Your trust matters to us. This page explains in plain language what personal data we collect when you use our website, why we collect it, who sees it, and how you stay in control.
Contents
1. Who we are and what this policy covers
This Privacy Policy explains how Circlewise Consulting (“Circlewise”, “we”, “us”) collects, uses, stores and protects your personal data when you use circlewise.in and its connected pages: the main website, blog, Startup Compass and other free tools, member login, Creator Rhythm and CARVE Report pages, the report order form and the digital business card (together, the “Site”).
We handle personal data in line with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Information Technology Act, 2000 and the rules made under it. For the purposes of the DPDP Act, Circlewise is the Data Fiduciary for the personal data described here.
2. Personal data we collect
When you create an account or log in
- Your name and email address.
- A record of your consent: the version of the Terms and this Policy you agreed to, the date, and whether you opted in to receive our insights by email.
We do not use passwords. You log in with a one-time code sent to your email address, so we never hold a password for you.
When you request a CARVE Report
- Your name, email address and phone number.
- Your content niche, the platforms you choose, and the public handle and follower count for each platform.
- The report tier and fee you select, and any other information you choose to give us.
We only need public profile information. We never ask for the passwords to your social media accounts, and you should never send them to us.
When you contact us
If you email, phone or message us, we keep the contents of that communication and your contact details so that we can respond.
Information that stays on your device
The ideas and scores you enter into Startup Compass are stored only in your own browser. They are not sent to us or to any server.
Technical information
Like most websites, our hosting provider may record technical details such as your IP address, browser type and the pages requested in server logs, for security and reliability. We do not run advertising trackers, analytics or tracking pixels on the Site as of the effective date above. If we add analytics later, we will update this Policy first.
3. Why we use your data
- To run your account: to identify you, send login codes, and keep you logged in on your device.
- To provide what you ask for: to process and deliver CARVE Reports, give you access to free tools, and reply to your enquiries.
- To send service messages: login codes, order confirmations and report delivery.
- To send our insights: only if you ticked the separate, optional box. You can withdraw this at any time.
- To keep the Site secure and to prevent misuse and fraud.
- To meet legal obligations, such as tax and accounting record-keeping.
We rely on your consent for your account and for marketing, and on the purposes the law recognises as legitimate uses (for example, complying with the law) where they apply. We do not sell your personal data.
4. Who we share your data with
We share personal data only with service providers who help us run the Site, and only as far as needed to do so:
- SuperTokens — provides our login service, where member accounts and the details you give us when you log in are stored.
- Our server hosting provider — runs the server that handles logins.
- Our email delivery provider — sends login codes and service emails on our behalf.
- Our web hosting provider — hosts the Site.
- Google Fonts — when a page loads, your browser requests fonts from Google, which means Google receives your IP address.
- Payment service providers — if and when you pay a fee online, your payment is handled by the provider. We will tell you who it is at the time and we do not see or store your full card details.
- Advisers and authorities — our professional advisers, and government or regulatory bodies where the law requires us to disclose information.
These providers act on our instructions and are expected to protect your data. Our login service is provided by SuperTokens and our login server runs with a cloud hosting provider. Depending on the regions we select for them, your data may be stored and processed on servers outside India.
5. Cookies and browser storage
We do not use advertising or tracking cookies. The Site uses your browser’s local storage for the following purposes:
| Item | Purpose | Kept until |
|---|---|---|
| Login session cookies (including sAccessToken and sRefreshToken), set by our login server | Keep you logged in on this device. They are HttpOnly, so scripts on the page cannot read them. | You log out or the session expires |
| Session markers kept by the login library | Let the website tell whether you are logged in so it can refresh your session | You log out or clear your browser data |
| cw_last, cw_terms_ok, cw_profile | Pre-fill your name and email, remember that you accepted the current Terms on this device, and show your name in the menu | You clear your browser data |
| Startup Compass entries | Saves your ideas and scores so you can come back to them | You clear them or your browser data |
You can clear this storage at any time from your browser settings. Doing so will log you out.
6. How long we keep your data
- Account data is kept while your account is active and is deleted when you delete your account or ask us to.
- Order records are kept for the period required under Indian tax and accounting laws.
- Enquiries are kept for as long as needed to deal with them and any follow-up.
- Login codes expire within minutes and are not kept once used.
When we no longer need personal data for the purpose it was collected, and the law does not require us to keep it, we erase it.
7. How we protect your data
- The Site is served over HTTPS, so data travelling between your browser and us is encrypted.
- Login sessions use HttpOnly cookies, and our server only lets a logged-in member read or change their own record.
- We do not store passwords, because we do not use them.
- Access to our systems is limited to the people who need it.
No online service can be completely secure. If a personal data breach affects you, we will notify you and the authorities as the law requires.
8. Your rights and choices
Under the DPDP Act you have the right to:
- ask for a summary of the personal data we hold about you and how we use it;
- ask us to correct, complete or update your data;
- ask us to erase your data;
- withdraw your consent at any time (withdrawing consent does not affect what we did before you withdrew it);
- have your grievances addressed (see section 12); and
- nominate another person to exercise these rights on your behalf if you die or become unable to do so.
The quickest way to delete your data is the Delete my account option in the member area of the Site, which removes your account and member record. You can also email support@circlewise.in from the address on your account. We aim to respond within 30 days. Some order records may need to be kept for the period required by law.
9. Children
The Site is for businesses and adults. It is not directed at anyone under 18 and we do not knowingly collect personal data from children. If you believe a child has given us personal data, please contact us and we will delete it.
10. Transfers outside India
Some of our service providers may process personal data outside India. We transfer data only to countries and providers permitted under the DPDP Act, and we expect them to protect it appropriately.
11. Changes to this policy
We may update this Policy from time to time. The effective date and version at the top show when it last changed. If we make a material change, we will ask you to agree to the updated version the next time you log in.
12. Contact and grievance officer
If you have a question, a request or a complaint about your personal data, contact our Grievance Officer. We will acknowledge your message promptly and aim to resolve it within 30 days.
Grievance Officer: Ravi Parwan, Founder and Principal Consultant
Circlewise Consulting
Faridabad, Haryana, India
Email: support@circlewise.in
Phone: +91 97118 11403
If we have not resolved your complaint, you may approach the Data Protection Board of India as provided under the DPDP Act.