support@sajjanstudio.net
Sajjan Studio Sajjan Studio
Menu Navigation
Get A Quote Client Portal Login
Home / Privacy Policy
Enterprise Data Protection & Security Standard

Privacy Policy

This comprehensive Privacy Policy governs the collection, processing, storage, and protection of confidential business data and personal information across sajjanstudio.net and all client service portals operated by Sajjan Studio.

Effective Date: August 19, 2026 Policy Version: 2.5 (Fully Detailed Standard) Domain: sajjanstudio.net
01

Preamble, Corporate Identity & Scope of Policy

This Privacy Policy constitutes an official legal document published by Sajjan Studio (hereinafter referred to interchangeably as "Sajjan Studio", "we", "us", or "our"), a specialized software development, web engineering, and enterprise digital solutions agency operating online primarily via https://sajjanstudio.net and its authorized sub-domains, web portals, APIs, and microservices.

This Policy applies universally to all visitors of our website, prospective clients submitting quotation inquiries, registered clients accessing our authenticated Client Management Portal, business entities contracting our engineering services, and any individuals interacting with our automated WhatsApp webhook systems, email dispatchers, or administrative communication channels.

By accessing sajjanstudio.net, engaging our services, or transmitting information to us, you acknowledge that you have read, understood, and consented to the data collection, processing, and safeguarding practices set forth within this document.

02

Comprehensive Categories of Data We Collect

To formulate accurate software project proposals, engineer bespoke web platforms, process milestone billing, and maintain rock-solid system integrity, we collect and process several distinct categories of information:

A. Individual & Corporate Identity Information

Includes client full name, official corporate designation, business/organization name, corporate email address, primary phone number, secondary contact number, WhatsApp contact number, registered office address, city, country, and relevant company registration or tax identification details (NTN / GST) required for commercial invoicing.

B. Project Requirements, Architecture & Technical Assets

Includes project scopes of work (SOW), database Entity Relationship (ER) blueprints, functional software requirements, wireframes, UI design mockups, API endpoint documentation, server environment configurations, and any staging database seeds or credentials provided voluntarily by the client to facilitate integrations.

C. Billing, Payments & Transactional Records

Includes records of invoices issued, payment receipts generated, bank transfer proof slips, transaction reference IDs, agreed payment milestone installments, currency preferences, and ledger statements. Note: Sensitive credit card and debit card numbers are handled directly through certified PCI-DSS compliant third-party gateways (such as Stripe, PayPal, JazzCash, EasyPaisa, PayFast) and are never stored on our database servers.

D. Technical Telemetry, Audit Logs & Automated Metadata

Includes Internet Protocol (IP) addresses, browser application type and version, operating system environment, geographic location indicators, HTTP request headers, referral URLs, session timestamps, and administrative audit trails logged via Spatie Activity Log to protect against unauthorized account intrusion.

03

Legal Basis & Purpose of Data Processing

Sajjan Studio processes client and visitor information under strict legal bases recognized by international data protection frameworks, including contractual necessity, legitimate business interests, and legal statutory obligations:

Contract Execution & Engineering

Designing, developing, testing, deploying, and maintaining custom software platforms, web apps, CRM solutions, and mobile architectures as agreed in client contracts.

Quotations & Proposal Generation

Reviewing lead inquiries, utilizing automated or AI-assisted estimation models, and generating formal, multi-page Quotation Proposal PDF documents with detailed cost breakdowns.

Real-Time Milestone Notifications

Dispatching automated project progress alerts, invoice payment confirmations, and support ticket updates via official WhatsApp webhook engines and secure SMTP mail relays.

Security Hardening & Fraud Prevention

Continuous threat monitoring, rate-limiting malicious bots, preventing SQL injection and cross-site scripting (XSS) vectors, and maintaining immutable audit trails.

04

Enterprise-Grade Technical & Organizational Security (TOMs)

Security is engineered directly into our foundation at Sajjan Studio. We enforce multi-tiered cybersecurity standards to ensure your proprietary business data remains impenetrable:

  • End-to-End Cryptographic Encryption: All HTTP traffic across sajjanstudio.net is strictly forced through TLS 1.3 / SSL 256-bit encryption. Database storage volumes and offsite encrypted backups are secured using AES-256 standard encryption.
  • Zero-Plaintext Password Architecture: All user account passwords and sensitive credentials stored within our databases are salted and hashed using Bcrypt / Argon2id cryptographic functions with dynamic cost factors.
  • Isolated Virtual Private Cloud (VPC): Production databases and application servers run within secure, isolated virtual private cloud subnets with strict firewall rules and no public ingress ports exposed except standard reverse proxies.
  • Role-Based Access Control (RBAC): Administrative permissions and source code repository access are strictly compartmentalized based on the principle of least privilege (PoLP) and multi-factor authentication (MFA).
05

