Privacy Policy

1. Introduction

This Privacy Policy applies to Baxtage (“Baxtage”, “we”, “us” or “our”), an AI-native software studio based in Mumbai, India. Baxtage operates as a sole proprietorship while Baxtage Private Limited is prepared for incorporation. There is no CIN, no GST registration and no company bank account. This policy governs the website at thebaxtage.com and any related pages, forms and communications (together, the “Site”).

We act as the Data Fiduciary for the personal data we collect through the Site. By using the Site you agree to the practices described here. If you do not agree, please discontinue use of the Site.

2. Information we collect

We aim to collect only what we need. Depending on how you interact with us, this may include:

• Contact and enquiry data: your name, email address, company and the contents of any message you send us through a contact link or by email.
• Communications: records of correspondence and any project or proposal details you choose to share.
• Usage and analytics data: pages viewed, referring links, approximate region, device and browser type, and similar diagnostic information, collected in aggregate to understand how the Site is used.
• Cookies and similar technologies: small files and identifiers used to keep the Site working and to measure traffic. See clause 5.

We do not intentionally collect sensitive personal data, and we ask that you not send it to us through the Site.

3. How we use your information

We process personal data to:

• respond to enquiries and provide the information or services you request;
• operate, maintain, secure and improve the Site;
• communicate about engagements, proposals and project work;
• understand usage trends through aggregated analytics; and
• comply with legal, accounting and regulatory obligations.

We do not sell your personal data, and we do not use it for automated decision-making that produces legal effects about you.

4. Legal basis and your rights

We process personal data in accordance with India’s Digital Personal Data Protection Act, 2023 (DPDP Act). We rely on your consent, given when you contact us, and on the legitimate uses permitted under the Act, including responding to a request you have voluntarily made and meeting our legal obligations.

As a Data Principal, you have the right to:

• access a summary of the personal data we process about you;
• request correction, completion or updating of inaccurate data;
• request erasure of data we no longer need to retain;
• withdraw consent at any time, as easily as it was given;
• nominate another person to exercise your rights in the event of death or incapacity; and
• seek grievance redressal and escalate to the Data Protection Board of India if your concern is not resolved.

To exercise any of these rights, write to the address given in clause 11. We will respond within a reasonable period and as required by applicable law.

5. Cookies

The Site uses a minimal set of cookies and similar technologies that are necessary for it to function and to help us understand aggregate usage. Most browsers let you refuse or delete cookies through their settings; doing so may affect parts of the Site. Where required, we will ask for your consent before setting non-essential cookies.

6. Third-party services

We use a small number of providers to operate the Site. These may include:

• Google Fonts: to render typography; your browser may request font files from Google’s servers;
• Website hosting and content delivery: to serve the Site reliably;
• Analytics: to measure aggregate traffic; and
• Email providers: to receive and respond to your messages.

These providers process data on our behalf under their own terms and privacy notices. We share only what is necessary for them to perform their service.

7. Data retention and security

We keep personal data only for as long as needed for the purposes set out above or as required by law, after which it is deleted or anonymised. We apply reasonable technical and organisational safeguards, including access controls and encryption in transit, to protect personal data against unauthorised access, loss or disclosure. No method of transmission over the internet is, however, completely secure.

8. Children

The Site is intended for a business audience and is not directed at children. We do not knowingly collect personal data from anyone under the age of 18. If you believe a child has provided us data, please contact us so we can delete it.

9. International transfers

Some of our service providers may process or store data outside India. Where this happens, we take steps to ensure that transfers comply with the DPDP Act and that your data continues to be handled with appropriate protection.

10. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or the law. The date at the top of this page shows when it was last revised. Material changes will be highlighted on this page.

11. Contact and grievance redressal

For any privacy question, request or grievance, write to aditya@thebaxtage.com or call +91 90821 79507. There is no separate grievance officer: Baxtage is a sole proprietorship, and the proprietor answers these directly.

Related: Terms of service.