Privacy & Data

Cookie Policy

Last updated: October 12, 2026

Strova Group believes in privacy by design and radical transparency. This Cookie Policy explains how cookies and browser storage technologies are used on our marketing website (https://strovagroups.in) and client portal (https://portal.strovagroups.in).

1. Marketing Website (Zero Tracking Cookies)

On our public marketing website (strovagroups.in), we do not set any tracking cookies, third-party advertising cookies, or behavioral profiling cookies.

We use privacy-friendly, cookieless analytics that do not store persistent identifiers on your device and do not track you across different websites. We also respect the browser's Do Not Track (DNT) header.

2. Client Portal (Strictly Essential Cookies)

On our invite-only client portal (portal.strovagroups.in), cookies are used exclusively for authentication and session security:

  • Session Authentication Cookie: An encrypted authentication token set upon one-time passcode (OTP) verification. Attributes: HttpOnly (inaccessible to browser JavaScript), Secure (transmitted over HTTPS only), and SameSite=Lax (cross-site request forgery protection).
  • Security / Bot Verification: Cloudflare Turnstile security tokens during authentication to protect against automated credential attacks.

These cookies are classified as strictly necessary for the technical operation of the authenticated portal and do not require marketing consent under applicable data protection laws.

3. Payment Gateway Modal Storage (Razorpay)

When a client authorizes payment for an invoice in the Client Portal via Razorpay, transient security tokens and session state are managed strictly within Razorpay's secure checkout modal iframe. These elements are required to detect payment fraud, securely handle UPI / 3D-Secure card verification, and maintain transaction integrity. Strova Group never accesses or stores payment instrument details or CVVs.

4. Local Storage & Cache

Our website operates on a permanent, light-first corporate design system and does not write tracking preferences or behavioral profiles to localStorage. Cached assets are restricted to standard static files (fonts and scripts) stored by your browser for optimal performance.

5. Managing Your Privacy Choices

You can control or delete cookies and local storage directly through your browser settings:

  • You may clear your browser cache and local storage at any time via your browser settings.
  • You can configure your browser to block third-party cookies or alert you when cookies are being sent.
  • Logging out of the client portal immediately terminates the active authentication session and removes the session cookie.

6. Inquiries & Data Principal Rights

If you have questions about our cookie policy or wish to exercise your data principal rights under India's Digital Personal Data Protection (DPDP) Act 2023, you may submit a request online:

Strova Group is a proprietorship of Babita Kumari. Registered MSME: UDYAM-JH-20-0147452.

Planning a project?Request a quote