WhatsAppCall Us

Privacy Policy

Home/Privacy Policy

Last Updated: August 2026 · Digital Ora, Unit 401, B-Wing, Shree Ishaan CHS, Bldg No. 2, Sameer Chandavarkar Road, Kandivali (West), Mumbai – 400067

✓ DPDP Act 2023 (India)✓ IT Act 2000 & SPDI Rules✓ Google & Meta Platform Policies✓ ASCI Influencer Guidelines✓ GST Compliant Billing

Legal Basis for Processing Personal Data

Digital Ora processes personal data only where there is a valid legal basis under applicable Indian laws, including the Digital Personal Data Protection Act, 2023 ("DPDP Act"). Depending on the nature of our relationship with you, we rely on one or more of the following lawful grounds for processing your personal data.

  • Your Consent: When you voluntarily submit a contact form, request a proposal, subscribe to our newsletters, request a free website audit, communicate with us via WhatsApp, email, phone, or provide information for marketing purposes, we process your data based on your consent. You may withdraw your consent at any time by contacting us.
  • Performance of a Contract: Where you engage Digital Ora for SEO, Google Ads, Meta Ads, Website Development, Social Media Management, AI Automation, Influencer Marketing, Website Maintenance, Google Business Profile Optimization, or any related service, we process the information necessary to fulfil our contractual obligations.
  • Legal Obligations: We process certain information to comply with applicable laws including taxation requirements, accounting obligations, regulatory compliance, fraud prevention, legal investigations, and lawful requests from government authorities.
  • Legitimate Business Interests: We may process personal data where necessary for our legitimate interests, including improving our services, maintaining website security, detecting fraud, responding to customer inquiries, preparing proposals, monitoring website performance, improving user experience, and protecting our legal rights, provided such interests do not override your privacy rights.

Where consent is the legal basis for processing, you may withdraw your consent at any time without affecting the lawfulness of processing carried out before such withdrawal.

Digital Ora never sells, rents, trades, or commercially exploits your personal data. All processing activities are carried out only for legitimate business purposes and in accordance with applicable Indian privacy laws.

International Data Transfers

Digital Ora provides digital marketing, website development, automation, and related services that may require the use of globally recognized technology platforms and cloud infrastructure. As a result, your personal data may be transferred to, processed in, or stored on servers located outside India by our trusted service providers.

Our primary third-party service providers include Google LLC, Meta Platforms, Microsoft, Cloudflare, hosting providers, domain registrars, CRM systems, payment processors, cloud storage providers, email service providers, and other software platforms that assist us in delivering our services. These providers operate secure infrastructure across multiple countries and process data in accordance with their own privacy policies and applicable legal requirements.

  • Service Delivery: International data transfers may occur where necessary to provide SEO, Google Ads, Meta Ads, Social Media Management, AI Automation, Website Development, Website Maintenance, Google Business Profile management, Influencer Marketing, analytics, hosting, email delivery, or customer support services.
  • Industry Standard Safeguards: We work only with reputable technology providers that implement industry-standard technical and organizational security measures designed to protect personal information against unauthorized access, disclosure, alteration, or destruction.
  • Limited Access: Only authorized Digital Ora personnel and approved service providers are permitted to access personal data strictly on a need-to-know basis for the purpose of delivering the requested services.
  • No Sale of Data: International transfer of your data does not mean ownership is transferred. Digital Ora does not sell, rent, lease, trade, or commercially distribute your personal information to third parties.
  • Compliance: Where applicable, Digital Ora takes reasonable steps to ensure that cross-border processing of personal data complies with the Digital Personal Data Protection Act, 2023, applicable Indian laws, and the contractual privacy commitments of our service providers.

By using our website, requesting our services, or providing information to us, you acknowledge that your personal information may be processed through secure systems operated by trusted international technology providers where necessary for the performance of our services.

Children's Privacy

Digital Ora's website, products, and services are intended for businesses, business owners, organizations, professionals, and individuals who are legally capable of entering into binding agreements. Our services are not directed toward children under the age of 18 years.

We do not knowingly collect, solicit, process, or store personal data belonging to children without appropriate authorization from a parent or lawful guardian, as required under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other applicable laws.

  • No Intentional Collection: We do not knowingly collect personal information from children through our website, contact forms, advertising campaigns, or digital marketing services.
  • Parent or Guardian Consent: If any service requires the processing of personal data relating to a child, such processing will only occur with verifiable consent from the child's parent or lawful guardian, where required by applicable law.
  • Accidental Collection: If we become aware that personal data belonging to a child has been collected without the required authorization, we will take reasonable steps to delete such information from our systems as soon as practicable, unless retention is required by law.
  • Parental Requests: Parents or lawful guardians who believe that their child's personal information has been submitted to Digital Ora may contact us to request access, correction, or deletion of such information.

If you believe that a child has provided personal information through our website or services without appropriate consent, please contact us immediately at hello@digitalora.co.in or call +91 88795 33888. We will investigate the matter promptly and take appropriate action in accordance with applicable laws.

Data Breach Notification

Digital Ora is committed to protecting the confidentiality, integrity, and availability of personal data through appropriate technical and organizational security measures. Despite our best efforts, no method of electronic transmission or storage can be guaranteed to be completely secure. In the unlikely event of a personal data breach, we will act promptly to minimize its impact and comply with applicable legal requirements.

  • Immediate Investigation: Upon becoming aware of a suspected or confirmed data breach, we will promptly investigate the nature, scope, and potential impact of the incident.
  • Containment Measures: We will take reasonable technical and administrative steps to contain the breach, prevent further unauthorized access, recover affected systems where possible, and reduce any potential risks.
  • Notification to Affected Individuals: Where required by applicable law or where the breach is likely to result in significant harm, we will notify affected clients or individuals without undue delay using the contact details available in our records.
  • Regulatory Compliance: Where legally required, Digital Ora will report notifiable personal data breaches to the appropriate government authorities or regulatory bodies, including the Data Protection Board of India, in accordance with the Digital Personal Data Protection Act, 2023 and other applicable laws.
  • Corrective Actions: Following any security incident, we will review our security controls, policies, and procedures to reduce the likelihood of similar incidents occurring in the future.

While Digital Ora implements industry-standard security practices including HTTPS encryption, role-based access controls, multi-factor authentication, encrypted credential storage, secure backups, and continuous monitoring where applicable, users should also take reasonable precautions to protect their own account credentials, devices, and online communications.

If you believe your information has been compromised or you suspect unauthorized access relating to our services, please contact us immediately at hello@digitalora.co.in or +91 88795 33888 so that we can investigate and respond appropriately.

Third-Party Links & External Websites

Our website may contain links to third-party websites, applications, social media platforms, payment gateways, or other online services that are not owned or operated by Digital Ora. These links are provided solely for your convenience, additional information, or to facilitate the delivery of our services.

Once you leave the Digital Ora website or interact with a third-party service, your information is governed by that third party's own privacy policy, terms of service, and security practices. Digital Ora does not control and is not responsible for the content, privacy practices, security measures, or data handling activities of any external website or service.

  • Independent Privacy Policies: We encourage you to review the privacy policy and terms of use of every third-party website or platform before submitting any personal information.
  • Third-Party Services: External services may include Google services, Meta platforms, WhatsApp Business Platform, YouTube, LinkedIn, Instagram, Facebook, payment gateways, hosting providers, CRM platforms, cloud storage providers, analytics tools, and other software used in connection with our services.
  • No Liability: Digital Ora shall not be responsible for any loss, damage, privacy violation, or security incident arising from your use of third-party websites or services that are outside our control.
  • External Content: The inclusion of any external link on our website does not imply our endorsement, sponsorship, or guarantee of the products, services, or information offered by such third parties unless expressly stated.

