Privacy notice.

BRK Ventures (OPC) Private Limited, trading as TvastrOps, 503, Balaji Arcade, Sri Raghavendra Nagar, Uppal, Hyderabad, Telangana 500039 (“TvastrOps”, “we”), decides how and why your personal data is processed. We are the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (“DPDP Act”), and the controller under the EU and UK GDPR where they apply.

Our Grievance Officer is Roshan Mani Rao R., reachable at privacy@tvastrops.com.

• Enquiries and call requests: your name, email address, phone number, company or site, the warehouse challenge you choose, your description and any extra context, and whether you agreed to be called.
• Downloads and tools (such as the Warehouse Capacity Self-Check and the VSM Builder): your name, email address, company, phone number if you give it, and what you entered in the tool.
• How you found us: the page you sent the form from, the first page you visited, the site that referred you, and campaign tags in the link (such as utm_source), so we can see why you reached out.
• Website use: pages visited, device and browser type and approximate location, through Google Analytics and Vercel Web Analytics.
• Security: our hosting provider checks each form submission for bots, and we keep a one-way coded form of email addresses to limit repeated submissions.

• To reply to your enquiry, send what you downloaded, and talk to you about the work you asked about. Your consent, given when you submit a form, is the basis for this; you can withdraw it at any time.
• If you agreed to be called: for one of our engineers to phone you about your enquiry.
• To prepare for conversations with you: our team, helped by AI, looks up publicly available professional information about you and your company (such as your role, company news and job postings). We do not look at your personal life, family or personal social media.
• To understand how the website is used and improve it.
• To keep the website and our systems secure and prevent abuse.

• Vercel (website hosting, bot checks and web analytics).
• Supabase (the database where form submissions are stored).
• Microsoft 365 (our email, including alerts to our team about new enquiries).
• Google Analytics (website use).
• Our CRM, which stores enquiries for our team, and the AI providers it uses to read business cards, research public information and draft emails: OpenAI, Google (Gemini), Groq and OpenRouter.

We share personal data only with service providers that process it for us, under their terms:

Some of these providers store or process data outside India, including in the United States and South Korea. We transfer data only to countries the Government of India has not restricted under the DPDP Act, and for GDPR visitors with appropriate safeguards such as standard contractual clauses.

• Enquiries and downloads from people who do not become clients: 2 years from our last contact, then deleted.
• Clients: for as long as we work together, then as long as the law requires us to keep business records.
• Analytics data: as set by Google Analytics and Vercel, which keep it in aggregate or for a limited period.
• Security records: only as long as needed to stop abuse.

Google Analytics sets cookies to tell visits apart, but only after you click Accept in the cookie banner; until then it collects only cookieless, aggregate signals. We remember your choice in your browser; clear your site data to choose again. Vercel Web Analytics does not use cookies. We use your browser's session storage to remember how you arrived for the length of your visit. You can block or delete cookies in your browser settings; the website still works without them.

• Ask what personal data we hold about you and how we use it.
• Ask us to correct, complete, update or delete it.
• Withdraw your consent at any time. This does not affect what we did before.
• Nominate someone to exercise your rights if you die or become unable to.
• Complain to our Grievance Officer. If you are not satisfied with our reply, you can complain to the Data Protection Board of India. If the GDPR applies to you, you can also object to processing, ask for a copy in a portable form, and complain to your data protection authority.

Write to privacy@tvastrops.com. We reply within 30 days.

Data is encrypted in transit, stored with providers that encrypt it at rest, and visible only to our team members who need it. If a breach affects your data, we will tell you and the Data Protection Board of India as the DPDP Act requires.

The website is for businesses and is not meant for anyone under 18. We do not knowingly collect their data.

We will update this page when our practices change, and show the date of the latest version at the top.