[ privacy ]

Your data, plainly explained. What we collect, why, and how to take it back.

Sarvadhi Solutions is committed to handling your information transparently and in line with India's Digital Personal Data Protection Act, 2023 (DPDP Act). This policy applies to sarvadhi.com and the services delivered from it.

Version 1.1 · Last updated 2 June 2026

Contact grievance officer ↓

Introduction and data fiduciary

Sarvadhi Solutions is committed to handling your information transparently and in line with India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”). This Privacy Policy explains how Sarvadhi Solutions Pvt. Ltd. (“Sarvadhi,” “we,” “us,” “our”), an organisation headquartered in Surat, Gujarat, India, collects, uses, stores, shares, and protects personal information that you share with us when you visit sarvadhi.com, engage with our sales team, or use any of our products.

For the purposes of the DPDP Act, Sarvadhi is the data fiduciary — the entity that determines the purpose and means of processing your personal data. You can reach the data fiduciary directly at jatin@sarvadhi.com.

Registered office: 501–504, Velocity Business Hub, L.P. Sarvani, Adajan, Surat, Gujarat, India.

Information we collect

We collect personal information in three contexts.

Information you provide to us

  • Contact form submissions — your name, work email, company name, industry, and the message you write to us.

  • Email or phone enquiries — anything you choose to share when contacting us directly.

  • Engagement onboarding — once a contractual engagement begins, we may collect billing information, signatory details, and operational data needed to deliver the service.

Information collected automatically

  • Server logs (IP address, browser type, pages visited, timestamps) generated by the web server.

  • Cookies set by this site for essential functionality and, with your consent, analytics (see Cookies and analytics).

Information from third parties

We do not buy personal data lists, and we do not enrich form submissions using third-party data brokers.

How we use your information

We use the information we collect to:

  • Reply to your enquiry and arrange a 30-minute call.

  • Scope, build, deliver, and support the services you engage us for.

  • Send transactional communication relating to your engagement (invoices, status updates, contract notes).

  • Improve sarvadhi.com — understand which content is useful and fix broken flows.

  • Comply with legal obligations (tax, GST, audit, court orders).

We do not sell your personal information to anyone. We also do not add you to a marketing newsletter from a contact-form submission without separate opt-in consent.

Under the DPDP Act, we process personal data on the following lawful grounds:

  • Consent — when you submit the contact form, email or call us, or accept cookies for analytics. You can withdraw consent at any time (see Your rights below).

  • Certain legitimate uses recognised under the Act — for example, where you have voluntarily provided your personal data for a specified purpose and have not indicated that you object to its use for that purpose.

  • Compliance with legal obligations — where processing is required to meet obligations under applicable Indian law.

Data residency

All personal data processed by Sarvadhi’s marketing site and managed services is stored on infrastructure hosted in Amazon Web Services, Mumbai region (ap-south-1), India. This applies to contact-form submissions, account records, and operational data for productised services.

Client deployments that contract for on-premise or separate hosting operate under the data-handling terms in their own service agreement; this policy does not override those terms.

Retention periods

We keep personal information only for as long as needed for the purpose it was collected, or as required by Indian law.

Data category

Retention period

Contact form submissions (no engagement)

12 months from receipt

Engagement records (active client)

Duration of contract + 7 years (tax / audit)

Server logs

90 days

Analytics aggregates

26 months

Your rights as a data principal

Under the DPDP Act, you have the right to:

  • Access — request a copy of the personal data we hold about you.

  • Correct — request that inaccurate or incomplete data be corrected or completed.

  • Erase — request that we delete your personal data, subject to legal-retention obligations.

  • Withdraw consent — withdraw any consent you previously gave, without affecting prior lawful processing.

  • Nominate — nominate another person to exercise these rights on your behalf in the event of death or incapacity.

  • Grievance redressal — raise a complaint with our grievance officer (see Grievance officer).

To exercise any of these rights, email jatin@sarvadhi.com with the subject line “DPDP — your request.” We respond within 30 days.

Sharing with third parties

We share personal data only with sub-processors that help us deliver this site and our services. Each sub-processor is contractually bound to handle data on our instructions and in line with DPDP requirements.

Sub-processor

Purpose

Location

Amazon Web Services

Application hosting and database storage

Mumbai, India (ap-south-1)

Vercel

Marketing site delivery (sarvadhi.com)

Global edge CDN

  • We do not sell personal data.

  • We will not share your personal data with advertisers or list brokers.

  • We may disclose information if compelled by a valid Indian court order or a law-enforcement request, and we challenge over-broad requests where possible.

Security measures

We use reasonable technical and organisational measures to protect personal data:

  • TLS in transit on every page and API.

  • Encryption at rest for database storage.

  • Least-privilege access — production data is reachable only by the engineers who need it for the engagement.

  • Audit logs for production data access, reviewed monthly.

  • Annual third-party security review of production infrastructure.

No security measure is perfect. If we become aware of a breach affecting your personal data, we will notify you and the Data Protection Board of India, with a detailed submission within 72 hours, in line with the DPDP Rules.

Cookies and analytics

We use a small number of cookies on sarvadhi.com:

  • Essential cookies — session integrity and load balancing. These cannot be switched off.

  • Analytics cookies — set only after you consent. Used to understand aggregate site usage, with no personal identification.

You can clear cookies at any time through your browser settings.

Children's data

Sarvadhi’s services are built for businesses, not consumers. We do not direct our services to anyone under the age of 18, we do not knowingly collect personal data from children, and we do not carry out behavioural tracking of children. If you believe a child has shared data with us, email jatin@sarvadhi.com and we will delete it.

Updates to this policy

We may update this policy from time to time. Material changes will be flagged via a banner on sarvadhi.com and, where applicable, by direct mail to active clients. The version number and “Last updated” date at the top of this page are the authoritative version markers.

Grievance officer

In accordance with the DPDP Act, our grievance officer is:

Jatin Dudhaat — CEO & Co-Founder, Sarvadhi Solutions Pvt. Ltd. — jatin@sarvadhi.com — Surat, Gujarat, India

Use the subject line DPDP — Grievance. We acknowledge every grievance within 5 working days and aim to resolve it within 30 days.

Contact us

Sarvadhi Solutions Pvt. Ltd.

  • India (HQ): 501–504, Velocity Business Hub, L.P. Sarvani, Adajan, Surat, Gujarat, India

  • United States: 2010 El Camino Real, Suite 1086, Santa Clara, CA 95050, USA

  • General email: connect@sarvadhi.com

  • Data and privacy: jatin@sarvadhi.com

  • Phone: +91 96876 19914 (India) · +1 760-493-7168 (USA)