.

This Privacy Policy applies to our corporate website (montqueglobal.com), all client-facing portals, digital products we build and operate on behalf of clients (including Taskzy and other platforms under the Montque Group), and all marketing and business communications.

Montque Global Pvt. Ltd. is a B2B technology company providing software development, mobile app development, web design, e-commerce solutions, digital marketing, and IT consulting services to clients worldwide.

This policy covers data collected through:

• Our corporate website — montqueglobal.com (contact forms, newsletter, analytics)
• Client project portals — project management and communication tools we use during client engagements
• Products we operate — platforms such as Taskzy (governed by their own product-level Privacy Policies, with Montque Global as the data controller)
• Business communications — emails, calls, proposals, and support interactions
• Marketing activities — event attendance, webinars, lead generation

2.1 Information You Give Us Directly

• Contact form submissions: Name, email address, phone number, company name, and project details you enter on our website.
• Business inquiries: Information shared in emails, calls, LinkedIn messages, or at events when exploring our services.
• Client onboarding: Company registration details, billing address, authorised signatory information, and bank details required for invoicing and contracts.
• Project communications: Messages, feedback, documents, and assets exchanged during an active project engagement.
• Newsletter / marketing opt-ins: Email address and preferences when you subscribe to updates.

2.2 Information Collected Automatically

• Website analytics: Pages visited, time on site, referring URL, browser type, device type, and geographic region (city/country level, not precise location).
• Server logs: IP addresses, request timestamps, and error logs retained for security and infrastructure purposes.
• Cookies: Session and preference cookies. See Section 6 for full details.

2.3 Information from Third Parties

• LinkedIn / professional networks: Public profile information when you or your company is researched as part of business development.
• Referrals: Contact details shared with us by a mutual contact, with your consent.
• Payment processors: Transaction confirmation references from our payment partners (not card or bank details).

We use the information we collect for the following purposes, each grounded in a lawful basis:

Business & Service Delivery

• Responding to inquiries: We use your name, email, and project details to reply to contact form submissions and business enquiries, typically within 24 hours.
• Proposal & contract management: Company and contact information is used to generate service proposals, project agreements, and NDAs.
• Project execution: We use all information shared during an engagement — briefs, assets, feedback — solely to build and deliver the agreed deliverables.
• Invoicing & accounting: Company name, address, and payment references are used for billing and financial record-keeping, as required by Indian taxation law (GST Act, Income Tax Act).

Marketing & Business Development

• Newsletter: Sending industry insights, case studies, and company updates only to subscribers who have explicitly opted in. Every email includes an unsubscribe link.
• Portfolio references: With prior written consent, we may reference a client's company name and project type in our portfolio or case studies. We never share confidential details.
• Lead follow-up: We may follow up on inbound inquiries if you have contacted us but not yet received a response.

Operations & Security

• Website analytics: Aggregated, anonymised usage data helps us improve site content and performance.
• Fraud prevention: Server logs and IP data help us detect and block malicious access attempts.
• Legal compliance: Certain data is retained to meet obligations under Indian law (GST, Companies Act, IT Act).

We do not sell, rent, or trade your personal information. We share data only in the following defined circumstances:

4.1 Within the Montque Group

Data may be shared between Montque Global Pvt. Ltd. and group companies (including operational entities for Taskzy and other products) strictly for the purpose of delivering services you have engaged us for. All entities within the group are bound by this policy.

4.2 Service Sub-Processors

We use vetted third-party services to operate our business. Each sub-processor is bound by a data processing agreement and processes data only on our documented instructions:

• Cloud & Infrastructure: AWS, Vercel, Supabase — for hosting and database services
• Project Management: Notion, Jira, Trello (as applicable) — for internal project tracking
• Communication: Google Workspace — for email and file collaboration
• Analytics: Google Analytics (with IP anonymisation) — for website traffic analysis
• Payment Processing: Razorpay (India), Stripe (international) — for invoice payments; neither provider shares card details with us
• E-signing: DocuSign or equivalent — for contract execution

4.3 Legal Disclosures

We may disclose information if required by: a valid court order, a statutory obligation under Indian law (e.g. SFIO inquiry, income tax audit), or a law enforcement request from a competent authority. We will notify you of such disclosures unless legally prohibited.

4.4 Business Transfers

If Montque Global is involved in a merger, acquisition, or asset sale, business contact data may be transferred to the acquirer. You will be notified at least 30 days in advance with the option to request deletion.

5.1 Where Data Is Stored

Business data is primarily stored on Google Workspace (US data centres) and AWS Asia-Pacific servers. Client project files may reside in cloud repositories (GitHub, AWS S3, or client-specified infrastructure). Appropriate data transfer mechanisms are in place for cross-border transfers.

