Anqulas
| If you are | Does this apply? |
|---|---|
| Visiting this website, or we emailed you | Yes — we decide what happens to your data |
| A named contact at a customer business | Yes |
| Buying a downloadable product such as the EAA Compliance Kit | Yes — see 2.5 |
| Using a VisionOS portal your supplier gave you | No — they control that data. Ask them for their privacy notice. |
The important distinction: when a design studio or contractor runs VisionOS, they are the Data Fiduciary for everything inside it. We only act on their instructions under a Data Processing Agreement. If you want your data in their portal corrected or deleted, ask them, not us — though you may contact us and we will pass it on.
We are Satyam Sagar, trading as Anqulas, a sole proprietor based in India. We build and install VisionOS, business software licensed to other businesses, and sell downloadable compliance tools such as the EAA Compliance Kit.
For anything in this notice: privacy@anqulas.com.
| Data | Why | Basis |
|---|---|---|
| Pages viewed, approximate location, browser type | Understanding whether the site works | Legitimate use / legitimate interests |
| Server logs including IP address | Security, abuse prevention, legal obligation | Legal obligation and legitimate interests |
We do not use advertising trackers or third-party analytics profiling.
If we send you a business enquiry, we hold your business contact details — usually a role address such as info@ or newbusiness@, occasionally a named business address published on your own website — along with your company name, sector and public information about your work.
Where it came from: your own published website, a public statutory register such as Companies House, a professional networking profile, or an industry directory. We do not buy contact lists, and we do not harvest addresses in bulk.
Basis: our legitimate interest in offering a relevant business product, weighed against your interests.
You can stop it in one word. Reply “no” or “unsubscribe” to any message and we remove you permanently. We keep a minimal suppression record so that the removal actually sticks.
Names, business contact details, job titles, billing details, GST or tax registration, contract and invoice records, support correspondence.
Basis: performance of a contract, and legal obligation for tax and accounting records.
If you open the public demo we hold the account details you enter and basic usage information. Do not put real personal data into the demo. It is for evaluation only and is periodically reset.
Payments for the EAA Compliance Kit are handled by Dodo Payments, which acts as the merchant of record: it takes the payment, handles tax and sends the download. Your card or bank details go to Dodo Payments and never reach us. Dodo Payments’ own privacy policy covers what it does with your data.
From Dodo Payments we receive your name, email address, billing country, what you bought, the amount and tax, and the order ID. We use these to deliver the product, answer support requests, process refunds, and keep the tax and accounting records the law requires.
The kit itself sends us nothing. Its tools run entirely in your browser. Nothing you type into them is uploaded to us or anyone else; saved checklist ticks stay in your own browser.
Basis: performance of a contract, and legal obligation for tax and accounting records.
Only these, and only as needed:
We are in India and process data there and in our providers’ regions. Some providers operate outside India.
For personal data reaching us from the EEA or UK: India has no adequacy decision, so we rely on the EU Standard Contractual Clauses and, for UK data, the UK International Data Transfer Addendum. A copy of the safeguards is available on request.
| Data | Retention |
|---|---|
| Website server logs | 180 days, as required by Indian law |
| Prospect contact details | Until you object, or 24 months without engagement |
| Suppression list (“do not contact”) | Indefinitely — this is what makes removal permanent |
| Customer contract records | Duration of contract + 8 years (tax and limitation) |
| Downloadable product purchase records | 8 years (tax and limitation) |
| Support correspondence | 3 years after the engagement ends |
| Demo accounts | Until the next demo reset |
Under India’s DPDP Act 2023 you may: access a summary of your personal data and who it has been shared with; have it corrected, completed or updated; have it erased; nominate someone to act for you if you die or become incapacitated; and raise a grievance.
Under the EU/UK GDPR, if it applies to you, you may additionally: object to processing based on legitimate interests; restrict processing; receive your data in a portable format; and complain to your supervisory authority.
To exercise any of these, email privacy@anqulas.com. We respond within 30 days, and will ask for enough information to be confident who you are. Exercising a right costs nothing and we will not treat you differently for it.
As required by Indian law:
Satyam Sagar
privacy@anqulas.com
Acknowledgement within 48 hours. Substantive response within 30 days.
If you are not satisfied, you may complain to the Data Protection Board of India, or to your own supervisory authority if you are in the EU or UK.
In short: encryption in transit and at rest, hashed passwords, multi-factor authentication, tenant isolation, append-only audit logging, and backups. Our full security policy is available on request.
No system is perfectly secure. If a breach is likely to cause you significant harm we will tell you and the relevant authority, within the timeframes the law requires — for India, that includes reporting qualifying cyber incidents to CERT-In within six hours.
We use only what the site needs to function and to keep you signed in. No advertising or cross-site tracking cookies. You can block cookies in your browser; sign-in will stop working if you do.
We will post material changes here with a new date, and tell customers directly at least 30 days before they take effect.