Legal
Privacy Policy
Last updated October 11, 2026
- We collect very littleContact details you send us, and standard technical logs.
- Your data does not train our modelsWe do not use client data to train or fine-tune models, unless a client asks us to in writing for their own dedicated model.
- We do not sell your dataNo sale, no rental, no marketing lists.
- You can have it deletedWrite to us and we will act within 30 days.
This policy explains how YatiSphere Technologies Private Limited (“we”, “us”, “our”) collects, uses and protects personal information when you use our website or engage our services. We are incorporated in India and offer our services to organizations in the United Kingdom, Europe, the United States, the Middle East and India. We collect only what we need to operate the website and work with clients. We do not sell personal data. We do not use client data to train or fine-tune models, unless a client asks us to in writing for their own dedicated model.
For the purposes of applicable data protection law, including India's Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and, where it applies to the people we deal with, the EU and UK General Data Protection Regulation (“GDPR”), YatiSphere Technologies Private Limited is the data controller for the information described in this policy.
Where we process personal data on behalf of a client as part of a delivery engagement, the client is the controller and we act as a processor on their documented instructions, under the terms of the engagement.
1. Information we collect
We may collect, store and use the following:
- Information you give us. Your name, email address, company, and anything you choose to include when you contact us or respond to us.
- Technical information. Information about your device and visit, including IP address, approximate location derived from it, browser type and version, operating system, pages viewed and referring URL.
- Correspondence. A record of our communications with you and your stated preferences.
We do not knowingly collect special category data, and we do not ask for it. Please do not send us sensitive personal information through the website.
Before you disclose to us the personal information of another person, you must have a lawful basis for doing so.
2. How we use it
We use personal information to:
- respond to your inquiry and correspond with you about it
- provide, deliver and support the services you have engaged us for
- issue statements and invoices, and collect payment
- operate, secure and improve our website
- send communications you have specifically asked to receive
- deal with complaints and inquiries
- prevent fraud and misuse, and keep our systems secure
- comply with our legal and regulatory obligations
We do not use client data to train machine-learning models. Client data stays within the boundary agreed in the engagement. Our wider approach to AI governance is set out in our Responsible AI statement.
We do not carry out behavioral advertising, and we do not make decisions producing legal or similarly significant effects about you by automated means alone.
3. Legal basis for processing
Where the GDPR applies, we rely on:
- Legitimate interests — responding to business inquiries, operating and securing our website, and managing our client relationships.
- Performance of a contract — delivering services and administering the engagement.
- Consent — where you have asked to receive particular communications. You may withdraw consent at any time.
- Legal obligation — where we must retain or disclose information by law.
Where the DPDP Act applies, we process personal data on the basis of your consent or for the legitimate uses permitted under that Act.
4. How long we keep it
We keep personal information only for as long as it is needed for the purposes described in this policy, or for as long as the law requires.
- Inquiries that do not lead to an engagement — up to 24 months from our last contact, so we can pick up a conversation you return to.
- Client records — for the duration of the engagement and for as long afterwards as we need them to establish, exercise or defend legal claims.
- Invoicing and tax records — for the period required by applicable tax and company law.
- Website logs — retained by our hosting provider for a short period for security and diagnostics.
When information is no longer required, we delete it or otherwise dispose of it securely.
6. International transfers
We are incorporated in India and offer our services internationally. Information we collect may be stored and processed in, and transferred between, the countries in which we and our service providers operate, so that we can use it as described in this policy.
Where personal data protected by the GDPR is transferred to a country without an adequacy decision, we put an appropriate safeguard in place before the transfer, such as the European Commission's standard contractual clauses. You may ask us for a copy of the safeguard we rely on.
7. Security
We take reasonable technical and organizational measures to protect personal information against loss, misuse, unauthorized access, alteration and disclosure. These include encryption of data in transit, access controls on a need-to-know basis, and logging.
No method of transmission over the internet or method of electronic storage is completely secure. While we work to protect your information, we cannot guarantee absolute security, and you send information to us at your own risk.
If a personal data breach occurs that is likely to result in a risk to your rights, we will notify you and the relevant supervisory authority as required by applicable law.
9. Your rights
Depending on where you are, you may have the following rights over your personal information:
- Access — to be told whether we process your personal information and to receive a copy of it.
- Correction — to have inaccurate or incomplete information corrected.
- Erasure — to have information deleted where it is no longer needed, where you withdraw consent, or where it was processed unlawfully.
- Restriction — to limit how we process your information while a question about it is resolved.
- Portability — to receive information you gave us in a structured, commonly used, machine-readable format.
- Objection — to object to processing based on our legitimate interests, and at any time to direct marketing.
- Withdraw consent — at any time, as easily as you gave it, without affecting processing already carried out.
We may decline a request where the law permits, for example where we must keep the information to comply with a legal obligation or to establish or defend a legal claim. We will explain our reasons.
To exercise any of these rights, email privacy@yatisphere.com. We may ask for information to verify your identity before we act. We respond within 30 days, and will tell you if we need longer. Exercising your rights is free; if a request is manifestly unfounded or excessive we may charge a reasonable fee or decline it, and will explain why.
10. Rights under India's DPDP Act
If you are in India, the Digital Personal Data Protection Act, 2023 gives you the right to:
- know what personal data we hold about you and how we use it
- have inaccurate or incomplete data corrected, and have data erased when it is no longer needed for the purpose it was collected for
- withdraw your consent at any time, as easily as you gave it
- nominate another person to exercise your rights if you are unable to
- raise a grievance with us and receive a response
To exercise these rights or raise a grievance, write to privacy@yatisphere.com. We aim to respond within 7 working days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
If you are in the EEA or the UK, you may also complain to your local supervisory authority.
11. Changes to this policy
We keep this policy under review. Changes take effect when posted to this page, and the date at the top records when it was last updated. If we make a material change, we will give prominent notice on the website or contact you directly where we hold your details.
12. Contact us
For any question about this policy, or about information we hold about you, email privacy@yatisphere.com.
YatiSphere Technologies Private Limited
Registered in India
CIN: U62013UP2025PTC239315
Registered office: Sector 100, Noida, Uttar Pradesh 201301, India
General inquiries: hello@yatisphere.com