SarthhakAI
SarthhakAI

Privacy Policy

How SarthhakAI Private Limited collects, uses, stores, and safeguards personal data.

Purpose

SarthhakAI Private Limited (herein referred to as “Organization,” “Company,” “we,” “our,” or “us,” etc.) is committed to protecting the privacy of individuals who interact with us. This policy explains how we collect, use, store, and safeguard personal data to ensure transparency and build trust with our users, customers, and partners.

Scope

This policy applies to all personal data collected through the organization’s websites, applications, services, and other interactions with individuals or organizations.

Definition

  • IP Address: A unique string of characters that identifies each computer using the Internet Protocol to communicate over a network.
  • Personal Data: Any information relating to an identifiable individual (e.g., name, email, IP address).
  • Processing: Any operation performed on personal data, such as collection, storage, use, disclosure, or deletion.
  • Data Controller: The entity that determines the purposes and means of processing personal data.
  • Data Processor: The entity that processes data on behalf of the data controller.
  • Children’s Data:For the purposes of this policy, “Children’s Data” refers to personal data relating to individuals under the age of 18.

Responsibilities

Chief Information Security Officer (CISO) is responsible for developing, implementing, maintaining, and enforcing the policy. Employees are responsible and/or accountable to ensure adherence to this policy’s terms during their job duties.

Policy

Data we collect

We may collect the following types of personal data:

  • Identification Information: Name, email, phone number, date of birth, etc.
  • Account Information: Username, password, account preferences.
  • Financial Information: Payment details, billing address.
  • Technical Data: IP address, device identifiers, operating system, cookies, and usage analytics.

How we collect data

We collect personal data through the following methods:

  • Directly from you: When you fill out forms, create accounts, or contact us.
  • Automatically: Through cookies, analytics tools, and logs when you use our website or services.
  • Third Parties: From business partners, service providers, or publicly available sources.

Legal bases for processing personal data

We process personal data only when permitted by law. The legal bases include:

  • Consent: When you provide explicit consent (e.g., marketing communications).
  • Contractual Necessity: To fulfill a contract with you (e.g., processing orders).
  • Legal Obligation: To comply with legal and regulatory requirements.
  • Legitimate Interests: For fraud prevention, improving services, or ensuring security.

How we use personal data

We use personal data for the following purposes:

  • Providing and improving our services.
  • Processing transactions and managing accounts.
  • Communicating with you regarding updates, offers, and support.
  • Conducting analytics and research to improve user experience.
  • Ensure security, detect fraud, and comply with legal obligations.

Data sharing and disclosure

We may share personal data under these circumstances:

  • Service Providers: With vendors or contractors who perform services on our behalf.
  • Legal Compliance: To comply with laws, subpoenas, or other legal processes.
  • Business Transfers: In the event of mergers, acquisitions, or asset sales.
  • Consent: When you explicitly agree to share your data.

Data retention

We retain personal data only as long as necessary to fulfill the purposes for which it was collected unless a more extended retention period is required by law. Afterward, data is securely deleted or anonymized.

Data security

We implement industry-standard technical and organizational measures to safeguard personal data, including:

  • Encryption (at rest and in transit).
  • Access controls and authentication protocols.
  • Regular audits and security assessments.

Your rights

Depending on your jurisdiction, you may have the following rights:

  • Access: Request access to your data.
  • Rectification: Correct inaccurate or incomplete data.
  • Deletion: Request deletion of your data.
  • Data Portability: Obtain a copy of your data in a portable format.
  • Restriction: Request a limitation on the processing of your data.
  • Objection: Object to certain processing activities (e.g., direct marketing).
  • Withdraw Consent: Withdraw your consent when processing is based on consent.

To exercise your rights, please contact us at satvik@sarthhakai.com.

How to contact our data protection officer

We have appointed a Data Protection Officer who is responsible for overseeing our data protection practices and ensuring compliance with applicable privacy regulations. If you have any questions about how we handle your data, wish to exercise your privacy rights, or have concerns regarding data protection, you may contact our DPO using the details below:

  • Name: Satvik Kalra
  • Role: Data Protection Officer, SarthhakAI
  • Email: satvik@sarthhakai.com
  • Address: B013, Raheja Atlantis, Sector 31, Gurugram, Haryana, 122001 (India)

We will review and respond to privacy-related requests in accordance with applicable legal timelines and obligations.

GDPR representative

We value your privacy and your rights as a data subject and have therefore appointed Prighter Group with its local partners as our privacy representative and your point of contact for the following regions:

European Union (EU)

Prighter gives you an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data). If you want to contact us via our representative, Prighter, or make use of your data subject rights, please visit the following website: https://app.prighter.com/portal/15024544499

Cookies and tracking technologies

We use cookies and other tracking technologies to enhance your browsing experience. You can manage your preferences through our cookie policy or browser settings.

Children’s privacy

We have no business or operational use for Children’s Data. Our platform requires payment for access and does not request or collect age information during account creation. Accordingly, we do not knowingly collect, process, or store any Children’s Data.

Third-party links

Our website or services may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review their privacy policies.

Updates to this policy

We may update this policy periodically to reflect changes in laws, regulations, or business practices.

Last updated: 22nd December, 2025