5.2 Security Measures

• Encryption in transit: All data transmitted between clients and our systems uses TLS 1.2 / 1.3 (HTTPS).
• Encryption at rest: Sensitive files and databases use AES-256 encryption at rest.
• Access control: Role-based access; team members access only data relevant to their work. Contractor access is revoked immediately upon project completion.
• Authentication: Internal tools protected by multi-factor authentication (MFA) and SSO where available.
• Vendor assessments: Key sub-processors are periodically reviewed for security compliance.
• Incident response: We have documented breach notification procedures. In the event of a data breach affecting personal data, we will notify affected parties and relevant authorities within 72 hours of discovery.

5.3 Retention Schedule

• Prospect / inquiry data: Retained for up to 2 years from last contact, then deleted unless a contract is signed.
• Active client data: Retained throughout the engagement and for 7 years post-project for legal and audit purposes (Companies Act / GST compliance).
• Financial records (invoices, contracts): Retained for a minimum of 8 years in accordance with Indian accounting standards.
• Website analytics: Aggregated data retained for 26 months; raw log data deleted after 90 days.
• Marketing emails: Retained until you unsubscribe or request deletion.

Our website (montqueglobal.com) uses cookies and similar technologies. Here is a transparent breakdown:

You can manage cookie preferences through your browser settings or our cookie consent banner. Disabling analytics cookies does not affect your ability to use the website.

Depending on your location, you have the following rights regarding your personal data. We honour these rights regardless of jurisdiction, as a matter of policy.

• Right of Access: Request a copy of all personal data we hold about you.
• Right to Correction: Ask us to correct inaccurate or incomplete information.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data, subject to legal retention obligations (e.g. financial records).
• Right to Restrict Processing: Ask us to pause processing your data in specific circumstances.
• Right to Data Portability: Receive your data in a structured, machine-readable format (JSON / CSV).
• Right to Object: Object to processing based on legitimate interests, including direct marketing (opt-out at any time).
• Right to Withdraw Consent: Where processing is consent-based, withdraw at any time without affecting past processing.
• Right to Grievance Redressal: Under the DPDPA 2023, you may raise a complaint with our Grievance Officer or the Data Protection Board of India.

As a company serving clients across the USA, UK, UAE, Singapore, and Canada, data may be transferred internationally. We ensure appropriate safeguards are in place for each transfer:

• USA transfers: Covered by Standard Contractual Clauses (SCCs) and Data Processing Agreements with US-based sub-processors (Google, AWS, Stripe).
• UK transfers: UK-specific data processing agreements in place with UK-incorporated clients or those subject to UK GDPR.
• UAE / Gulf transfers: Data handling aligned with UAE PDPL (Personal Data Protection Law) requirements for relevant client engagements.
• Singapore transfers: Aligned with the PDPA (Personal Data Protection Act) for client engagements in Singapore.
• India (domestic): Governed by the Digital Personal Data Protection Act, 2023 (DPDPA) and the Information Technology Act, 2000.

If you are located in the EU/EEA and believe your data is subject to GDPR, please contact us at privacy@montqueglobal.com to discuss applicable safeguards.

When we build digital products for clients (websites, apps, SaaS platforms, e-commerce stores), the client is the data controller for all end-user data collected by those products. Montque Global acts as the data processor during the build phase.

• End-user data collected by products we build is governed by the client's own privacy policy, which we help them draft and implement.
• Our team members may access anonymised or test data during development and QA — never live production user data unless strictly necessary and agreed in writing.
• Upon project completion or handover, all development copies of client data are permanently deleted from our systems within 30 days.
• For products we operate on behalf of clients under a managed services agreement, separate Data Processing Agreements (DPAs) govern our obligations.

Montque Global's website and direct services are intended for business professionals aged 18 and above. We do not knowingly collect personal data from anyone under 18 years of age through our corporate website or business operations.

For products we build that may serve consumers of any age (e.g. an e-learning platform with minor users), appropriate age-gating and parental consent mechanisms are implemented as part of the product design, governed by applicable law.

If you believe a minor has inadvertently submitted personal data through our website, please contact us at privacy@montqueglobal.com and we will delete it promptly.

We review this Privacy Policy at least annually and whenever there are material changes to our data practices, legal obligations, or business operations. When we make changes:

• The "Last Updated" date at the top of this page is revised.
• For material changes affecting active clients or subscribers, we will send a direct notification via email at least 14 days before changes take effect.
• Continued use of our services after the effective date constitutes acceptance of the revised policy.

We recommend bookmarking this page and checking it periodically. Previous versions are available on request.

In accordance with the Information Technology Act, 2000, the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023, the following Grievance Officer has been designated:

Complaints may also be escalated to the Data Protection Board of India under the DPDPA 2023, once the Board is formally constituted and operational.

This Privacy Policy is governed by the laws of the Republic of India. Any disputes shall be subject to the exclusive jurisdiction of competent courts in India. In case of conflict between a translated version and this English version, the English version prevails.
© 2026 Montque Global Pvt. Ltd. All rights reserved.