Third-Party Infrastructure & Sub-Processors

To provide high-availability cloud hosting, real-time messaging, and frictionless billing, Sajjan Studio partners with world-renowned infrastructure providers. Each sub-processor is vetted for compliance with international privacy benchmarks:

1. Cloud Hosting & Content Delivery:

Amazon Web Services (AWS), DigitalOcean, and Cloudflare Inc. for cloud compute instances, edge caching, SSL termination, and DDoS protection.

2. Payment Processing Gateways:

Stripe Payments Inc., PayPal Holdings Inc., PayFast, JazzCash, and EasyPaisa for secure digital settlement of invoices under PCI-DSS Level 1 compliance.

3. Automated Messaging & Telecommunications:

Meta Platforms Inc. (WhatsApp Cloud Business API) for dispatching verified milestone alerts, quotation links, and direct client support.

Absolute Guarantee: Sajjan Studio NEVER sells, rents, leases, or monetizes client data to third-party data brokers, ad networks, or marketing syndicates.

06

Data Retention Lifecycle, Archiving & Account Purging

We retain personal data and project records only for as long as necessary to fulfill the commercial and engineering purposes outlined in this Policy, or as mandated by applicable statutory accounting and tax regulations:

  • Active Projects: Full project specifications, client portal activity, and code snapshots are actively maintained throughout the active development and warranty SLA cycles.
  • Completed Contracts & Source Code: Post-delivery source code backups are archived in secure, encrypted cold storage for emergency disaster recovery for a standard period of 12 to 24 months, after which they may be permanently purged upon mutual agreement.
  • Financial & Invoicing Records: Financial ledgers, quotation PDFs, and payment receipts are retained for up to 5 years in compliance with Pakistani and international financial auditing standards.
  • Account Erasure Requests: Upon written verification, clients may request complete erasure of their personal accounts and marketing contact entries.
07

Non-Disclosure Agreements (NDA) & Confidentiality Protocols

We understand that our clients frequently entrust us with proprietary trade secrets, unreleased startup concepts, custom business logic, and patented algorithms.

Every member of our engineering team operates under strict, legally enforceable internal Non-Disclosure Agreements. Furthermore, Sajjan Studio routinely executes bilateral corporate NDAs with clients prior to receiving confidential database schemas, wireframes, or business logic.

All proprietary source code authored specifically for client custom software solutions remains the exclusive confidential asset of the client following 100% financial settlement.

08

Cookie Policy & Session Management Technologies

sajjanstudio.net utilizes lightweight browser cookies and local storage tokens solely to enhance your user experience and secure your sessions:

Essential Session Cookies

Maintains authenticated user sessions in the Client Portal and prevents CSRF attack exploits.

Preference Tokens

Remembers your user interface preferences such as Dark Mode or Light Mode across visits.

Security & Telemetry

Monitors abnormal traffic spikes, rate-limits brute force attempts, and ensures uptime stability.

09

Client Data Rights & Self-Service Data Control

Regardless of your geographical location, Sajjan Studio grants you full sovereignty over your personal and corporate information:

  • Right to Transparent Access: You may request a complete export of your stored personal details, quotation history, and active project deliverables.
  • Right to Rectification: You may update or correct inaccurate company names, phone numbers, or billing parameters directly through the Client Portal or via support.
  • Right to Erasure ("Right to be Forgotten"): You may request the permanent removal of your user account profile once all contractual obligations and billing settlements are satisfied.
  • Right to Data Portability: You are entitled to receive your project assets, database export files, and documentation in standard machine-readable formats.
10

Policy Updates & Data Protection Officer (DPO) Contact

Sajjan Studio reserves the right to amend this Privacy Policy periodically to reflect technological updates, statutory regulatory changes, or expanded software features. Substantial modifications will be highlighted via our website header or transmitted directly to registered clients via email or WhatsApp notifications.

For privacy inquiries, formal NDA execution requests, or data protection audits, please contact our legal desk directly:

Official Domain https://sajjanstudio.net
DPO Support Email support@sajjanstudio.net
Direct Phone +92 345 7966662
Physical Studio Location Faisalabad Pakistan
Let's Create

Ready to build your custom software application?

Submit details of your project to our project managers for a finalized custom quotation document.

Home Services Quote Work Portal