We recommend exercising caution whenever you navigate to third-party websites and only sharing personal information with organizations that you trust and whose privacy practices meet your expectations.

Contact Information

If you have any questions, concerns, requests, or complaints regarding this Privacy Policy or the way Digital Ora collects, processes, stores, or protects your personal data, you may contact us using the details below. We are committed to responding to all genuine privacy-related enquiries promptly and in accordance with applicable laws.

Business Name: Digital Ora (Partnership Firm)

Registered Office:
Unit 401, B-Wing,
Shree Ishaan CHS,
Building No. 2,
Sameer Chandavarkar Road,
Kandivali (West),
Mumbai – 400067,
Maharashtra, India.

For privacy-related requests, including access to your personal data, correction of inaccurate information, withdrawal of consent, deletion requests, or any grievance under the Digital Personal Data Protection Act, 2023, please contact us using the details above. We will make reasonable efforts to acknowledge your request promptly and respond within the timelines prescribed by applicable law.

Business enquiries, service-related support, and legal notices may also be sent through the above contact channels.

Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below unless the context otherwise requires.

  • "Digital Ora", "we", "our", or "us" refers to Digital Ora, a Partnership Firm, including its partners, employees, authorised representatives, contractors, and service providers acting on its behalf.
  • "Website" means https://digitalora.co.in/ and any associated subdomains, landing pages, applications, or online services operated by Digital Ora.
  • "Personal Data" means any information that identifies or can reasonably identify an individual, either directly or indirectly, including but not limited to name, email address, mobile number, IP address, business details, billing information, device information, and online identifiers.
  • "Processing" includes collecting, recording, storing, organising, modifying, retrieving, using, analysing, sharing, transferring, securing, archiving, deleting, or otherwise handling personal data by automated or manual means.
  • "Client" means any individual, business, organisation, company, partnership, proprietor, or entity that engages Digital Ora for any of its services.
  • "User" means any visitor, customer, prospect, applicant, or person accessing or interacting with our website, applications, advertisements, social media pages, or services.
  • "Third Party" means any individual or organisation other than Digital Ora and the person whose personal data is being processed, including technology providers, cloud hosting companies, payment processors, analytics providers, advertising platforms, CRM systems, and government authorities where legally required.
  • "Services" include, without limitation, SEO, Google Ads Management, Meta Ads Management, Social Media Management, AI Automation, WhatsApp Chatbot Solutions, Google Business Profile Optimisation, Influencer Marketing, Website Design & Development, Website Maintenance, Website Audits, Branding, and all related digital marketing services offered by Digital Ora.
  • "Applicable Law" refers to the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, applicable rules, regulations, governmental notifications, and any other laws governing privacy, electronic communications, consumer protection, taxation, and digital services in India.

Any words not specifically defined in this Privacy Policy shall have the meaning assigned to them under applicable law or their ordinary commercial meaning, depending on the context in which they are used.

Effective Date & Acceptance of this Privacy Policy

This Privacy Policy is effective from the date displayed as the "Last Updated" on this page and applies to all visitors, users, customers, clients, partners, vendors, and any other persons who access or use the Digital Ora website or services.

By accessing or using https://digitalora.co.in/, submitting any form, requesting a quotation or audit, contacting us by phone, email, WhatsApp, social media, or engaging Digital Ora for any service, you acknowledge that you have read, understood, and agree to the collection, use, storage, disclosure, and processing of your personal data as described in this Privacy Policy.

If you do not agree with any part of this Privacy Policy, you should discontinue the use of our website and services and refrain from providing any personal information to us.

  • Continued Use: Your continued use of our website or services after any updates to this Privacy Policy constitutes your acceptance of the revised version.
  • Latest Version: The most current version of this Privacy Policy will always be available on our website and will supersede all previous versions.
  • Questions: If you have any questions regarding this Privacy Policy or your privacy rights, please contact us at hello@digitalora.co.in or call +91 88795 33888.

This Privacy Policy forms an integral part of the terms under which Digital Ora provides its services and reflects our commitment to protecting your privacy, maintaining transparency, and complying with applicable laws of India, including the Digital Personal Data Protection Act, 2023.

Open Source Software & Third-Party Technologies

Digital Ora may use open-source software, third-party libraries, frameworks, APIs, plugins, and cloud-based technologies in the development, maintenance, and operation of our website and the services we provide to clients. These technologies help us deliver secure, reliable, and efficient digital solutions.

  • Purpose of Use: Open-source software and third-party technologies may be used for website development, security, analytics, performance optimization, payment processing, communication, automation, database management, hosting, artificial intelligence, and other technical functions required to deliver our services.
  • License Compliance: Where open-source software is used, Digital Ora complies with the applicable software license terms and respects the intellectual property rights of software authors and contributors.
  • Security Review: We make reasonable efforts to use reputable, actively maintained, and secure software components. Where appropriate, updates and security patches are applied to reduce known vulnerabilities.
  • Third-Party Responsibility: Third-party software providers maintain their own privacy policies, security standards, and terms of use. Digital Ora is not responsible for the independent practices of such providers beyond the services under our control.
  • Client Projects: Websites, applications, or automation solutions developed for clients may include third-party themes, plugins, APIs, SDKs, or libraries selected according to the project requirements and the client's approval.

Digital Ora continuously reviews the technologies used in its operations to maintain security, performance, compatibility, and compliance with applicable legal and industry standards. The use of any third-party technology does not grant such provider ownership of your personal data beyond what is necessary to provide the relevant service.

Intellectual Property & Confidential Information

During the course of providing our services, Digital Ora may receive or have access to confidential business information, intellectual property, creative assets, technical documentation, marketing strategies, customer information, source code, databases, credentials, branding materials, and other proprietary information belonging to our clients. We recognize the importance of protecting such information and treat it with the highest level of confidentiality.

  • Confidential Use Only: All confidential information provided by our clients is used solely for the purpose of delivering the agreed services and is not disclosed to any unauthorized person or organization.
  • Ownership: All intellectual property, trademarks, logos, business information, customer databases, creative materials, and proprietary content supplied by the client remain the exclusive property of the client unless otherwise agreed in writing.
  • Access Control: Access to confidential client information is limited to authorized Digital Ora partners, employees, contractors, or service providers who require such access to perform their assigned responsibilities.
  • Security Measures: Client credentials, documents, databases, source code, and project files are stored using appropriate technical and organizational security measures, including encrypted storage where reasonably applicable.
  • No Unauthorized Disclosure: Digital Ora will not sell, publish, distribute, copy, license, or otherwise disclose confidential client information to third parties except where required by law, with the client's authorization, or as necessary to deliver the contracted services.
  • Project Completion: Upon completion or termination of a project, Digital Ora will return or securely delete confidential information and account credentials upon the client's request, subject to any legal or contractual retention obligations.

This Privacy Policy does not transfer ownership of any intellectual property rights between Digital Ora and its clients. Each party retains ownership of its respective trademarks, copyrights, trade secrets, business information, software, creative works, and other proprietary rights unless expressly agreed otherwise in writing.

