Privacy Policy

This policy is issued by ANGINN TECHNOLOGIES, a proprietorship of MOHD ELYAS KHATAL KOTHIWALE, registered in Maharashtra, India under GSTIN 27BWQPK2888D2Z0, with its registered place of business at Room No. 1, Waman Master Wadi, Nityanand Nagar, Nr Sai Baba Mandir, Ghatkopar West, Mumbai, Mumbai Suburban, Maharashtra, 400086.

Throughout this policy, "Anginn" means that registered business. Anginn operates the website at angineer.in and develops the software product Anginn OS. Privacy enquiries and requests should be sent to contact@angineer.in.

This policy covers two distinct situations, and Anginn's responsibilities differ between them.

The website has one form: the contact form. It collects the name, email address and message text that the sender types in, and nothing else. There is no account system, no login and no user profile on this website.

As with any website, the servers that deliver angineer.in process technical request data — including IP address, browser type and the page requested — as part of delivering the page and keeping the site available. The IP address of a submission is also held in memory for sixty seconds and used only to rate-limit repeated form submissions from the same address. It is not written to a database and is not retained after that window.

The website sets no advertising or tracking cookies, runs no analytics product, and carries no third-party tracking pixels or advertising tags.

Contact form details are collected for one purpose: to read and reply to the enquiry, and to carry on any correspondence that follows from it. Technical request data is processed for the legitimate interest of delivering, securing and maintaining the website, including preventing automated abuse of the contact form.

Personal data collected through this website is not used for advertising, is not used to build profiles, and is never sold, rented or traded.

Anginn uses a small number of service providers to run the website. They process data only in order to provide their service to Anginn.

Contact form submissions are not written to any database. They exist as emails in Anginn's mailbox. They are kept for as long as needed to handle the enquiry and any engagement that results from it, and in any case are deleted within 24 months of the last correspondence, unless a longer period is required for tax or legal record-keeping.

Website hosting and email records are held on infrastructure operated by the providers named in section 5, which may store and process data outside India. Where personal data collected through this website leaves India, it does so only through those providers and only for the purposes described above.

Anginn OS is salon and spa management software. It records appointments, bills, inventory and client records for the salon that runs it.

Each salon runs its own instance of Anginn OS on its own infrastructure and holds its own data. Anginn does not operate a central database of salon customers, does not receive copies of salon customer records, and does not have standing access to any salon's instance. In data protection terms, the salon determines what customer data it collects and how it is used; Anginn is the supplier of the software.

This means that if you are a customer of a salon that uses Anginn OS and you want to know what data is held about you, or want it corrected or deleted, the salon holds that data and is the party who can act on the request. Anginn cannot look up, retrieve or delete a salon's customer records on that salon's behalf, because Anginn does not hold them. If you contact Anginn about such a request, Anginn will tell you so and, where it can, point you to the salon.

Anginn OS can send transactional WhatsApp messages to a salon's own customers. This section describes exactly how that works, because it is the part of the product that involves the most personal data.

The messages are sent from the salon's own WhatsApp Business number, which the salon connects to its own instance. They are not sent from a number belonging to Anginn, and Anginn does not send messages on its own behalf to salon customers.

The messages are transactional and relate to a transaction the customer has already entered into with that salon:

A recipient can stop receiving these messages at any time. They can reply to the conversation asking the salon to stop, tell the salon directly at the time of booking or at any point afterwards, or use WhatsApp's own controls to block or report the number. The salon is required to stop sending to a customer who has opted out.

Anginn OS sends only approved message templates through the WhatsApp Business Platform, and only to customers of the salon that operates the number. It is not used to send marketing broadcasts to purchased or scraped lists.

Message content and recipient numbers stay within the salon's own instance and are transmitted to the recipient through the WhatsApp Business Platform. Anginn does not read, store or receive a copy of the message content or the recipient lists. Messages sent over WhatsApp are also processed by WhatsApp under its own terms and privacy policy.

To ask what personal data Anginn holds about you, to have it corrected, or to have it deleted, email contact@angineer.in from the address you contacted Anginn from, or write to the registered address at the foot of this page, stating what you are asking for. Anginn will respond within 30 days.

