Plain-language summary first; the full terms follow.
Summary
- Who: Sripto Corporation Private Limited (“we”) decides how personal data from this website is used. Under the Digital Personal Data Protection Act, 2023, we are the Data Fiduciary.
- What: only what you type into a form (such as your name, phone, e-mail and company), the page you sent it from, and the website that brought you here.
- Why: to answer you: a demo, a quote, a callback, the pilot programme or a partnership.
- Where: the website is hosted on Cloudflare Pages. When you send a form, its details are e-mailed to our team through Google’s Gmail service and kept in our team inbox and our own MyRecords system.
- No cookies, no ad tracking. We do not run visitor statistics on this website at present.
- We do not sell your data or add you to marketing lists without asking.
- Your rights: ask what we hold, correct it, have it erased, or complain. Use the contact page.
Full terms
1. Who we are
Sripto Corporation Private Limited (“we”, “us”, “our”) runs this website. For personal data collected through this website, we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (the “DPDP Act”).
This notice covers this website only. Personal data inside a client’s MyRecords system is controlled by that client; see privacy and the DPDP Act.
2. What we collect, and why
| What | When | Why |
|---|---|---|
| Name, phone number, e-mail, company, city, preferred language, your message | When you fill in a form (demo, quote, callback, contact, pilot programme, partner) | To reply and to do what you asked |
| Your choices for a quote (modules, business size, deployment) | Only if you send them with a form | To prepare your quote |
| The page you sent the form from, and the website that sent you to us (if it was an AI assistant, which one) | When you send a form | To understand how people find us |
| Technical request data: IP address, browser type, time | Every visit, in our hosting provider’s logs | To deliver the site and protect it from attacks |
| Anonymous visit statistics: pages viewed, referring site, country, device type | Only if we turn visit statistics on (off today) | To see which pages help people |
We do not ask for sensitive data such as Aadhaar, PAN, bank or health details through this website. Please do not put them in a message.
3. Our legal basis
3.1 When you send a form, you give us your details voluntarily for that request. We use them only for it, as section 7(a) of the DPDP Act allows.
3.2 If we want to use your details for anything else, such as sending you news about MyRecords, we will ask for your consent first, and you can withdraw it at any time as easily as you gave it.
4. Who else handles it
| Who | What they do | Where |
|---|---|---|
| Cloudflare, Inc. | Hosts this website and runs its form service; it does not keep form entries | Cloudflare’s global network; data may be processed outside India |
| Google (Gmail) | Delivers each form entry by e-mail to our team inbox, where it is kept | Google’s data centres; data may be processed outside India |
| Our own MyRecords system | Where our team follows up on your request | Our servers |
| E-mail and WhatsApp | When we reply to you on the channel you gave us | The provider of that channel |
We do not sell, rent or trade your personal data. We may disclose it if the law requires us to.
5. Transfers outside India
Our hosting provider may process data outside India. We transfer data only as the DPDP Act and any government orders under it allow.
6. How long we keep it
- Form entries: for as long as we are in touch about your request, and then for up to 24 months after our last contact, unless you become a client or ask us to erase them sooner. If you become a client, your contract decides how long we keep the records we need.
- Technical request data: for the short period our hosting provider keeps its logs.
- Visit statistics: kept only in counted form, with nothing that identifies you.
7. How we protect it
The site is served only over HTTPS. Form entries are kept in systems that only our staff who need them can open, with access controls and logs.
8. Your rights
Under the DPDP Act you can:
- ask for a summary of the personal data we hold about you and how we use it;
- ask us to correct, complete, update or erase it;
- withdraw consent you have given;
- nominate someone to use these rights for you if you die or cannot act;
- complain to us, and, if you are not satisfied, to the Data Protection Board of India.
To use any of these rights, contact us as shown below. We will reply as soon as we can, and within the time the DPDP Rules set.
9. Children
This website is for businesses. It is not meant for children, and we do not knowingly collect children’s data. If you think a child has sent us their details, tell us and we will erase them.
10. Questions and complaints
Use the contact page and mark your message "Privacy". It goes to the person in our team who answers questions about personal data.
11. Changes
We may update this notice. The date at the bottom of this page shows the latest version. If a change affects how we use data you have already given us, we will tell you.
Source
- The Digital Personal Data Protection Act, 2023, Gazette of India.