SEO Services

Digital Ora provides professional Search Engine Optimization ("SEO") services to improve the visibility, technical performance, and organic search presence of our clients' websites. In order to perform these services effectively, we may require access to certain business systems, websites, analytics platforms, and technical resources that you authorize us to use.

We collect, access, process, and store only the information that is reasonably necessary to provide the SEO services you have requested. We act as your authorized service provider and use your information solely for the purpose of managing and improving your website's organic search performance.

Information We May Access

Depending on the services you purchase, we may be granted access to one or more of the following:

  • Your website Content Management System (CMS), such as WordPress or other website platforms.
  • Your website hosting control panel or server access where technical SEO work is required.
  • Google Search Console.
  • Google Analytics.
  • Google Tag Manager.
  • Google Business Profile.
  • Bing Webmaster Tools.
  • Cloudflare or CDN services.
  • Domain DNS settings where authorized.
  • Website databases where necessary for technical implementation.
  • SEO tools integrated into your website.
  • Business information required for Local SEO.
  • Publicly available information relating to your business.

We request access only after receiving your authorization and only to the extent necessary to perform the agreed SEO services.

Information We May Process

While providing SEO services, Digital Ora may process business-related information including:

  • Organic search traffic.
  • Keyword rankings.
  • Search impressions.
  • Click-through rates.
  • Indexed pages.
  • Crawl reports.
  • Core Web Vitals.
  • Website speed metrics.
  • Technical SEO audit reports.
  • Backlink information.
  • Internal linking structure.
  • Website architecture.
  • Search performance reports.
  • Conversion data where available.
  • Business location information.
  • Structured data (Schema).
  • Public business reviews.
  • Website metadata.
  • XML sitemaps.
  • Robots.txt configuration.

Most of this information relates to website performance rather than personal information. Where personal data is incidentally processed through analytics or website administration, it is handled only as necessary to deliver the agreed services.

Purpose of Processing

Your information is processed exclusively for legitimate business purposes, including:

  • Conducting technical SEO audits.
  • Improving website crawlability.
  • Optimizing website structure.
  • Improving page indexing.
  • Keyword research.
  • On-page optimization.
  • Internal linking improvements.
  • Schema implementation.
  • Image optimization.
  • Page speed improvements.
  • Core Web Vitals optimization.
  • Content optimization recommendations.
  • Competitor analysis.
  • Local SEO improvements.
  • Google Business Profile optimization.
  • Monthly reporting.
  • Performance monitoring.
  • Troubleshooting SEO-related technical issues.

Your information is never processed for unrelated commercial purposes.

Confidentiality

Digital Ora treats all client business information as confidential. Website credentials, analytics data, SEO reports, search performance, traffic statistics, conversion information, technical documentation, source code, business strategies, and other confidential information are accessible only to authorized personnel involved in your project.

We do not intentionally disclose confidential SEO information to competitors, other clients, or unrelated third parties.

Credential Security

Where login credentials are provided, they are stored using commercially reasonable security practices. Access is restricted to authorized team members working on your project. We recommend enabling Multi-Factor Authentication (MFA) on all critical accounts wherever supported.

Third-Party Platforms

SEO services often require interaction with third-party platforms including Google, Bing, Cloudflare, website hosting providers, domain registrars, analytics providers, and SEO software vendors. These platforms operate under their own privacy policies and terms of service. Digital Ora is not responsible for the independent privacy practices of these third parties.

Ethical SEO Practices

Digital Ora follows ethical SEO practices and industry standards. We do not knowingly engage in practices prohibited by search engines, including but not limited to keyword stuffing, cloaking, hidden text, doorway pages, automated spam, malicious redirects, deceptive structured data, link schemes, or other techniques intended to manipulate search rankings in violation of search engine guidelines.

No Guarantee of Rankings

Search engine rankings are determined by search engines using proprietary algorithms that frequently change. Accordingly, Digital Ora does not guarantee any specific keyword rankings, search positions, traffic volumes, lead generation, sales, revenue, or business outcomes. SEO is an ongoing process influenced by numerous factors outside our control, including algorithm updates, market competition, website history, user behavior, hosting performance, content quality, and third-party platform policies.

Ownership of Data

All website content, business information, analytics accounts, Search Console properties, Google Business Profiles, reports, databases, domain names, hosting accounts, and other client assets remain the property of the client unless otherwise agreed in writing. Digital Ora receives only the access necessary to perform the contracted services.

Retention and Access Removal

Upon completion or termination of the SEO engagement, Digital Ora will make reasonable efforts to remove its access from client accounts when requested. Stored credentials will be securely deleted within a reasonable period unless retention is required by law, necessary for resolving an ongoing dispute, or otherwise agreed in writing.

Compliance

Digital Ora performs SEO services in accordance with applicable Indian laws, including the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and applicable contractual obligations. We also seek to follow publicly available search engine guidelines where relevant. Nothing in this Privacy Policy shall be interpreted as creating a guarantee of search engine rankings or business results.

Google Ads Management

Digital Ora provides Google Ads management services to help businesses create, manage, monitor, and optimize advertising campaigns across Google Search, Display Network, Shopping, YouTube, Performance Max, Demand Gen, and other Google advertising products. To provide these services, we may require authorized access to your Google Ads account and other related Google services.

We process only the information necessary to deliver the services you have requested. Your Google Ads account, billing relationship with Google, advertising data, customer information, and campaign assets remain your property at all times. Digital Ora acts solely as your authorized advertising service provider.

Information We May Access

Depending on the services you engage us for, we may receive authorized access to:

  • Google Ads Account.
  • Google Ads Manager Account (MCC) access.
  • Google Analytics 4 (GA4).
  • Google Tag Manager.
  • Google Merchant Center.
  • Google Business Profile.
  • Google Search Console.
  • Google Conversion Tracking.
  • Enhanced Conversions.
  • Offline Conversion Imports.
  • YouTube Channel (where advertising requires access).
  • Landing pages and website administration.
  • CRM integrations used for conversion tracking.

Access is requested only after your approval and only for the duration necessary to provide the agreed services.

Information We May Process

During campaign management, Digital Ora may process:

  • Campaign settings.
  • Keywords.
  • Search terms.
  • Ad creatives.
  • Headlines and descriptions.
  • Audience segments.
  • Location targeting.
  • Device targeting.
  • Budget allocation.
  • Bidding strategies.
  • Conversion tracking data.
  • Click-through rates.
  • Quality Scores.
  • Cost-per-click (CPC).
  • Cost-per-acquisition (CPA).
  • Return on Ad Spend (ROAS).
  • Impressions.
  • Clicks.
  • Conversions.
  • Campaign performance reports.
  • Remarketing audiences.

Where campaign measurement requires website tracking, Digital Ora may configure Google tags or Google Tag Manager on your website with your authorization.

Purpose of Processing

Your information is processed solely for legitimate advertising purposes, including:

  • Campaign setup.
  • Campaign optimization.
  • Keyword research.
  • Audience creation.
  • Conversion tracking.
  • Bid management.
  • Budget optimization.
  • Landing page analysis.
  • Performance reporting.
  • Fraud monitoring.
  • A/B testing.
  • Remarketing configuration.
  • Advertising consultation.

Your information is never processed for unrelated commercial purposes.

Customer Match Data

If you provide customer email addresses, phone numbers, or other identifiers for Google's Customer Match feature, such information will be uploaded only to your Google Ads account in accordance with Google's Customer Match policies. Digital Ora does not merge customer lists between clients, sell customer data, or reuse your customer information for any other advertising account.