For data held by a salon that uses Anginn OS — including anything in that salon's appointment or client records — the request must go to that salon, for the reason given in section 7.

There is no charge for making a request.

The website is served over HTTPS and sends a content security policy and related protective headers with every response. The contact form validates and escapes what is submitted and rate-limits repeated submissions. Because no personal data from the website is stored in a database, the data held is limited to email correspondence in a mailbox protected by the provider's account security.

No system is perfectly secure. Anginn does not ask for, and does not want, payment card details, passwords or government identification numbers through this website or by email.

This website and Anginn OS are intended for businesses and the adults who run them. Anginn does not knowingly collect personal data from children through this website.

India's Digital Personal Data Protection Act, 2023 gives you rights over personal data about you. Where Anginn decides how and why your data is processed — which, as section 2 explains, means the website and your dealings directly with Anginn — you may ask Anginn to do any of the following, and Anginn will act on it.

If you have a complaint about how your personal data has been handled, or about anything on this website, it goes to the Grievance Officer. This contact is published in accordance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the Digital Personal Data Protection Act, 2023.

Grievance Officer: MOHD ELYAS KHATAL KOTHIWALE. Write to contact@angineer.in with "Grievance" in the subject line, or by post to Room No. 1, Waman Master Wadi, Nityanand Nagar, Nr Sai Baba Mandir, Ghatkopar West, Mumbai, Mumbai Suburban, Maharashtra, 400086.

Anginn will acknowledge a complaint within 24 hours of receiving it and will resolve it within 15 days. If a complaint cannot be resolved in that time, Anginn will say so, explain why, and give the date by which it will be resolved.

This is a proprietorship rather than a large company, and the Grievance Officer is the proprietor. A complaint reaches the person who is answerable for the software, not a queue.

Anginn is established in India and this policy is written against Indian law. Anginn OS is sold to businesses outside India, and this website is read from anywhere, so the following applies where the law of your own country also applies.

Where the UK GDPR or the EU GDPR applies to Anginn's own processing, the lawful bases Anginn relies on are: your consent, where you submitted the contact form; legitimate interests, in replying to an enquiry, keeping this website available and preventing abuse of it; and legal obligation, where Indian tax or company law requires a record to be kept.

Where those regulations apply you also have the rights to access, rectification, erasure, restriction, objection and portability, and the right to complain to your own supervisory authority. Anginn will honour those requests on the same terms as the rights in the section above.

Because Anginn is in India, personal data you send to Anginn — a contact-form message, an email — is processed in India. Where Anginn OS is concerned, the position is different and usually better: the software runs on infrastructure the salon itself chose, in the region the salon itself chose, and Anginn does not receive a copy of that data at all. A salon in the European Union can therefore keep its customer records inside the European Union, and Anginn is not a recipient of them.

Anginn OS lets a salon's staff sign in with a Google account rather than with a password the salon has to manage. If your salon uses that option, Anginn OS receives from Google only your name, your email address and your profile picture, and only after you have approved it on Google's own consent screen.

That information is used for one purpose: to identify you as a member of staff so the software can sign you in and show you the part of the salon that is yours. It is written into your salon's own instance, and Anginn does not receive a copy of it.

Anginn OS's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. That information is never sold, never transferred to anybody else except as needed to sign you in, never used for advertising, and never read by a human except with your explicit consent or where the law requires it.

You can withdraw that access at any time from your Google account's security settings, and you can ask your salon to switch you to a password instead.

If a personal data breach occurs in a system Anginn controls, Anginn will notify the Data Protection Board of India and every affected person, without undue delay and in the form the Act requires, and will say plainly what happened, what data was involved and what is being done about it.

Where the breach is in a salon's own instance of Anginn OS, that salon holds the data and the obligation to notify is the salon's. Anginn will support a salon in meeting it, and will tell a salon promptly if Anginn becomes aware of a vulnerability that affects it.

If you believe you have found a security vulnerability in this website or in Anginn OS, please report it to contact@angineer.in rather than disclosing it publicly. Reports are welcomed and will be acknowledged.

If this policy changes, the revised version will be published at this URL and the date below will be updated. Material changes to how personal data is handled will be reflected here before the change takes effect.