Privacy Policy

This policy explains what personal data we collect through this website, why we collect it, and the choices and rights you have. It covers rudranetra.com only. Data we handle during a client engagement is governed by that engagement’s contract and, where needed, a data processing agreement.

Who we are

This website is operated by Rudranetra India Private Limited (“Rudranetra”, “we”, “us”), based in India. For personal data collected through this website, we are the controller under the GDPR and the Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 (DPDP Act).

What we collect

We only collect the personal data you choose to give us through our forms:

• Get a quote: name, work email, company, company website, role, the services you need, compliance driver, target timeline, environment to test, your message, and your consent.
• Request a sample report: name, work email, company, company website, role, what you plan to test, what is driving it, timeline, your message, and your consent.
• Newsletter: email address and your consent.
• Tool result email (where offered): email address, your consent, and the tool result you ask us to send.

With each form submission we also record the page you submitted it from, the page your visit started on, the website that referred you (its domain only), the last few pages you viewed on our site, and, if present in the link you followed, campaign parameters (UTM tags). Your browser keeps this list for the current tab only and sends it only if you submit a form.

Our free browser tools run entirely in your browser, and our open-source command-line tools (AppSleuth, getIPA and getAPK) run on your own computer with no telemetry. Nothing you type into a tool is sent to us unless you submit a form to email yourself the result.

How we use it and why

• To respond to your request, such as scoping a test, preparing a proposal or sending the sample report. Basis: your consent and steps taken at your request before entering into a contract.
• To send the weekly newsletter, if you subscribed. Basis: your consent, which you can withdraw at any time with the unsubscribe link in every email.
• To follow up about your request and keep a record of our correspondence. Basis: our legitimate interest in running and improving our business, balanced against your rights.
• To protect our forms from spam and abuse. Basis: our legitimate interest in keeping our website secure.

We do not sell your personal data, and we do not use it for automated decision-making or profiling.

Service providers we use

We use a small number of providers who process data on our behalf, under contract, and only for the purposes below:

• Resend sends form submissions to our inbox and confirmation emails to you. If you subscribe to the newsletter and confirm your address, Resend also stores your email address so we can send it to you; every newsletter has a one-click unsubscribe link.
• Cloudflare hosts this website and delivers it securely. It also hosts our internal records system, where we keep quote requests, sample-report requests and checklist results you send us, encrypted and open only to our team. To limit spam, we keep a scrambled code made from your IP address and the date for one day; we never store the IP address itself.
• Cloudflare Turnstile checks that form submissions come from a person, not a bot. It loads only when you start using a form.
• Cloudflare Web Analytics gives us aggregate visit statistics without cookies (see below).
• Our email providers store the messages we receive and send, including copies of form submissions and newsletter sign-ups.

Cookies, trackers and analytics

We do not use advertising cookies, third-party trackers or ad pixels. Our analytics, Cloudflare Web Analytics, does not set cookies or build profiles of individual visitors. It reports aggregate figures such as page views and referring sites.

When a form is submitted, we also count it anonymously, using Cloudflare Workers Analytics Engine, so we can see which pages and tools lead to enquiries. The count holds only the type of form, the pages and referring website listed above, campaign tags and your country. It never includes your name, email address, IP address or anything you typed, and it is kept for about three months.

If you choose to book a call through the optional Cal.com scheduler on our Contact page, it loads only after you click, and Cal.com’s own privacy policy then applies to the booking.

International transfers

We are based in India and our providers may process data in other countries. Where personal data from the UK or European Economic Area is transferred to a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK addendum) offered by our providers.

How long we keep it

• Enquiries that do not become an engagement: up to 24 months after our last contact, then deleted.
• Enquiries that become an engagement: for as long as needed to perform the contract and meet legal and accounting obligations.
• Newsletter subscriptions: until you unsubscribe, after which we keep only what we need to respect your choice.

Your rights

Depending on where you live, you have some or all of these rights:

• To access the personal data we hold about you, and to receive a copy
• To have inaccurate or incomplete data corrected
• To have your data erased
• To restrict or object to our processing, including for direct marketing
• To data portability
• To withdraw consent at any time, without affecting processing that took place before you withdrew it

Under India’s DPDP Act, you also have the right to grievance redressal and to nominate another person to exercise your rights in the event of your death or incapacity. If you are not satisfied with our response to a grievance, you may complain to the Data Protection Board of India.

In the UK and EU, you may complain to your local data protection authority, such as the Information Commissioner’s Office in the UK. We would appreciate the chance to resolve your concern first.

To exercise any right, email us at the address below. We will respond within the time required by applicable law.

Security

We protect personal data with encryption in transit, access limited to people who need it, multi-factor authentication on our accounts, and strict security headers on this website. No system is perfectly secure; if you believe you have found a vulnerability in our website, please see our Vulnerability Disclosure Policy.

Children

This website is intended for businesses and professionals. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top shows when it last changed.

Contact and complaints

For privacy questions, requests or grievances, email hello@rudranetra.com. We respond within 30 days, and sooner where the law requires.