Where applicable, customer identifiers are uploaded using Google's supported methods, and any temporary local copies used solely for upload are securely deleted after the upload process is completed unless otherwise agreed in writing.

Billing Information

Unless otherwise agreed, your advertising budget is paid directly to Google using your own billing profile. Digital Ora does not take ownership of your advertising spend. Where we assist with billing configuration, we access only the information necessary to configure or monitor campaign billing.

Confidentiality

Campaign performance reports, advertising strategies, keywords, bidding data, customer audiences, conversion information, and business insights are treated as confidential business information. Access is limited to authorized Digital Ora personnel assigned to your account.

Third-Party Services

Google Ads services rely on platforms operated by Google LLC and may integrate with Google Analytics, Google Tag Manager, Google Merchant Center, YouTube, Google Business Profile, and other Google products. These services are governed by Google's own terms, privacy policies, and data processing practices. Digital Ora is not responsible for Google's independent processing of data.

No Guarantee of Advertising Results

Digital Ora applies commercially reasonable efforts to improve campaign performance based on industry best practices and available data. However, we do not guarantee specific numbers of leads, sales, conversions, return on investment (ROI), revenue, impressions, clicks, Quality Scores, or advertising outcomes. Campaign performance depends on multiple factors outside our control, including market conditions, competition, bidding activity, customer demand, website quality, product availability, seasonal trends, and changes to Google's advertising systems or policies.

Ownership of Advertising Assets

Your Google Ads account, conversion data, customer lists, campaigns, creatives, reports, and advertising assets remain your property. Digital Ora receives only the access necessary to manage your advertising services and does not claim ownership over your advertising accounts or business data.

Access Removal

Upon termination of the engagement, Digital Ora will remove its manager account access from your Google Ads account upon request or within a reasonable period after the engagement ends. Any stored credentials or temporary working files will be securely deleted unless retention is required by law or necessary to resolve an ongoing contractual matter.

Compliance

Digital Ora manages advertising campaigns in accordance with applicable Indian laws, the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, Google's Advertising Policies, Google's Customer Match requirements, and other applicable platform policies. Clients remain responsible for ensuring that the products, services, claims, landing pages, and advertising content they provide comply with all applicable laws and platform requirements.

Meta Ads (Facebook & Instagram)

Digital Ora provides Meta Ads management services for Facebook, Instagram, Messenger, Audience Network, and other Meta advertising platforms. To deliver these services effectively, we may require authorized access to your Meta Business Portfolio (formerly Business Manager), Ad Accounts, Facebook Pages, Instagram Professional Accounts, Meta Pixel, Conversions API (CAPI), Catalogs, Commerce Manager, and other related Meta Business assets that you authorize us to manage.

We process only the information reasonably necessary to create, manage, monitor, optimize, and report on your advertising campaigns. Your Meta Business assets, advertising accounts, audiences, creative assets, customer data, and campaign performance information remain your property at all times. Digital Ora acts solely as your authorized marketing service provider.

Information We May Access

Depending on the services included in your engagement, we may be granted access to one or more of the following:

  • Meta Business Portfolio (Business Manager).
  • Facebook Ad Accounts.
  • Facebook Business Pages.
  • Instagram Professional Accounts.
  • Meta Pixel.
  • Conversions API (CAPI).
  • Commerce Manager.
  • Product Catalogs.
  • Custom Audiences.
  • Lookalike Audiences.
  • Meta Events Manager.
  • Meta Business Integrations.
  • Website tracking configurations.
  • Landing pages used for advertising.
  • CRM integrations used for lead tracking.

Access is requested only after receiving your authorization and is limited to what is necessary for delivering the agreed services.

Information We May Process

While managing your Meta advertising campaigns, we may process:

  • Campaign settings.
  • Campaign objectives.
  • Advertising budgets.
  • Audience targeting.
  • Age and demographic targeting.
  • Geographic targeting.
  • Interest-based targeting.
  • Behavioral audience segments.
  • Advertising creatives.
  • Images and videos.
  • Advertising copy.
  • Lead form configuration.
  • Campaign performance reports.
  • Impressions.
  • Reach.
  • Clicks.
  • Video engagement.
  • Leads generated.
  • Purchases and conversions.
  • Return on Ad Spend (ROAS).
  • Cost Per Lead (CPL).
  • Cost Per Purchase (CPP).
  • Customer audience information where provided by you.

Where website tracking is required, Digital Ora may configure Meta Pixel or Conversions API on your website after receiving your approval.

Purpose of Processing

Your information is processed exclusively for legitimate advertising and campaign management purposes, including:

  • Campaign creation.
  • Campaign optimization.
  • Audience development.
  • Conversion tracking.
  • Lead generation.
  • Remarketing.
  • Budget optimization.
  • Creative testing.
  • A/B testing.
  • Performance reporting.
  • Advertising consultation.
  • Fraud prevention.
  • Campaign troubleshooting.

Your information is never processed for purposes unrelated to the services you have requested.

Custom Audiences

If you provide customer information such as email addresses, mobile numbers, or other identifiers for Meta Custom Audiences, Digital Ora will upload such information only to your own Meta advertising account in accordance with Meta's applicable policies. We do not combine customer lists between clients, share customer information with unrelated businesses, or reuse audience data for any advertising account other than yours.

Where Meta requires customer information to be hashed before transmission, Digital Ora follows Meta's supported upload methods. Temporary working copies used solely for upload or processing are securely removed once they are no longer required, unless retention is necessary to fulfil legal or contractual obligations.

Lead Forms

If Meta Instant Forms (Lead Ads) are used, we may access the lead information submitted by prospective customers solely for the purpose of exporting, delivering, integrating, or reporting those leads to you. Lead data belongs to you and is handled confidentially in accordance with this Privacy Policy.

Confidentiality

Campaign strategies, audience configurations, advertising creatives, customer lists, campaign performance, budgets, conversion reports, business information, and related advertising data are treated as confidential business information. Access is restricted to authorized Digital Ora personnel assigned to your account.

Third-Party Services

Meta advertising services are operated by Meta Platforms, Inc. Digital Ora does not control Meta's independent processing of personal data. Meta's collection and processing of information are governed by Meta's own Privacy Policy, Business Tools Terms, Advertising Standards, and related legal documentation.

No Guarantee of Advertising Results

Digital Ora uses commercially reasonable efforts, industry best practices, campaign analysis, and ongoing optimization to improve advertising performance. However, we do not guarantee any specific number of leads, sales, enquiries, purchases, revenue, impressions, clicks, conversions, return on investment (ROI), or other business outcomes. Advertising performance depends upon numerous factors beyond our control, including competition, audience behaviour, product quality, pricing, seasonality, landing page experience, Meta platform changes, algorithm updates, and compliance with Meta policies.

Ownership of Advertising Assets

Your Meta Business Portfolio, Facebook Pages, Instagram accounts, advertising accounts, Meta Pixel, customer audiences, catalogs, creatives, campaign history, reports, and associated business assets remain your property. Digital Ora receives only the permissions necessary to provide the agreed services and does not claim ownership over your business assets.

Access Removal

Upon completion or termination of the engagement, Digital Ora will remove its access to your Meta Business assets upon your request or within a reasonable period following the end of the engagement. Any stored credentials or temporary project files will be securely deleted unless retention is required by law or necessary for resolving contractual obligations.

