Privacy Policy

Effective 5 October 2026

This Privacy Policy explains how ATI Global, a sole proprietorship owned by Sourabh N, trading as ATI Sutra ("ATI Sutra", "we", "us"), collects, uses, shares and protects personal data. It applies to atisutra.com (the "Website"), to our communications with you, and to the services we provide. We handle personal data in line with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the rules made under them. By using the Website or our services, you agree to this policy.

1. Who is responsible for your data

For data we collect about our own enquirers, clients and Website visitors, ATI Sutra decides how and why it is used. For data that our clients' customers and staff enter into the websites, apps and software we build or host, the client is responsible and we act only as their service provider (see section 8).

2. Personal data we collect

• Contact and identity details: name, phone and WhatsApp number, email address, business name, designation and city.
• Enquiry and project details: what you tell us about your business and requirements, and our messages, calls and meeting notes with you.
• Billing details: billing address, GSTIN, PAN where needed for tax, invoices and payment records.
• Payment information: payments are processed by our payment gateway partners. We receive the payment status, amount, method and a transaction reference. We do not collect or store your card number, CVV, UPI PIN or net banking password.
• Technical and usage data: IP address, device and browser type, pages viewed, time spent, referring site and approximate location, collected through cookies and similar tools.
• Project material: content, logins and data you share so that we can build or maintain your project.

We do not ask for sensitive personal data such as health, biometric or financial account details through the Website. Please do not send it to us unless a project needs it and we have agreed how it will be handled.

3. How we collect it

We collect data directly from you (the quote form, WhatsApp, email, calls, meetings and agreements), automatically when you use the Website, and from third parties such as payment gateways, advertising and analytics platforms, public business listings and people who refer you to us.

4. Why we use it

• To respond to enquiries, prepare quotes and enter into agreements.
• To deliver, host, maintain and support the services you order.
• To raise invoices, collect and reconcile payments, and prevent fraud.
• To meet legal, tax, accounting and regulatory requirements.
• To operate, secure and improve the Website and our services.
• To measure and improve our marketing, and to send service updates and, where you have agreed, offers and news.
• To establish, exercise or defend legal claims.

We process your data on the basis of your consent, given when you contact us or submit a form, and for the legitimate uses the law permits, such as performing a contract with you and complying with legal obligations.

5. Cookies and analytics

The Website may use cookies and tools such as Google Analytics and Meta Pixel to understand how visitors use it and to measure advertising. You can block or delete cookies in your browser settings. Some parts of the Website may not work as intended if you do.

6. Who we share it with

We do not sell your personal data. We share it only as needed with:

• service providers who help us operate, such as hosting, email, messaging, analytics, advertising, accounting and payment gateway companies;
• employees, freelancers and contractors working on your project, under confidentiality obligations;
• professional advisers such as accountants, auditors and lawyers;
• government, tax and law enforcement authorities when the law requires it, or to protect our rights, property or safety;
• a successor, if the ATI Sutra business is reorganised, merged or transferred.

These providers handle data under their own privacy policies. Some of them store data on servers outside India. By using our services you consent to such transfers, to the extent the law allows.

7. How long we keep it

• Enquiry details: up to 24 months after our last contact.
• Client, contract, invoice and payment records: for as long as tax, accounting and limitation laws require, generally 8 years.
• Project material: for the life of the project and Care Plan. After that it is deleted or returned on request, unless we must keep it by law or to deal with a dispute.

8. Data inside the products we build or host

When we build, host or maintain a website, app or software for a client, any personal data of the client's customers, staff or users is controlled by that client. The client is responsible for collecting it lawfully, for publishing its own privacy policy and for answering requests from those individuals. We process such data only on the client's instructions and to provide the service. If you are a user of a client's product, please contact that client about your data.

9. Security

We use reasonable technical and organisational measures to protect personal data, including access controls, encrypted connections and reputable hosting providers. No method of transmission or storage is completely secure. To the extent permitted by law, we are not liable for unauthorised access, loss or disclosure that occurs despite these measures or through services we do not control. If a personal data breach occurs, we will inform affected individuals and the authorities as the law requires. You are responsible for keeping your own passwords and devices secure.

10. Your rights

Subject to the law, you may:

• ask for a summary of the personal data we hold about you and how it is used;
• ask us to correct, complete or update it;
• ask us to erase it, unless we need to keep it by law or for a legitimate purpose;
• withdraw consent at any time. This does not affect processing already done, and may mean we can no longer provide some services;
• nominate another person to exercise your rights if you die or become incapacitated;
• raise a grievance with us.

To use these rights, write to us using the details below. We may need to confirm your identity first. We will respond within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

11. Marketing messages

You can stop marketing emails or WhatsApp messages from us at any time by replying "STOP" or writing to us. We will still send messages needed to deliver a service you have ordered, such as invoices and project updates.

12. Children

Our Website and services are meant for businesses and adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us data, tell us and we will delete it.

13. Links to other sites

The Website may link to other websites and services. We are not responsible for their content or privacy practices. Please read their policies.

14. Your responsibilities

Please give us accurate information and tell us when it changes. If you share another person's personal data with us, you confirm that you have their permission to do so.

15. Changes to this policy

We may update this policy from time to time. The new version applies from the date shown at the top of this page. Continued use of the Website or our services after that date means you accept the updated policy.

16. Governing law

This policy is governed by the laws of India. Disputes are subject to the dispute resolution clause in our Terms and Conditions and to the jurisdiction of the courts at Chennai, Tamil Nadu.