This policy explains what data Sarthy (BIZCIRCLE TECHNOLOGIES LTD, UK company registration #15928217) collects, why, and what we do with it. We are the data controller for the data described below. Sarthy is built to be self-hosted, which means most of your data never reaches us. This policy covers only the data that does.
1. What we collect
When you interact with sarthy.io or with us directly, we collect:
- Demo enquiries. Your work email, company name, industry, team size, deployment preference, and any notes you submit through the enquiry form.
- Account information. If you become a customer, your billing details (handled by our payment processors Stripe and Razorpay; we do not store card numbers).
- Site analytics. Pseudonymous data about how people use sarthy.io (pages visited, referrer, broad geographic region). We use Plausible or a similar privacy-respecting analytics tool. No cross-site tracking, no advertising IDs, no cookies for analytics where consent has not been given.
- Cookies. See our cookie policy for the specific cookies in use.
- Support emails. Whatever you choose to send us when asking for help.
2. What we don't collect
Because Sarthy is self-hosted, we do not collect the content you put into Sarthy itself:
- Your knowledge base, wiki, tasks, comments, meeting notes, chat, uploads, audit log, or any other Sarthy content stays on your server. It never reaches us.
- Your LLM calls go directly from your Sarthy install to your LLM provider (Anthropic, OpenAI). We never see them.
- Your team's identities (other than the person who books the demo) are not visible to us unless you choose to share them.
3. Why we collect it
- Demo enquiries so we can reply and arrange your demo. Lawful basis: legitimate interest in responding to a direct enquiry from you (UK GDPR Art. 6(1)(f)) or consent if you ticked the opt-in box.
- Account information to provide the service you're paying for. Lawful basis: contract (UK GDPR Art. 6(1)(b)).
- Site analytics to improve the website. Lawful basis: legitimate interest, with privacy-respecting analytics that doesn't require consent. If we ever use anything more invasive, we'll ask consent first.
4. How long we keep it
- Demo enquiries that don't convert: 24 months, then deleted.
- Customer account data: for the duration of your subscription plus 7 years for financial records (UK statutory retention).
- Site analytics: 12 months, aggregated.
- Support emails: 36 months, unless you ask us to delete them sooner.
5. Who we share it with
We share data only with sub-processors strictly necessary to deliver the service:
- Stripe (payment processing, UK customers) and Razorpay (payment processing, India customers)
- Vercel (website hosting)
- Supabase (back-end infrastructure for sarthy.io)
- Resend (transactional email delivery)
We don't sell data. We don't share it with advertisers. We don't use it to train AI models.
6. Your rights
Under UK GDPR you have the right to:
- Ask what data we hold about you (access)
- Correct any data that's wrong (rectification)
- Ask us to delete your data (erasure)
- Object to processing or restrict it
- Receive your data in a portable format
- Complain to the Information Commissioner's Office (ICO) at ico.org.uk
Email privacy@sarthy.io to exercise any of these rights. We respond within 30 days, usually faster.
7. International transfers
Our sub-processors are based in the UK, EU, US, and India. Where data crosses borders, we rely on standard contractual clauses (SCCs) and the UK's adequacy regulations.
8. Changes to this policy
We'll update the "last updated" date at the top when this policy changes. Material changes will be announced by email to active customers.
9. Contact
Email privacy@sarthy.io for any privacy-related question. Postal address: BIZCIRCLE TECHNOLOGIES LTD, United Kingdom.