Compliance

Digital Ora manages Meta advertising campaigns in accordance with applicable Indian laws, including the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, Meta's Advertising Standards, Business Tools Terms, Custom Audience Terms, and other applicable platform policies. Clients remain responsible for ensuring that the products, services, claims, promotions, landing pages, and advertising materials they provide comply with applicable laws and Meta's advertising policies.

Social Media Management

Digital Ora provides Social Media Management services to help businesses establish, manage, and grow their presence across various social media platforms, including but not limited to Facebook, Instagram, LinkedIn, X (formerly Twitter), YouTube, Pinterest, Threads, and other platforms as agreed with the client. To perform these services, we may require authorized access to your social media accounts, business pages, advertising assets, messaging features, and related management tools.

We process only the information reasonably necessary to deliver the requested services. Your social media accounts, business pages, followers, content, messages, customer interactions, and related business information remain your property at all times. Digital Ora acts solely as your authorized social media management service provider.

Information We May Access

Depending on the services included in your agreement, we may receive authorized access to one or more of the following:

  • Facebook Business Pages.
  • Instagram Professional Accounts.
  • LinkedIn Company Pages.
  • YouTube Channels.
  • X (formerly Twitter) Accounts.
  • Pinterest Business Accounts.
  • Threads Business Profiles.
  • Meta Business Portfolio.
  • Publishing and scheduling platforms.
  • Social media analytics dashboards.
  • Business messaging inboxes.
  • Comments and community management tools.
  • Content libraries.
  • Media assets including images, videos, and graphics.
  • Business profile information.

Access is requested only after receiving your authorization and is limited to the permissions necessary to perform the agreed services.

Information We May Process

While managing your social media accounts, we may process:

  • Business profile information.
  • Published posts.
  • Images and videos.
  • Captions.
  • Hashtags.
  • Comments.
  • Direct messages.
  • Public reviews.
  • Follower insights.
  • Reach and impressions.
  • Engagement metrics.
  • Click data.
  • Profile visits.
  • Audience demographics.
  • Campaign performance reports.
  • Publishing schedules.
  • Community interactions.

Where required, we may also process customer enquiries received through your business social media accounts solely for responding on your behalf according to the instructions, response guidelines, or customer support procedures approved by you.

Purpose of Processing

Your information is processed solely for legitimate business purposes, including:

  • Creating and publishing content.
  • Scheduling posts.
  • Managing business profiles.
  • Responding to customer comments.
  • Responding to direct messages.
  • Community management.
  • Performance reporting.
  • Audience engagement.
  • Brand consistency.
  • Content planning.
  • Campaign monitoring.
  • Business growth analysis.
  • Improving social media performance.

Your information is never processed for purposes unrelated to the services you have requested.

Direct Messages and Customer Communications

If your service includes customer communication management, Digital Ora may view and respond to direct messages, comments, or enquiries received through your business social media accounts. Such communications are handled solely for the purpose of providing customer support or business responses in accordance with your instructions. We do not use customer conversations for our own marketing purposes, nor do we sell or disclose such information to unrelated third parties.

Content Ownership

Unless otherwise agreed in writing, all logos, trademarks, product information, photographs, videos, business information, and other materials supplied by you remain your property. Subject to payment of applicable fees and any agreed licensing terms, original creative content produced specifically for your project by Digital Ora may be assigned or licensed to you as set out in your service agreement.

Confidentiality

Social media strategies, unpublished content, editorial calendars, customer interactions, campaign information, analytics, business insights, and account credentials are treated as confidential business information. Access is restricted to authorized Digital Ora personnel assigned to your account and is limited to what is reasonably necessary to perform the agreed services.

Third-Party Platforms

Social media platforms are operated by independent third parties including Meta Platforms, LinkedIn, Google, X Corp., Pinterest, and other providers. Digital Ora does not control how these platforms collect, process, or store information. Their processing of personal data is governed by their respective privacy policies, terms of service, and platform rules.

No Guarantee of Results

Digital Ora applies commercially reasonable efforts and industry best practices when managing social media accounts. However, we do not guarantee any specific increase in followers, engagement, reach, impressions, enquiries, leads, revenue, brand awareness, or other business outcomes. Social media performance depends on numerous factors beyond our control, including platform algorithms, audience behaviour, market conditions, content relevance, competition, advertising activity, and platform policy changes.

Access Removal

Upon completion or termination of the engagement, Digital Ora will remove its access from your social media accounts, business pages, scheduling platforms, and related systems upon request or within a reasonable period following the end of the engagement. Any stored credentials or temporary working files will be securely deleted unless retention is required by law or necessary to resolve an ongoing contractual matter.

Compliance

Digital Ora performs Social Media Management services in accordance with applicable Indian laws, including the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and the applicable terms, community standards, and business policies of each social media platform. Clients remain responsible for ensuring that the products, services, claims, promotions, contests, and content they provide comply with all applicable laws, intellectual property rights, advertising standards, and platform policies.

AI Automation & WhatsApp Chatbot

Digital Ora provides AI Automation, WhatsApp Business Automation, Chatbot Development, CRM Integration, Workflow Automation, Lead Management Automation, and related automation services to help businesses streamline communication, improve customer engagement, and automate business processes. To deliver these services, we may require authorized access to your WhatsApp Business Platform, Meta Business Portfolio, CRM, website, APIs, databases, cloud services, and other systems that you authorize us to integrate.

We process only the information reasonably necessary to design, develop, deploy, monitor, maintain, and improve your automation workflows. All customer information, conversation history, business data, API credentials, workflows, and automation assets remain your property. Digital Ora acts solely as your authorized technology and automation service provider.

Information We May Access

Depending on your selected services, we may receive authorized access to one or more of the following systems:

  • WhatsApp Business Platform.
  • WhatsApp Business API.
  • Meta Business Portfolio.
  • CRM Software.
  • Customer Databases.
  • Website Forms.
  • Cloud Databases.
  • Google Sheets.
  • Google Workspace.
  • Email Platforms.
  • Payment Gateway Integrations.
  • Order Management Systems.
  • Inventory Management Systems.
  • Appointment Booking Systems.
  • ERP Software.
  • API Credentials.
  • Webhook Configurations.
  • Cloud Hosting Platforms.
  • Automation Platforms.
  • AI Service Providers authorized by you.

Access is requested only after receiving your authorization and is limited to the permissions required to perform the agreed services.

Information We May Process

During the delivery of AI automation services, we may process:

  • Customer names.
  • Mobile numbers.
  • Email addresses.
  • Customer enquiries.
  • Chat conversations.
  • Order details.
  • Appointment requests.
  • Lead information.
  • Business workflow data.
  • Customer preferences.
  • Automation logs.
  • Delivery status.
  • Message templates.
  • Campaign reports.
  • CRM records.
  • Support ticket information.
  • Website form submissions.
  • API transaction logs.
  • Error logs.
  • Performance analytics.

We process this information solely for operating the automation workflows, responding to customers, integrating systems, troubleshooting issues, generating reports, and providing the services requested by you.

Purpose of Processing

Your information is processed exclusively for legitimate business purposes including:

  • Developing AI-powered chatbots.
  • Automating customer support.
  • Lead qualification.
  • Lead distribution.
  • Appointment booking.
  • Order notifications.
  • Customer follow-up automation.
  • Workflow automation.
  • CRM synchronization.
  • WhatsApp messaging.
  • Email automation.
  • Business reporting.
  • Automation monitoring.
  • Error diagnosis.
  • Performance optimization.

