Privacy notice

Who we are

Dhruv Sutra LLP, a limited liability partnership registered in India, is the Data Fiduciary for the personal data described here. That means we decide why and how it is processed, and we are responsible for it.

What we collect

When you send a pitch. The form asks for your name, email address, a description of your idea, the stage it's at, how you'd like to pay, and an optional link. We also record that you gave consent and when.

When you send a project brief. The business form asks for your name, work email, company, an optional role, the kind of project, a description of it, an approximate budget, duration and start date, and an optional link. We also record that you gave consent and when.

When you browse the site. We don't run analytics, advertising or tracking scripts. Like any website, the servers that deliver it see your IP address and basic browser details. Specifically:

• Cloudflare hosts the site and processes request data, including your IP address, to deliver pages and protect against abuse.
• On the pitch and project forms, Cloudflare Turnstile checks that the form is being sent by a person and not a bot. It processes your IP address and browser signals for that check only.
• Our fonts load from Google Fonts, so your browser sends Google its IP address when it requests them.

Please don't put sensitive personal data (health, financial account details, government ID numbers and so on) in a pitch. We don't need it to reply.

Why we use it

We use the details you send through either form only to:

• read and evaluate your idea or project,
• reply to you and continue the conversation you started, and
• keep a record of your consent.

We don't sell your data, share it for advertising, or add you to a mailing list. The legal basis for this processing is the consent you give when you tick the box on the pitch form.

Who processes it for us

A few service providers (Data Processors) handle data on our behalf, only to provide their service to us:

• Cloudflare, for hosting, security and the Turnstile check.
• Resend, which delivers your pitch from the website to our inbox.
• Our email provider, where the pitch and our replies are stored.

We may also disclose data where Indian law requires it, for example to comply with a lawful order from a court or government authority.

Where it's stored

Some of these providers store or process data outside India. We only use providers that protect it with appropriate security, and we will follow any restrictions the Government of India places on transfers to particular countries under the DPDP Act.

How long we keep it

We keep your pitch while we're in conversation with you. If we don't go on to work together, we delete it within 12 months of our last contact. If we do work together, it becomes part of our project records under that agreement. We may keep data longer only where a law requires us to.

You can ask us to delete it sooner at any time.

How we protect it

The site is served only over HTTPS. Pitches go straight to our email and aren't stored in a separate database. Access is limited to the people at Dhruv Sutra who need it to reply. If a personal data breach affects you, we will inform you and the Data Protection Board of India as the DPDP Act requires.

Your rights

Under the DPDP Act, you can:

• Access a summary of the personal data we hold about you and how we've used it.
• Correct, complete or update data that's wrong or out of date.
• Erase your data when it's no longer needed for the purpose you gave it for.
• Withdraw consent at any time. It's as easy as giving it: send us an email. Withdrawing doesn't affect processing that already happened, but we'll stop using and delete your data.
• Nominate someone to exercise these rights for you in case of death or incapacity.
• Raise a grievance with us, as described below.

To use any of these rights, email piyush@dhruvsutra.com from the address you used in your pitch, or tell us how else to confirm it's you.

Grievances

If you have a concern about how we've handled your data, write to our grievance contact at piyush@dhruvsutra.com. We'll acknowledge it promptly and respond within 30 days.

If you're not satisfied with our response, you can complain to the Data Protection Board of India. The DPDP Act asks that you raise it with us first.

Children

This site and the pitch form are meant for adults. If you're under 18, please don't send us a pitch without a parent or guardian. If we learn we've received a child's data without verifiable parental consent, we'll delete it.

Cookies

We don't use tracking or advertising cookies. The details are on our cookies page.

Changes to this notice

If we change how we handle personal data, we'll update this page. If a change affects data you've already sent us in a significant way, we'll tell you by email and ask for fresh consent where the law requires it.