Company Policies &
Digital Operations Standards.

Orange Labs is a software development venture offering custom digital solutions including web applications, mobile platforms, API development, cloud integrations, and enterprise software to clients across India and internationally. All services, communications, contracts, deliverables, and support interactions are conducted and archived digitally.

Orange Labs operates a fully paperless, remote-first workflow. Physical presence is not required for any client engagement. The entity is managed and operated from India, with team members distributed across various locations.

Until formal registration is completed, Orange Labs operates as an informal sole proprietorship / freelance entity under the professional capacity of its founder. This is a legally recognised form of business operation in India and does not invalidate any contract, obligation, or service agreement entered into by Orange Labs.

What this means for clients

• check_circle All contracts and agreements entered into with Orange Labs are legally enforceable under the Indian Contract Act, 1872, even in the absence of formal company registration.
• check_circle Invoices are issued under the founder's name / trade name "Orange Labs" and may not carry a CIN or LLPIN number at this time.
• check_circle GST registration may not yet apply if annual turnover is below the threshold (₹20 lakhs for service providers; ₹10 lakhs for special category states). Clients will be informed in writing if GST is applicable.
• check_circle Payments made to Orange Labs are received into a personal bank account or trade account held in the founder's name. This is standard practice for unregistered entities in India.
• check_circle Orange Labs commits to completing formal registration and notifying all active clients by email within 7 days of registration completion.

Planned registration path

Orange Labs intends to register as a Private Limited Company or LLP under MCA (Ministry of Corporate Affairs), India. Upon registration, a CIN/LLPIN, PAN, TAN, and MSME certificate will be obtained. All existing contracts will be novated or acknowledged under the registered entity with client consent.

Tax obligations (unregistered)

As an unregistered entity below the GST threshold, Orange Labs does not currently charge or collect GST. If and when GST registration is obtained, all clients will be notified and invoices will be updated accordingly. Professional Tax (where applicable by state) and personal income tax on earnings are the sole responsibility of the founder.

Engaging Orange Labs for any service — by making an advance payment, signing a proposal, or sending a written confirmation of intent — constitutes full acceptance of this policy. Digital agreements (email threads, portal acceptances, e-signed documents) carry legal enforceability under Section 10A of the Information Technology Act, 2000.

Scope of engagement

• check_circle All project requirements, change requests, and approvals must be submitted via email or the designated project management channel.
• check_circle Verbal commitments are not binding. Written digital confirmation is required for any commitment to be actionable.
• check_circle Scope changes are documented as Change Requests (CRs) and require written client approval before implementation begins.
• check_circle All project timelines, deliverables, and acceptance criteria are defined in the digitally agreed Statement of Work (SOW) or project proposal.
• check_circle Clients must provide timely feedback within agreed review windows; delays caused by delayed client feedback may extend project timelines accordingly.

Orange Labs respects and protects the personal data of clients, collaborators, and end-users. While formal DPDP Act, 2023 compliance obligations fully apply to registered entities, Orange Labs voluntarily adheres to its principles as a matter of professional and ethical commitment.

Your rights

• check_circle Right to know what personal data Orange Labs holds about you.
• check_circle Right to request correction of inaccurate or outdated data.
• check_circle Right to request deletion of your data where no legal retention obligation exists.
• check_circle Right to withdraw consent for non-essential communications at any time.
• check_circle Right to raise a data privacy concern directly with the founder via the contact details in Section 13.

IP ownership is governed by the terms of the digitally agreed project proposal or SOW. In the absence of a specific clause, the following default framework applies:

Orange Labs reserves the right to display completed work in its portfolio, on its website, and in case studies unless the client requests confidentiality in writing at or before project kickoff. Portfolio listings will not include any sensitive business logic, proprietary data, or client credentials.

All financial transactions are conducted digitally. Orange Labs issues digital invoices in PDF format via email. Invoices are issued under the trade name "Orange Labs" and include full payment details, project reference, and itemised work description.

Accepted payment methods

• check_circle Bank transfer (NEFT / RTGS / IMPS) — preferred for all Indian clients; account details included in each invoice.
• check_circle UPI (GPay, PhonePe, Paytm, BHIM) — accepted for transactions up to ₹1,00,000.
• check_circle International wire / SWIFT — for overseas clients; currency and correspondent bank details provided on request.
• check_circle Payment link via Razorpay or Instamojo — issued on request for clients preferring card or net banking.