Your information is never processed for unrelated commercial purposes or sold to third parties.

WhatsApp Business Communications

Where WhatsApp Business Platform is used, messages are sent using your approved WhatsApp Business account. You are responsible for obtaining any customer consent required under applicable law and WhatsApp's Business Messaging Policy before sending promotional or marketing communications. Digital Ora assists in configuring and operating the platform but does not assume responsibility for customer opt-ins collected by your business.

Artificial Intelligence Processing

If artificial intelligence technologies are incorporated into your automation solution, they are used only for the functions approved by you, such as responding to enquiries, classifying leads, generating summaries, or assisting customer support. Unless expressly agreed in writing, Digital Ora does not use your confidential business information or customer conversations to train publicly available AI models.

API Keys and Credentials

API keys, authentication tokens, webhook secrets, passwords, and integration credentials provided by you are treated as confidential information. We implement commercially reasonable security measures to protect such credentials and limit access to authorized personnel responsible for your project.

Confidentiality

Customer conversations, business workflows, automation logic, CRM information, reports, API documentation, databases, business processes, source code developed for your project, and related documentation are treated as confidential business information. Access is restricted to authorized Digital Ora personnel involved in delivering the services.

Third-Party Platforms

Our automation services may integrate with platforms operated by independent third parties, including Meta Platforms, Google, Microsoft, OpenAI, CRM providers, payment gateways, cloud hosting providers, and other software vendors selected by you or required for your project. These providers process information under their own privacy policies and terms of service. Digital Ora is not responsible for the independent data processing practices of such third parties.

Data Ownership

All customer information, business data, automation workflows, CRM records, message history, reports, business documentation, and related assets remain your property unless otherwise agreed in writing. Digital Ora receives only the access necessary to configure, maintain, and support the agreed automation services.

Service Availability

Automation services depend upon the continued availability of third-party APIs, cloud infrastructure, internet connectivity, messaging platforms, and software providers. Digital Ora cannot guarantee uninterrupted operation where interruptions are caused by third-party platform outages, API changes, maintenance activities, software updates, regulatory actions, or circumstances beyond our reasonable control.

Access Removal

Upon completion or termination of the engagement, Digital Ora will make reasonable efforts to remove its administrative access from your automation systems, APIs, cloud platforms, CRM software, and related services upon request or within a reasonable period. Stored credentials and temporary project files will be securely deleted unless retention is required by law or necessary to resolve contractual obligations.

Compliance

Digital Ora provides AI Automation and WhatsApp Chatbot services in accordance with applicable Indian laws, including the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and the applicable terms, policies, and technical requirements of Meta, WhatsApp Business Platform, cloud providers, and other third-party services used in your project. Clients remain responsible for ensuring that their customer communications, marketing activities, data collection practices, and business operations comply with all applicable laws and industry regulations.

Google Business Profile (GBP) Management

Digital Ora provides Google Business Profile ("GBP") management services to help businesses improve their visibility on Google Search and Google Maps. To provide these services, we may require authorized access to your Google Business Profile, Google Account, Google Business Profile Manager, Google Search Console, Google Analytics, website, and other related Google services that you authorize us to access.

We process only the information reasonably necessary to create, verify, manage, optimize, monitor, and maintain your Google Business Profile. Your Google Business Profile, business information, customer reviews, photos, insights, and related business assets remain your property at all times. Digital Ora acts solely as your authorized service provider.

Information We May Access

Depending on the services you purchase, we may receive authorized access to one or more of the following:

  • Google Business Profile.
  • Google Business Profile Manager.
  • Google Account associated with your business.
  • Business verification information.
  • Business profile settings.
  • Business categories.
  • Business descriptions.
  • Business operating hours.
  • Service areas.
  • Products and services.
  • Business photographs and videos.
  • Google Maps listing.
  • Customer reviews.
  • Questions & Answers.
  • Google Posts.
  • Google Business Profile Insights.
  • Call tracking information where enabled by you.
  • Website information linked to your profile.

Access is requested only after your authorization and is limited to the permissions necessary for providing the agreed services.

Information We May Process

While managing your Google Business Profile, we may process:

  • Business name.
  • Business address.
  • Business phone number.
  • Business email.
  • Website URL.
  • Business categories.
  • Business description.
  • Operating hours.
  • Holiday hours.
  • Products and services.
  • Business photographs.
  • Videos.
  • Customer reviews.
  • Review responses.
  • Questions and answers.
  • Profile performance insights.
  • Search queries.
  • Customer calls.
  • Direction requests.
  • Website visits originating from Google Business Profile.

Where applicable, we may also analyze profile performance to improve local search visibility, customer engagement, and profile completeness.

Purpose of Processing

Your information is processed solely for legitimate business purposes, including:

  • Creating and verifying Google Business Profiles.
  • Optimizing business information.
  • Managing categories.
  • Publishing Google Posts.
  • Uploading photographs and videos.
  • Managing products and services.
  • Responding to customer reviews.
  • Responding to customer questions.
  • Improving Local SEO.
  • Monitoring profile performance.
  • Generating performance reports.
  • Maintaining profile accuracy.

Your information is never processed for purposes unrelated to the services requested by you.

Customer Reviews

Digital Ora may assist in responding to customer reviews based on your instructions, approved communication style, or brand guidelines. We do not create, purchase, incentivize, manipulate, or publish fake reviews, misleading testimonials, or fraudulent ratings. We encourage ethical review practices that comply with Google's policies and applicable consumer protection laws.

Business Information Accuracy

You are responsible for ensuring that the business information, contact details, services, operating hours, licensing information, photographs, and other materials supplied to Digital Ora are accurate, lawful, and up to date. We rely on the information provided by you when updating your Google Business Profile.

Confidentiality

Business information, profile performance reports, customer interactions, optimization strategies, business documents, verification information, and account credentials are treated as confidential business information. Access is limited to authorized Digital Ora personnel responsible for managing your account.

Third-Party Services

Google Business Profile is operated by Google LLC. Google's collection, processing, and storage of information are governed by Google's own Privacy Policy, Terms of Service, and Business Profile policies. Digital Ora does not control Google's independent processing of personal or business information.

No Guarantee of Local Rankings

Digital Ora follows commercially reasonable practices and Google's publicly available guidance to improve your business profile. However, we do not guarantee specific Google Maps rankings, Local Pack rankings, customer calls, direction requests, reviews, website visits, leads, sales, or business growth. Local search visibility depends upon numerous factors beyond our control, including Google's algorithms, competition, proximity, relevance, prominence, customer behaviour, review activity, and platform policy changes.

Ownership of Business Profile

Your Google Business Profile, business information, customer reviews, photographs, performance insights, verification status, and associated business assets remain your property. Digital Ora receives only the level of access necessary to provide the contracted services and does not claim ownership over your Google Business Profile.

Access Removal

Upon completion or termination of the engagement, Digital Ora will remove its manager access from your Google Business Profile upon request or within a reasonable period. Any stored credentials or temporary project files will be securely deleted unless retention is required by law or necessary for resolving contractual obligations.

Compliance

Digital Ora manages Google Business Profiles in accordance with applicable Indian laws, including the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, Google's Business Profile policies, Google Maps policies, and other applicable platform requirements. Clients remain responsible for ensuring that the business information, products, services, claims, photographs, and customer communications provided to us comply with all applicable laws and Google's policies.

