Privacy policy
In short
- We collect what you type into our request form, to reply to you and prepare your review. If we contact your firm first, we use only the business contact details your firm has published.
- We don't sell your details, share them for advertising, or use them to train AI models.
- If you don't become a client, we delete your enquiry after 12 months.
- We don't use advertising or tracking cookies.
- Email contact@cadevstack.com to see, correct, or delete your details.
1. Who we are
CADevStack builds and manages websites for Chartered Accountant firms in India. The website at cadevstack.com is run by Tharwa Consulting Private Limited, 17, 7th Main Road, Indiranagar II Stage, Bengaluru, Karnataka 560038, India ("we", "us"). We decide how and why the details you send us are used, so under India's Digital Personal Data Protection Act, 2023 (DPDP Act) we are the Data Fiduciary for them.
Contact for anything in this policy: contact@cadevstack.com.
2. What we collect
What you send us
When you request a free website review or a call, the form asks for:
- your firm's name, your name, a phone or WhatsApp number, and an email address
- optionally: your firm's current website, a preferred time for a call, and who referred you
With your submission we also record the page you sent it from and the country your connection came from (not your exact location), so we know where enquiries start.
If we contact your firm first
We sometimes write to CA firms we think our guides or review could help. For that, we use business contact details your firm has published itself, on its website, ICAI listings, or Google listings: typically a partner's name and the firm's email address or phone number. We use them only to introduce CADevStack, we stop as soon as you ask, and we delete them12 months after our last contact.
What the review looks at
The free review looks at information your firm has already published: your website, your Google Business Profile, and public search results. We don't access anything behind a login.
What we don't collect
- No accounts or passwords: there's nothing to sign up for.
- No payment details on this website.
- No precise location, contact lists, or information about your clients.
- No advertising, tracking, or analytics cookies.
3. How we use it
- To reply to you and arrange the review or call you asked for.
- To prepare your review, if you asked for one.
- To follow up about that request, such as sending the report or a proposal. We won't add you to a newsletter unless you ask us to.
- To introduce CADevStack to a firm we contact first, using only the business contact details the firm has published. At most three messages, and none after you ask us to stop.
- To keep the site secure, for example to block spam and abuse of the form.
We use your details on the basis of your consent, which you give by sending the form, and only for the purposes above. You can withdraw it at any time by emailing us; that doesn't affect anything we did before you withdrew it.
No selling, no advertising, no AI training. We don't sell your details, share them with advertisers, or use them to train AI models.
4. Cookies and similar technology
Our own website sets no cookies. The only ones you may see are:
| Name | Set by | Purpose | Lasts | Your choice |
|---|---|---|---|---|
__cf_bm | Cloudflare | Security: tells people from bots. Only set if our bot protection is triggered. | 30 minutes | Strictly necessary |
We don't use advertising cookies or cross-site tracking. Our fonts are served from our own website, so loading a page doesn't send your details to a font provider.
5. Who processes it for us
These companies handle your details on our behalf, only to provide their service to us:
| Provider | What it does for us | Its privacy policy |
|---|---|---|
| Cloudflare | Hosts the website, runs the form, protects the site from attacks | www.cloudflare.com |
| Resend | Delivers your form submission to our inbox as an email | resend.com |
| Google Workspace | Our email inbox, where your enquiry is received and answered | policies.google.com |
Our form doesn't store submissions in a database: each one is delivered as an email to our inbox. We use Google Search Console and Bing Webmaster Tools to see how our pages appear in search results; they don't receive anything about your visit from us.
We may also share details where the law requires it, for example in response to a lawful request from an authority.
6. How long we keep it
- Enquiries from people who don't become clients: deleted 12 months after our last contact with you, or sooner if you ask.
- Published business contacts we used to contact your firm first: deleted 12 months after our last contact, or straight away if you ask us to stop.
- Clients: for as long as we work together, then only as long as Indian tax and company law requires us to keep business records.
- Email delivery logs at Resend: kept for the period set by Resend's own policy, then deleted.
7. Your rights
Under the DPDP Act you can ask us to:
- tell you what details we hold about you and how we've used them
- correct, complete, or update them
- delete them, and stop using them (withdraw your consent)
- name someone to exercise these rights for you if you're unable to
Email contact@cadevstack.com. We reply within 30 days. If you're not satisfied with our answer, you can complain to the Data Protection Board of India.
Outside India? If you're in the EU or UK, you have similar rights under the GDPR, including to object to processing and to complain to your local data protection authority. If you're in California, we don't sell or share personal information as the CCPA defines it. Email us to use any of these rights.
8. Where your details are processed
Our providers run data centres in several countries, so your details may be processed outside India, including in the United States. The DPDP Act allows this unless the Government of India restricts transfers to a particular country, and we'll follow any such restriction.
9. How we protect it
- The whole site runs on HTTPS, so what you type is encrypted on its way to us.
- The form checks every submission and blocks spam before anything is sent.
- There are no website accounts, so there are no passwords of yours to leak.
- Only CADevStack staff can read the inbox where enquiries arrive.
If a breach ever affected your details, we'd tell you and the Data Protection Board of India, as the DPDP Act requires.
10. Children
This site is for businesses and isn't meant for anyone under 18. We don't knowingly collect children's details; if you think a child has sent us some, email us and we'll delete them.
11. Changes to this policy
When we change this policy, we update the date at the top of this page. If a change affects how we use details you've already sent us, we'll email you before it applies.
12. Contact
Tharwa Consulting Private Limited
17, 7th Main Road, Indiranagar II Stage, Bengaluru, Karnataka 560038, India
contact@cadevstack.com