Privacy Policy

AnantaTech Hub Private Limited ("AnantaTech Hub", "we", "us", "our") is a company incorporated in India with its registered office at AnantaTech Hub Private Limited, 202, Avadh Shopping Center, Baben, Bardoli - 394601, Dist. Surat, Gujarat, India. We build and operate business software, including the products published on our website, and we deliver software development and consulting services.

This policy explains what we do with personal data. It applies to this website, to our products where we are the controller of the data, and to enquiries, applications and communications you send us. Where we handle data on behalf of a business customer — for example the records that customer keeps inside one of our products — that customer decides how the data is used and we act on their instructions under a separate agreement.

For the purposes of the Digital Personal Data Protection Act, 2023 we are the Data Fiduciary. Under the GDPR we are the Controller for the processing described here. Questions about either role can be sent to contact@anantatechhub.com or +91 97376 99595.

We collect only what we need for a stated purpose. We do not require you to create an account to read this website.

We do not knowingly collect financial account numbers, government identifiers, biometric data, health data, or data revealing racial or ethnic origin, political opinions, religious beliefs, trade union membership, sex life or sexual orientation through this website. Please do not send such information to us in a form field or an email.

We must have a lawful reason for every use of personal data. Under the DPDP Act we rely on your consent or on legitimate uses permitted by the Act. Under the GDPR we rely on the bases named below.

We do not use personal data for automated decision-making that produces a legal effect on you, and we do not carry out profiling for advertising.

Where we rely on consent, we ask for it clearly, for a purpose stated at the time, and never as a condition of using this website beyond what is necessary to deliver what you asked for.

You may withdraw consent at any time, and doing so is as easy as giving it. Every newsletter carries a one-click unsubscribe link and honours the list-unsubscribe header, so your mail client can unsubscribe you without your having to open the message. For any other consent, write to us using the details in the final section.

Withdrawing consent does not affect anything we did lawfully before you withdrew it, and it does not remove data we are separately required to keep — for example an invoice we must retain under tax law.

We do not sell personal data, we do not share it for cross-context behavioural advertising, and we do not rent or trade contact lists. We share personal data only in the circumstances below.

• Service providers who process data on our instructions under a written agreement — for example our email delivery provider, our hosting provider and our error-reporting provider. They may use the data only to provide the service to us.
• Professional advisers such as accountants, auditors and lawyers, where they need the data to advise us and are bound by a duty of confidence.
• Government agencies, courts, or law enforcement, where we are required to disclose by law or by a valid order, and to the extent that order requires.
• An acquirer or successor, if our business or a part of it is transferred, in which case this policy continues to apply to the transferred data until you are told otherwise.

We do not permit any of our service providers to use your personal data for their own purposes.

We are based in India and our systems are operated from India. If you contact us from outside India, your personal data will be transferred to and processed in India.

Where personal data protected by the GDPR or UK GDPR is transferred to us or to a provider outside the European Economic Area or the United Kingdom, we rely on the European Commission's Standard Contractual Clauses, or the UK International Data Transfer Addendum, together with any additional safeguards the transfer requires.

Transfers of personal data out of India are made in accordance with section 16 of the Digital Personal Data Protection Act, 2023 and any restrictions the Central Government notifies under it.

We keep personal data only for as long as the purpose it was collected for requires, and then erase it or irreversibly anonymise it.

Whatever law applies to you, we will act on the requests below. We do not charge for this and we do not treat you differently for asking.

• Access — obtain confirmation of whether we hold personal data about you, a copy of it, and a summary of how it is processed and who it has been shared with.
• Correction — have inaccurate or incomplete data corrected or completed.
• Erasure — have data deleted where it is no longer needed for the purpose it was collected for, or where you withdraw the consent it rested on.
• Withdraw consent — at any time, without giving a reason.
• Portability — receive the data you gave us in a structured, commonly used, machine-readable format, where the GDPR applies.
• Restriction and objection — ask us to pause processing, or object to processing based on legitimate interests, where the GDPR applies.
• Nominate — under the DPDP Act, nominate another individual to exercise your rights in the event of your death or incapacity.
• Non-discrimination — receive the same service and price whether or not you exercise a privacy right, as required by the CCPA.

To make a request, write to contact@anantatechhub.com or +91 97376 99595. We will verify your identity before acting, so that we do not disclose your data to someone else. We respond within 30 days. If a request is unusually complex we may extend that period and will tell you why before the first 30 days are up.

If you are not satisfied with our response you may complain to the Data Protection Board of India, to your supervisory authority in the EEA or the Information Commissioner's Office in the UK, or to the California Privacy Protection Agency, as applicable to you. We would prefer the chance to put it right first.

We maintain reasonable security safeguards appropriate to the nature of the data we hold, as required by section 8(5) of the Digital Personal Data Protection Act, 2023 and by Rule 8 of the SPDI Rules, 2011.

• Data in transit is encrypted using TLS.
• Access to production systems is limited to the people whose role requires it, and is removed when that role ends.
• Credentials and API tokens are held server-side and are never exposed to a browser.
• Passwords, where we hold them, are stored only as salted hashes and never in a readable form.
• Systems are patched, and backups are taken and access-controlled to the same standard as the live data.

No safeguard is absolute. If a personal data breach occurs that is likely to affect you, we will notify the Data Protection Board of India and every affected person as required by the DPDP Act, and any other regulator the law requires, without undue delay.

Our website and products are intended for businesses and for adults acting in a business capacity. We do not knowingly collect personal data of a child under 18, which is the age the Digital Personal Data Protection Act, 2023 uses, and we do not carry out tracking, behavioural monitoring or targeted advertising directed at children.

If you believe a child has given us personal data, tell us and we will delete it.

This website does not use advertising or cross-site tracking cookies. What it does store on your device, why, and how to control it, is set out in our Cookie Policy.

In accordance with the Information Technology Act, 2000 and the rules made under it, and with section 13 of the Digital Personal Data Protection Act, 2023, you may contact our Grievance Officer about anything in this policy or about how your data has been handled.

Our full escalation route, and what to do if you are not satisfied with the outcome, is set out in our Grievance Redressal Policy.

We update this policy when our practices change or when the law requires it. The effective date at the top of this page always reflects the current version. Where a change materially affects your rights we will give notice on the website, and where we hold your contact details and the law requires it, by email.