Influencer Marketing

Digital Ora provides Influencer Marketing services by connecting businesses with suitable content creators, influencers, bloggers, creators, public figures, and digital publishers to execute marketing campaigns across various social media platforms. We process only the information reasonably necessary to identify, evaluate, negotiate, manage, execute, and report influencer campaigns on behalf of our clients.

To provide these services, we may collect and process business information from our clients and professional information from influencers. All information is handled confidentially and is used solely for campaign management and related business purposes.

Information We May Process

  • Client campaign briefs.
  • Brand guidelines.
  • Campaign objectives.
  • Marketing budgets.
  • Creative requirements.
  • Influencer contact information.
  • Professional social media profiles.
  • Audience demographics.
  • Engagement statistics.
  • Media kits.
  • Commercial quotations.
  • Invoices.
  • Payment information.
  • Campaign performance reports.
  • Published content links.
  • Campaign communications.

Purpose of Processing

Information is processed solely for identifying suitable influencers, negotiating collaborations, executing campaigns, coordinating content approvals, monitoring campaign performance, processing agreed payments, and providing reports to clients.

Confidentiality

Client campaign strategies, pricing, marketing plans, budgets, unpublished creative concepts, influencer negotiations, and campaign reports are treated as confidential business information. Such information is shared only with individuals directly involved in the campaign and only to the extent necessary for successful campaign execution.

Influencer Information

Professional information provided by influencers, including contact details, audience insights, pricing information, banking details, and tax information, is processed only for campaign administration, contractual compliance, and payment processing. We do not sell or distribute influencer information to unrelated third parties.

Client Information

Digital Ora shares only the information reasonably necessary for influencers to understand the campaign, including the brand name, campaign objectives, content guidelines, timelines, and approved deliverables. Confidential business information that is not required for campaign execution is not disclosed without the client's authorization.

Ownership

Campaign materials, brand assets, logos, trademarks, and confidential business information remain the property of the respective client unless otherwise agreed in writing. Influencers retain ownership of their original content except where ownership or licensing rights are transferred under a separate written agreement.

Compliance

Digital Ora manages influencer campaigns in accordance with applicable Indian laws, the Digital Personal Data Protection Act, 2023, applicable advertising regulations, ASCI Influencer Advertising Guidelines, and the policies of the relevant social media platforms.

Website Development

Digital Ora provides Website Design, Website Development, Web Application Development, E-Commerce Development, Landing Page Development, Portal Development, and related web technology services. To deliver these services, we may require access to your hosting environment, domain registrar, website source code, databases, cloud infrastructure, third-party integrations, and other technical resources that you authorize us to access.

We process only the information reasonably necessary to design, develop, test, deploy, maintain, and support your website or web application. All business information, website content, customer data, databases, domain names, hosting accounts, source code provided by you, and related digital assets remain your property unless otherwise agreed in writing.

Information We May Access

Depending on your project requirements, we may receive authorized access to one or more of the following:

  • Website hosting control panel.
  • Domain registrar account.
  • Website source code.
  • Content Management Systems (CMS).
  • Website databases.
  • Cloud hosting platforms.
  • FTP/SFTP/SSH access.
  • Email hosting services.
  • SSL certificate management.
  • Website backups.
  • API credentials.
  • Third-party software integrations.
  • Payment gateway configurations.
  • Analytics accounts.
  • Business documents and digital assets.
  • Log files necessary for troubleshooting.

Access is requested only after receiving your authorization and is limited to what is reasonably necessary to complete the agreed scope of work.

Information We May Process

During website development, we may process:

  • Business information.
  • Company profile.
  • Brand identity.
  • Logos.
  • Images.
  • Videos.
  • Website content.
  • Product catalogues.
  • Service descriptions.
  • Contact information.
  • Customer enquiry forms.
  • Website databases.
  • User account structures.
  • Technical documentation.
  • Website analytics.
  • Server logs.
  • Error logs.
  • Performance reports.

Where your website includes forms, e-commerce features, customer accounts, or other functionality involving personal data, we process such information only as necessary to develop, test, maintain, or support those features in accordance with your instructions.

Purpose of Processing

Your information is processed solely for legitimate business purposes, including:

  • Website planning.
  • User interface (UI) design.
  • User experience (UX) improvements.
  • Frontend development.
  • Backend development.
  • Database development.
  • CMS configuration.
  • API integration.
  • Payment gateway integration.
  • Website testing.
  • Bug fixing.
  • Performance optimization.
  • Security implementation.
  • Website deployment.
  • Technical support.

Your information is never processed for unrelated commercial purposes.

Client Content

All text, images, videos, documents, trademarks, logos, graphics, product information, and other materials supplied by you remain your property. You are responsible for ensuring that such materials do not infringe the intellectual property rights or other legal rights of any third party.

Development Environment

Where appropriate, Digital Ora may develop or test your website in staging or development environments before deployment to the live website. Access to development environments is restricted to authorized personnel working on your project.

Confidentiality

Business strategies, databases, source code, credentials, API keys, documentation, project files, customer information, pricing information, internal systems, and other confidential information are treated as confidential business information. Access is limited to authorized Digital Ora personnel responsible for delivering your project.

Third-Party Software

Your website may include third-party themes, plugins, frameworks, libraries, APIs, cloud services, payment gateways, or other software components selected according to your project requirements. These services operate under their own terms and privacy policies. Digital Ora is not responsible for the independent practices of third-party providers.

Data Security

Digital Ora implements commercially reasonable technical and organizational measures to protect website assets under our control, including secure access controls, encrypted credential storage where applicable, HTTPS support, restricted administrative access, regular software updates where included in the service, and backup procedures where agreed in your service plan.

Ownership

Unless otherwise agreed in writing, ownership of your domain name, hosting account, business information, customer database, and website content remains with you. Ownership of custom-developed deliverables is governed by the applicable service agreement or statement of work between Digital Ora and the client.

Access Removal

Upon project completion or termination, Digital Ora will return administrative control of your website and, upon request, remove its administrative access within a reasonable period. Temporary project files, credentials, and development copies will be securely deleted unless retention is required by law or agreed in writing.

Compliance

Digital Ora develops websites in accordance with applicable Indian laws, including the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and recognized web development standards where applicable. Clients remain responsible for ensuring that the content, products, services, privacy notices, and legal disclosures published on their websites comply with applicable laws and industry regulations.

Website Maintenance (AMC)

Digital Ora provides Website Maintenance and Annual Maintenance Contract ("AMC") services to ensure that your website remains secure, stable, updated, and operational. These services may include software updates, security monitoring, malware scanning, bug fixes, performance optimization, backup management, uptime monitoring, technical support, and other maintenance activities as agreed in your service plan.

To perform these services, Digital Ora may require authorized access to your website, hosting environment, domain registrar, Content Management System (CMS), databases, cloud infrastructure, email services, Content Delivery Network (CDN), security tools, third-party plugins, APIs, and other technical resources that you authorize us to manage.

We process only the information reasonably necessary to provide maintenance services. Your website, customer data, databases, business information, hosting account, domain name, source code, backups, and related digital assets remain your property at all times. Digital Ora acts solely as your authorized website maintenance service provider.

Information We May Access

Depending on your maintenance plan, we may receive authorized access to:

  • Website hosting control panel.
  • Website CMS (such as WordPress or other platforms).
  • Website databases.
  • FTP, SFTP or SSH access.
  • Cloud hosting services.
  • Domain registrar account.
  • DNS management.
  • SSL certificate management.
  • Email hosting services.
  • Website backups.
  • CDN services including Cloudflare.
  • Security monitoring tools.
  • Firewall management.
  • Third-party plugins and extensions.
  • API integrations.
  • Website monitoring services.
  • Error logs and server logs.

