Back to Home
Data Security & Confidentiality Policy

Privacy Policy

Effective Date: July 20, 2026 · Version 2.0

1. Information We Collect

Clients by Atharv (“Platform”, “we”, “us”) collects information necessary to deliver software development, design, and digital consulting services to our clients (“Client”, “you”).

  • Account Credentials: Full name, professional email address, contact phone number, and encrypted password hashes.
  • Project Requirements & Questionnaire Data: Responses to discovery questionnaires, business specifications, target milestones, and operational details submitted during onboarding.
  • Uploaded Assets & Files: Documents, brand guidelines, product catalogues, design mockups, and technical files uploaded to your private workspace.
  • Communication & Support Logs: Direct messages, support tickets, meeting notes, and approval records exchanged within the platform.
  • Technical Metadata: Session tokens, IP addresses, browser user agent, and security audit logs for authentication verification.

2. Tenant Isolation & Data Security Architecture

We enforce strict multi-tenant data isolation at both application and database layers:

  • Strict Tenant-ID Scoping: Every database table and file storage object contains an explicit tenant_id binding.
  • Private Access Boundary: Internal client notes, administrative notes, and other client workspaces are logically segregated and completely invisible to unauthorized users.
  • Encryption: Data in transit is protected via TLS 1.3/HTTPS, and database credentials/passwords are hashed using BCrypt salt algorithms.

3. How We Use Your Information

Information collected within your workspace is strictly used to:

  • Scope, design, build, and deploy your custom software or website application.
  • Facilitate milestone approvals, invoice generation, and project milestone tracking.
  • Send critical project notifications, meeting invitations, and deliverable review alerts.
  • Maintain platform security, prevent unauthorized access, and conduct security audits.

We DO NOT sell, rent, trade, or monetize client data or project materials under any circumstances.

4. Third-Party Sub-processors & Services

To operate the platform, we utilize trusted infrastructure sub-processors adhering to global security standards:

Sub-processorPurposeData Handled
Vercel Inc.Serverless Application HostingHTTP Requests & Web Traffic
SQLite / Drizzle ORMDatabase InfrastructureWorkspace Data & Metadata
Resend / SMTPTransactional EmailsInvite Notifications & Alerts

5. Data Retention & Client Export Rights

Your workspace data is retained for the duration of your active project engagement and ongoing platform maintenance agreement.

Upon project completion or request, Clients have full rights to request a complete archive export of all uploaded files, database contents, and project deliverables. Upon account termination, workspace data will be permanently scrubbed from active storage after a 30-day grace period.

6. Your Privacy Rights

Depending on your location, you have rights regarding your personal information, including:

  • Right to Access: Request a copy of the personal information we hold about you.
  • Right to Rectification: Request correction of inaccurate account details.
  • Right to Erasure: Request deletion of personal data when no longer required for contractual fulfillment.

7. Contact & Data Protection Officer

If you have any questions regarding this Privacy Policy or wish to exercise your data rights, contact Atharv Mantri directly:

Atharv MantriData Protection Lead & FounderEmail: work@atharv.meWebsite: clients.atharv.me