Privacy Policy
We treat your data the way we'd want ours treated · minimal collection, encrypted storage, no selling.
1. Who we are
360Patel is an Indian AI, SaaS and digital transformation studio headquartered in Ahmedabad, Gujarat. For privacy matters, the data fiduciary is 360Patel and the grievance officer can be reached at privacy@360patel.com.
2. What we collect
Contact information you submit through forms (name, email, phone, company, website, message), basic usage analytics (anonymised pageviews, device type, referrer), and any project-related material you choose to share with us during an engagement.
3. Why we collect it
To respond to your inquiries, deliver the services you engage us for, send relevant follow-ups, send invoices, comply with legal obligations, and improve our website. We do not sell your data. Ever.
4. Legal basis (DPDP Act 2023)
We process personal data based on your consent when you submit a form, contractual necessity once you become a client, and legitimate interest for security, fraud prevention and analytics.
5. Third parties
We use trusted processors strictly to deliver our services: Lovable Cloud / Supabase (database & auth), Google Workspace (email & docs), Razorpay / Stripe (payments), Resend (transactional email), Cloudflare (hosting & CDN), PostHog (privacy-friendly analytics). Each processor is bound by their own privacy commitments.
6. Data retention
Lead form data is retained for 24 months unless you ask us to delete it sooner. Client project data is retained for the duration of the engagement plus 3 years for legal and accounting compliance. Anonymised analytics may be retained indefinitely.
7. Your rights
Under India's DPDP Act 2023 (and GDPR if you are in the EU) you have the right to access, correct, port and erase your personal data, and to withdraw consent at any time. To exercise any right, email privacy@360patel.com · we respond within 7 working days.
8. Security
We use TLS 1.3 in transit, encryption at rest, role-based access control, multi-factor authentication for all internal accounts, and regular security reviews. We are led by a Google Cybersecurity Professional certified team.
9. Cookies
We use a minimal set of first-party cookies for session management and privacy-friendly analytics. We do not use third-party advertising or tracking cookies.
10. Children
Our services are not directed at children under 18. We do not knowingly collect personal data from minors. If you believe we have, write to privacy@360patel.com and we will delete it.
11. Changes
We may update this policy. Material changes will be highlighted on this page and, where required, communicated by email.
12. Contact
Grievance Officer: privacy@360patel.com · 360Patel, Ahmedabad, Gujarat, India.