Effective 12 October 2026 · Notice version 2026-10-12.1
Who is responsible?
Arshadify is operated by Arshad Ahamed in India. For questions, consent withdrawal or a privacy grievance, contact Arshad at arshad@arshadify.online or use Your privacy choices.
This notice covers this website’s forms and demo booking journey. Client campaign prospect data and the invite-only sales workspace require their own agreed processing scope, access and retention terms.
What we collect, and why
| Information | Purpose |
|---|---|
| Work email and company website | Review your product, prepare your requested buyer roadmap and reply by email. |
| Optional customer segment or message | Make the research relevant to your request. |
| Consent choice, wording, notice version, time and request reference | Record what you agreed to and handle your choices. |
| Privacy request email, request type and optional details | Verify and resolve your request or complaint. |
| Technical request and security information | Deliver the site and prevent abuse. Our form rate limiter uses short-lived keyed hashes and counts, not raw email addresses. |
Please do not submit passwords, payment details, identity documents, health information or confidential client records. This is a business service for adults aged 18 and over.
You choose to submit
The consent box is unchecked by default. Selecting it authorizes only the stated request and related follow-up. You may leave optional fields blank. We do not use form submission as consent to newsletters, promotional WhatsApp messages, automated calls or recording.
Withdraw your consent or stop follow-up at any time. Withdrawal does not undo earlier lawful processing. If you withdraw while a roadmap is being prepared, we may be unable to complete it. We do not charge for privacy requests or require an account.
Where your information goes
New roadmap and privacy form records are stored in a private Microsoft Azure Blob container in Central India, with encryption at rest and HTTPS in transit. The website uses a server-side identity that can write records but cannot read, list or delete stored submissions. Authorized operators handle requests through Azure access controls.
The website itself runs on Sites infrastructure using Cloudflare. Your submission passes through that infrastructure before reaching Azure. Hostinger Mail handles email correspondence. These providers may process operational data outside India; choosing an Indian storage region does not mean every part of the service stays in India.
Requests submitted before this notice may remain in the website’s previous database until reviewed or migrated. We do not treat historical submissions as if they accepted this notice.
We do not sell website form submissions or disclose them for cross-context behavioral advertising. Service providers receive data needed to operate the service; we may also disclose it when legally required. This statement is about website inquiry data, not a substitute for a client campaign agreement.
How long we keep it
New form records and their consent evidence are scheduled for deletion after 365 days from creation. Azure lifecycle deletion runs asynchronously. Deleted objects may remain recoverable for a further seven days before expiry. We can remove records earlier following a verified request, unless a legal obligation requires retention.
Email correspondence, calendar bookings and any signed client engagement are separate records. We review them when resolving your request and retain only what is needed for the relationship, disputes or applicable law. Rate-limit hashes expire after 24 hours and are cleared on subsequent form activity. Hosting providers manage their own operational logs.
For visitors in India
Our consent, purpose limitation and request-handling approach is designed around India’s Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025. Their provisions commence in phases; this notice does not claim that all provisions are already in force.
You may ask us for access information, correction, completion or erasure, withdraw consent, and raise a grievance. Statutory rights, including nomination and escalation to the Data Protection Board of India, apply subject to the relevant provisions coming into force and their legal conditions. Contact Arshad first so we can address your concern. You may request this notice in Hindi.
For visitors in the United States
US privacy obligations depend on the state, the business and the processing involved. This notice provides disclosures relevant to the California Online Privacy Protection Act (CalOPPA). Rights under the California Consumer Privacy Act, as amended by the CPRA, and other state laws apply where their coverage requirements are met.
Use Your privacy choices to request access, a copy, correction, deletion or to raise an appeal. We may need to verify identity or an authorized agent’s authority before disclosing records. We do not penalize you for exercising applicable privacy rights.
We do not run advertising trackers on these forms or sell/share their data for targeted advertising. A Global Privacy Control or Do Not Track signal does not change that practice. Cal.com and other provider pages may have their own technologies and notices.
Commercial email, if introduced, must follow the CAN-SPAM Act, including accurate sender information, a valid postal address and a working opt-out. This form does not enroll you in such email. You can stop request-related follow-up by replying to us or using the privacy request page.
Booking and your private demo
We load the Cal.com calendar only after you choose to load it. Cal.com receives technical information when loaded and the booking details you submit, and handles the booking with connected calendar and conferencing providers. Read Cal.com’s privacy policy before continuing.
Booking a demo is not permission to record or transcribe it. Recording, transcription and AI assistance require a separate explanation and any consent required before use. Website inquiry records are not used by this form workflow to train AI models.
Questions or changes
We post the effective date and version here when this notice changes. Material new uses require a new notice and consent where required. If you disagree with a privacy response, reply with “Privacy appeal” and Arshad will review it; you may also contact the regulator available under applicable law.