Standard payment schedule

For project-based engagements: 40% advance upon project confirmation, 30% upon mid-project milestone delivery, and 30% upon final delivery and client acceptance. For retainer or monthly maintenance contracts: invoiced at the start of each billing month, due within 7 days.

Invoices outstanding beyond 14 days will attract a reminder notice. Services may be paused on accounts overdue beyond 21 days, with 5 days' written notice given. A late payment charge of 1.5% per month may be applied at Orange Labs' discretion on overdue amounts.

Project timelines are agreed upon in the SOW or project proposal. Orange Labs tracks all deliverables via a shared project management board accessible to the client. All milestone completions and approvals are logged digitally.

Support response standards

SLA timelines apply during business hours: Monday to Friday, 10:00 AM – 7:00 PM IST. Support outside these hours is best-effort only unless an extended support arrangement is specifically agreed in writing.

All support requests must be raised via email or the designated communication channel. Phone calls are supplementary and do not constitute a formal support ticket. A ticket reference is issued for every support interaction.

All Orange Labs team members, collaborators, and contracted freelancers work remotely and are bound by this conduct policy regardless of their location. The digital nature of all operations makes adherence to these standards essential.

Communication & data handling standards

• check_circle All official client communication is conducted via designated email or the project communication channel only — personal social media or informal messaging is not used for project matters without client consent.
• check_circle Client credentials, access keys, and sensitive project data must never be stored in personal accounts, shared in plain-text messages, or transferred via unsecured channels.
• check_circle All collaborators and freelancers must sign a Non-Disclosure Agreement (NDA) before receiving access to any client project or data. NDAs are executed digitally.
• check_circle Screen recordings or screenshots of client systems require written approval from the project lead before being captured or shared.
• check_circle All devices used to access client systems must have up-to-date operating systems, active firewall, and antivirus protection.

Given that Orange Labs operates entirely in a digital environment, cybersecurity is treated as a foundational operational practice. The following standards apply to all internal operations and client-facing work:

• check_circle Client credentials and access keys are stored in an encrypted password manager (e.g., Bitwarden, 1Password); never in plain text, spreadsheets, or unencrypted notes.
• check_circle Multi-factor authentication (MFA) is enabled on all internal tools — email, cloud storage, code repositories, and project management platforms.
• check_circle Source code is maintained in private, access-controlled repositories (e.g., GitHub Private). Access is revoked immediately upon end of engagement.
• check_circle Client-facing applications developed by Orange Labs include basic security practices: input validation, HTTPS enforcement, and dependency vulnerability scanning.
• check_circle In the event of a suspected data breach or security incident affecting client data, Orange Labs will notify the affected client within 72 hours of discovery via registered email.
• check_circle Regular backups of all active project data are maintained on encrypted cloud storage with at least one geographically separate copy.

All refund and cancellation requests must be submitted in writing via email to the address listed in Section 13. Verbal or informal requests are not actionable. Refunds, where applicable, are processed to the original payment instrument within 7–14 business days.

Orange Labs is committed to resolving all disputes fairly and promptly. The following escalation path applies:

Although Orange Labs is not yet a formally registered entity, the following laws and frameworks govern its operations and provide legal standing for all contracts, data handling, and commercial activities:

• check_circle Indian Contract Act, 1872: All agreements and contracts entered into by Orange Labs carry full legal enforceability under this Act, regardless of registration status.
• check_circle IT Act, 2000: Digital contracts, e-signatures (Section 10A), data security obligations, and cybercrime provisions govern all digital operations.
• check_circle DPDP Act, 2023: Orange Labs voluntarily adheres to personal data protection principles, including consent, purpose limitation, and data subject rights.
• check_circle Copyright Act, 1957: Original software, designs, and documentation created by Orange Labs are protected under copyright from the moment of creation — no registration required.
• check_circle Income Tax Act, 1961: All earnings are declared as professional income under the founder's personal PAN. TDS deductions by Indian clients (10% under Section 194J) are accepted and acknowledged.
• check_circle Consumer Protection Act, 2019: Applicable provisions for digital services and e-commerce are observed as a professional standard, ensuring fair practice with all clients.

Orange Labs reserves the right to update or amend this policy at any time. Material changes — including those arising from formal registration, GST enrolment, or changes in applicable law — will be communicated to all active clients via email at least 14 days before the effective date. Continued engagement with Orange Labs after the effective date of an amendment constitutes acceptance of the revised policy.

All previous versions of this policy are archived and available on written request. The most current version is always the governing version.