Legal

Privacy Policy

Last updated: June 13, 2026

Pashupatastram Private Limited ("Company", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website or engage our services.

1. Information We Collect

1.1 Information you provide directly

When you use our website or services, you may provide:

• Contact form: Name, email address, phone number, company name, and your message or enquiry.
• Job applications: Name, email address, phone number, employment type preference, cover note, and resume (PDF/DOC/DOCX, max 5 MB).
• Service engagements: Business financial data, tax records, payroll information, identity documents, and other data necessary to deliver accounting and compliance services.
• Communications: Emails, calls, or messages you send to us directly.

1.2 Information collected automatically

• Usage data: Pages visited, time spent on pages, referring URLs, browser type, and device type.
• IP address: Used for security, fraud prevention, and approximate geolocation.
• Cookies: Session cookies for website functionality and analytics cookies (see Section 7).

1.3 Information from third parties

We may receive information from third-party services such as Google Analytics (aggregated, anonymised usage data) and payment processors (transaction confirmations only — we do not store card details).

2. How We Use Your Information

We use the personal information we collect for the following purposes:

• Responding to enquiries: Processing contact form submissions and sending you a confirmation email.
• Recruitment: Reviewing job applications, contacting shortlisted candidates, and storing applications for future roles (with your consent).
• Service delivery: Providing software development, accounting, compliance, and related services as agreed.
• Statutory compliance: Fulfilling obligations under the Income Tax Act, GST Act, Companies Act, and other applicable laws.
• Communication: Sending service updates, invoices, and important notices.
• Website improvement: Analysing usage patterns to improve content and user experience.
• Security: Detecting and preventing fraud, unauthorised access, and other security threats.

3. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Consent: When you submit a contact form or job application, you consent to us processing your data for those specific purposes.
• Contractual necessity: Processing required to deliver services under a signed agreement.
• Legal obligation: Processing required by Indian tax, accounting, and corporate laws.
• Legitimate interests: Website analytics, security monitoring, and improving our services.

4. Data Storage & Security

4.1 Where data is stored

Your data is stored on secure servers provided by Supabase (database and file storage). Supabase infrastructure is hosted on AWS with data centres in the Asia Pacific (Mumbai) region, keeping your data within India wherever possible.

Uploaded resumes are stored in a private, non-public storage bucket. They are accessible only via temporary signed URLs (valid 7 days) generated by our server — never directly accessible via a public link.

4.2 Security measures

• All data transmitted between your browser and our servers is encrypted using TLS (HTTPS).
• Database access is controlled by Row Level Security (RLS) policies — public visitors cannot read or write to our database directly.
• Admin access to our database uses a separate service role key that is never exposed to the browser.
• Internal systems are protected by access controls and regular security reviews.

4.3 Data retention

• Contact enquiries: Retained for 2 years then deleted, unless you become a client.
• Job applications: Retained for 6 months. Unsuccessful candidates are notified before deletion. Shortlisted candidates may be retained longer with explicit consent.
• Client financial data: Retained for 8 years as required by the Income Tax Act and GST laws.
• Website analytics: Aggregated and anonymised — not linked to individuals.

5. Sharing Your Information

We share personal data only in the following limited circumstances:

• Service providers: Supabase (data storage), Google (Gmail for email notifications), Google Analytics (anonymised website usage). All are bound by appropriate data processing agreements.
• Government authorities: When required by Indian law, court order, or regulatory bodies such as the Income Tax Department, GST authorities, or MCA.
• Professional advisors: Lawyers or auditors where necessary and under strict confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale, your data may be transferred to the successor entity — you will be notified in advance via email.

6. Your Rights

Under the Digital Personal Data Protection Act, 2023, you have the following rights with respect to your personal data:

• Right to access: Request a copy of the personal data we hold about you.
• Right to correction: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your data, subject to our legal retention obligations.
• Right to withdraw consent: Withdraw consent for processing at any time (this does not affect processing already carried out).
• Right to grievance redressal: Lodge a complaint with our Grievance Officer (see Section 9).

To exercise any of these rights, email us at admin.pashupatastram@gmail.com with your name and the specific request. We will respond within 30 days.

7. Cookies

Our website uses the following types of cookies:

• Strictly necessary cookies: Required for the website to function (e.g. session management). Cannot be disabled.
• Analytics cookies: Google Analytics collects anonymised data about how visitors use the website (pages visited, time on site, traffic source). No personally identifiable information is collected. You can opt out via the Google Analytics Opt-out Browser Add-on.

You can control cookies through your browser settings. Disabling analytics cookies will not affect website functionality.

8. Children's Privacy

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted information to us, please contact us immediately and we will delete it promptly.

9. Grievance Officer

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, we have appointed a Grievance Officer to address privacy-related concerns:

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The updated policy will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically.

For significant changes that affect how we use your data, we will notify existing clients by email prior to the change taking effect.