Sthala AI

Legal

Privacy policy

This policy covers personal data that Sthala Group collects through this website, getsthala.com. It is written to be read, not to be survived.

Last updated:

Who we are, and who is responsible

Sthala Group, Visakhapatnam, Andhra Pradesh, India, is the Data Fiduciary for personal data collected through this website under the Digital Personal Data Protection Act, 2023. You can reach us at contact@getsthala.com.

There is a second case worth separating clearly. When we operate the platform for a developer, that developer is the Data Fiduciary for their own buyers’ data, and we act as a Data Processor on their documented instructions. That relationship is governed by the contract between us and that developer, and it is not covered by this policy. This policy covers only the data you give us directly through this website.

What we collect

One form on this site collects personal data: the contact form on the Book a walkthrough page. It collects exactly the following.

  • Your full name.
  • Your company name.
  • Your role.
  • Your mobile number.
  • Your city.
  • The number of active ventures you selected.
  • The message you wrote.
  • A record of your consent: the date and time, and the exact wording of the consent statement you agreed to.

Nothing else on this site collects personal data. There are no advertising cookies, no marketing pixels, no session recording, no chat widget and no third-party trackers. We do not set any cookie for advertising or profiling.

If website analytics are enabled, we use Plausible Analytics, which is cookieless, stores no personal data, does not store IP addresses, and does not follow visitors across sites. Our web host keeps standard server request logs for a short period for security and reliability, which is a normal part of serving a website.

Why we collect it, and the limit on its use

One purpose only: to reply to your enquiry about Sthala AI and to arrange a walkthrough. That is the purpose you consent to, and it is the only purpose the data is used for.

To be explicit about what we do not do with it:

  • We do not sell, rent, broker or otherwise make your details available to any third party.
  • We do not add you to a marketing list without separate, specific consent.
  • We do not use your details to train any model.
  • We do not combine them with data from any other source, our clients included.
  • We do not use them for advertising or profiling of any kind.

Who sees it

Inside Sthala Group, only the people who need it to answer you.

Outside, only service providers strictly required to deliver the message to us, acting as processors under contract, and only for that purpose. Today that means our transactional email provider, which transmits the form submission to our inbox, and our web host, which serves the site. They may not use your data for their own purposes.

We will disclose personal data to a government authority only where Indian law requires it of us.

Where it is stored

Your enquiry record is stored in India, and it stays in India for its whole retention period. Personal data processed on the platform on behalf of our developer clients is also hosted in India.

The website itself is static and is served from a content delivery network with points of presence worldwide. No personal data is stored on that network. Your form submission travels over an encrypted connection.

How long we keep it

Twenty-four months from your last contact with us, after which the record is deleted.

If you become a client, your details move into the contract record and are kept for as long as the contract runs, plus the period Indian tax and company law requires us to keep business records.

If you tell us you are not interested, we delete your enquiry within 30 days of that instruction, without asking you why.

Your rights under the DPDP Act

As a Data Principal under the Act, you have the right to:

  • Ask what personal data of yours we hold and what we have done with it.
  • Have inaccurate or incomplete data corrected or completed.
  • Have your data erased, subject to any legal obligation on us to retain it.
  • Withdraw consent at any time, as easily as you gave it. Withdrawal does not undo processing that already happened lawfully.
  • Nominate another person to exercise these rights on your behalf if you die or become incapable of exercising them.
  • Raise a grievance with us and have it answered.

How to have your data deleted

Email contact@getsthala.com with the subject line DPDP deletion request, quoting the mobile number you gave us so we can find your record.

We will acknowledge within 7 days and complete the deletion within 30 days. There is no fee, and you do not have to give a reason. We will confirm in writing when it is done.

The same address handles access and correction requests.

Grievance redressal

If something about how we handle your data is wrong, write to contact@getsthala.com with Grievance in the subject line. We will respond within 30 days.

If you are not satisfied with our response, you may complain to the Data Protection Board of India.

Security

The site is served over HTTPS. Access to enquiry records is limited to the people who need it and is protected by individual accounts with multi-factor sign-in. We keep the amount of personal data we hold small on purpose, because the safest record is the one that was never collected.

Children

This site is for business contact between companies. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us data, write to us and we will delete it.

Changes to this policy

If we change this policy we will update the date at the top of the page. If a change materially affects how we use data you have already given us, we will contact you before it takes effect.