Access is requested only after receiving your authorization and is limited to the permissions necessary to provide the agreed maintenance services.

Information We May Process

While maintaining your website, we may process:

  • Website source code.
  • Website databases.
  • Business information.
  • Customer enquiry forms.
  • Website configuration files.
  • Server logs.
  • Error logs.
  • Backup files.
  • Security scan reports.
  • Performance reports.
  • Plugin configurations.
  • Theme configurations.
  • Website analytics where required for troubleshooting.
  • System notifications.
  • Technical documentation.

Where maintenance involves systems containing customer information, Digital Ora processes such information only as necessary to maintain, repair, troubleshoot, secure, or restore your website in accordance with your instructions.

Purpose of Processing

Your information is processed solely for legitimate maintenance purposes including:

  • Installing software updates.
  • Updating CMS core files.
  • Updating plugins and extensions.
  • Updating website themes.
  • Monitoring website availability.
  • Improving website performance.
  • Security monitoring.
  • Malware detection and removal.
  • Firewall configuration.
  • SSL certificate management.
  • Backup creation.
  • Backup restoration.
  • Troubleshooting technical issues.
  • Bug fixing.
  • Database optimization.
  • Server optimization.
  • Emergency recovery assistance.

Your information is never processed for unrelated commercial purposes.

Website Backups

Where backups are included in your maintenance plan, Digital Ora may create, store, monitor, and restore website backups for disaster recovery and business continuity purposes. Backup files may contain website databases, uploaded media, website content, customer enquiries, and other information stored on your website. Such backups are handled confidentially and used only for website restoration, migration, testing, or maintenance activities authorized by you.

Security Monitoring

Our maintenance services may include monitoring website security, server health, software vulnerabilities, firewall status, SSL certificates, malware activity, login attempts, and system alerts. These activities are performed to improve website reliability and reduce security risks. While we implement commercially reasonable security measures, no website or internet-connected system can be guaranteed to be completely secure.

Confidentiality

All website credentials, source code, databases, customer information, business documents, API keys, configuration files, backups, security reports, and maintenance records are treated as confidential business information. Access is restricted to authorized Digital Ora personnel responsible for maintaining your website.

Third-Party Services

Your website may rely on third-party hosting providers, domain registrars, CDN providers, security services, cloud platforms, payment gateways, plugins, APIs, and other software vendors. These providers process information under their own privacy policies and service agreements. Digital Ora is not responsible for the independent operations or privacy practices of such third parties.

Service Availability

Website availability may be affected by scheduled maintenance, hosting provider outages, software updates, cyberattacks, internet connectivity issues, third-party platform failures, force majeure events, or circumstances beyond our reasonable control. While we strive to minimize downtime, uninterrupted service cannot be guaranteed.

Ownership

Your website, domain name, databases, backups, business information, customer information, content, and digital assets remain your property. Digital Ora receives only the level of access necessary to perform the agreed maintenance services and does not claim ownership over your website or business information.

Access Removal

Upon termination or expiration of your Website Maintenance or AMC agreement, Digital Ora will, upon request, provide reasonable assistance in handing over administrative access and the latest available backup (where included in your plan). Administrative access held by Digital Ora will be removed within a reasonable period, and stored credentials or temporary maintenance files will be securely deleted unless retention is required by law or necessary to resolve contractual obligations.

Compliance

Digital Ora performs Website Maintenance services in accordance with applicable Indian laws, including the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and recognized industry security practices where applicable. Clients remain responsible for ensuring that the content, products, services, customer information, and legal notices published on their websites comply with applicable laws and regulations.

Free Website Audit

Digital Ora offers complimentary Website Audits to help businesses understand the current performance, security, search engine visibility, user experience, and technical health of their websites. The purpose of the audit is to provide general recommendations and identify opportunities for improvement. Participation in a Free Website Audit does not create a client relationship or obligate either party to enter into a future service agreement.

To prepare your audit, we may collect and process only the information reasonably necessary to evaluate your website. This may include publicly available website information or, where you authorize us, limited access to specific tools such as Google Search Console, Google Analytics 4, Google Tag Manager, Google Business Profile, website administration panels, or other services relevant to the audit.

Information We May Access

Depending on the scope of the audit and the permissions granted by you, we may access one or more of the following:

  • Your website URL.
  • Publicly accessible website pages.
  • Google Search Console.
  • Google Analytics 4.
  • Google Tag Manager.
  • Google Business Profile.
  • Website CMS (read-only or limited access where possible).
  • Website speed reports.
  • Core Web Vitals reports.
  • Technical SEO reports.
  • Security headers.
  • SSL certificate information.
  • Public backlink data.
  • Public search engine indexing information.
  • Website performance metrics.
  • Mobile usability reports.

We request access only after receiving your authorization and recommend providing the minimum level of access necessary to perform the requested audit.

Information We May Process

During the audit, we may review:

  • Website structure.
  • Page speed.
  • Core Web Vitals.
  • Technical SEO.
  • Search engine indexing.
  • Metadata.
  • Structured data.
  • Internal linking.
  • Website security configuration.
  • Broken links.
  • Mobile responsiveness.
  • User experience.
  • Website performance reports.
  • Organic search performance.
  • Traffic summaries.
  • General business information published on the website.

Where access to analytics or other systems is provided, we review only the information necessary to prepare the audit and recommendations requested by you.

Purpose of Processing

Your information is processed solely for legitimate business purposes, including:

  • Evaluating website performance.
  • Identifying SEO opportunities.
  • Reviewing technical issues.
  • Assessing website security.
  • Preparing an audit report.
  • Providing recommendations.
  • Discussing possible improvements.
  • Responding to your enquiry.

Your information is not used for unrelated commercial purposes, sold to third parties, or disclosed to competitors.

Confidentiality

All audit findings, business information, technical reports, analytics information, credentials, screenshots, recommendations, and communications are treated as confidential. Audit reports are prepared exclusively for the business that requested the audit and are not shared with other clients or third parties except where required by law or with your express authorization.

No Obligation

Receiving a Free Website Audit does not require you to purchase any service from Digital Ora. Likewise, Digital Ora reserves the right to decline or discontinue a free audit request where sufficient information is not provided, where access is not authorized, or where the request appears to involve unlawful or abusive activity.

Retention of Information

If you do not engage Digital Ora after the completion of the audit, we may retain your enquiry details and audit records for a reasonable period for administrative, quality assurance, and legal purposes, after which they will be securely deleted or anonymized unless a longer retention period is required by law.

Third-Party Services

Our audit process may utilize reputable third-party tools and publicly available services for website analysis, performance testing, accessibility evaluation, technical SEO assessment, and security reviews. These tools operate under their own privacy policies and terms of service. Digital Ora does not control their independent processing of information.

No Guarantee

A Free Website Audit is intended to provide general technical observations and recommendations based on the information available at the time of the review. The audit should not be interpreted as legal, financial, cybersecurity, or regulatory advice, nor does it guarantee future search rankings, website performance improvements, lead generation, revenue growth, or business success.

Compliance

Digital Ora performs Free Website Audits in accordance with applicable Indian laws, including the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and applicable industry standards. Any access granted by you is used solely for the purpose of conducting the requested audit and preparing the associated report.