Skip to main content
Launch My Business

Legal

Privacy Policy

This policy explains what personal data Launch My Business collects when you use this website, why we collect it, how we protect it, and the rights you have over it.

Last updated

1. Who we are

This website is operated by Launch My Business ([PLACEHOLDER: confirm exact registered legal entity name]), a chartered accountancy practice (the "firm", "we", "us").

Our registered office is at [PLACEHOLDER: registered office address]. For privacy queries you can reach us at hello@launchmybusiness.in or +91 98765 43210.

For the purposes of India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"), we act as the Data Fiduciary for the personal data described below, and you are the Data Principal.

2. What personal data we collect

We only collect the data you choose to give us. You can read this site, browse our services, and use the contact page without an account, and the AI advisor answers your first question in full without one. Continuing that conversation requires a short registration: your email address, confirmed by a one-time code we send you. We never ask you to set a password, so we never hold one.

Depending on how you reach us, we may collect:

  • Your name.
  • Your email address — to send your one-time code and to respond to your enquiry.
  • Your phone number — asked for only when you want us to call you about a specific service. Registration does not ask for it.
  • Your message and service interest— the details of what you need help with and the service package you're interested in.
  • Your consent, and the date and time you gave it — the DPDP Act expects an auditable record of when consent was given, so we store the moment along with the fact.
  • Chat transcript and a short summary of your need — only where you have given consent. If you do not consent, your conversation with the AI advisor is not stored against your enquiry.

A one-time code is never stored as a code. We keep only a hashed form of it, it expires within minutes, it works once, and a small number of wrong attempts invalidates it.

How we collect it

  • Through the contact form, which needs no account.
  • When you register to continue a conversation with the AI advisor. Your registration is also your enquiry record with us — we do not ask you for the same details a second time.
  • When the advisor later asks whether you would like a chartered accountant to call you, and you give a number.

We do not knowingly collect sensitive personal data, and we ask that you do not share financial account numbers, passwords, or identity-document numbers (such as PAN or Aadhaar) through these forms or the chat. Where transcripts are stored, we apply automated redaction to obvious identifiers as an added safeguard.

3. Why we collect it (purpose & lawful basis)

We use your personal data to:

  • Respond to your enquiry and answer your questions.
  • Provide, or follow up about, the chartered accountancy services you have shown interest in.
  • Contact you about your lead and arrange next steps for the relevant service.
  • Maintain a record of enquiries and meet our own legal and record-keeping obligations.

Lawful basis. We process your personal data on the basis of your consent, which you give by ticking the consent box when you register with the advisor, or when you submit the contact form. Either way it is recorded with the date and time you gave it. You can withdraw your consent at any time (see Your rights). We do not use your data for automated decision-making that produces legal effects.

4. Who we share it with

We do not sell your personal data. We do not share it for third-party advertising. We use a small number of trusted service providers (Data Processors) to run this website and respond to you. They process data only on our instructions:

  • Cloudflare — website hosting, content-delivery, security, and privacy-first analytics.
  • Resend (or Amazon SES) — sending the one-time code to your email address, and the notification email that delivers your enquiry to our team.
  • OpenAI, accessed via the Cloudflare AI Gateway — the AI provider that powers the chat advisor. When you use the chat, the messages you type are processed by this AI provider to generate a response. We pass your messages through our gateway and instruct providers not to use the content to train their models where that option is available.

We may also disclose personal data where we are required to do so by law, by a court, or by a competent regulatory authority.

Some of these providers may process data outside India. Where they do, we rely on the provider's contractual safeguards. [PLACEHOLDER: confirm cross-border transfer position with legal counsel once the DPDP Rules on transfers are notified.]

5. How long we keep it

We keep personal data only for as long as we need it for the purposes above, and we keep the minimum necessary. In particular:

  • Enquiry details (name, contact, message, service interest) are retained for [PLACEHOLDER: retention period, e.g. 24 months] from your last contact, after which they are deleted or anonymised, unless a longer period is required by law or to deliver a service you have engaged us for.
  • Chat transcripts are retained only with consent and for a shorter period, and are redacted of obvious identifiers.
  • Your advisor account is retained for as long as you keep it. It holds your email address, your consent record, and the enquiry attached to it — deleting the account deletes all three.
  • One-time codes are held only as short-lived hashes and are discarded as soon as they are used or expire, whichever comes first.

You can ask us to delete your data sooner at any time (see Your rights).

6. Your rights (and how to contact us)

As a Data Principal under the DPDP Act, you have the right to:

  • Access — ask what personal data we hold about you and how we use it.
  • Correction — ask us to correct data that is inaccurate, incomplete, or out of date.
  • Erasure — ask us to delete your personal data, and withdraw your consent (which is as easy to withdraw as it was to give). Deleting your data removes your advisor account and the enquiry record attached to it; we do not keep one after erasing the other.
  • Grievance redressal — raise a complaint about how we handle your data, and (where unresolved) approach the Data Protection Board of India.
  • Nominate — nominate another individual to exercise your rights in the event of death or incapacity.

Data-deletion & grievance contact path

To exercise any of these rights — including to request deletion of your data — or to raise a grievance, contact our Grievance Officer:

  • Grievance Officer: [PLACEHOLDER: name of the appointed Grievance Officer]
  • Email: hello@launchmybusiness.in (please mark your message "Data request")
  • Phone: +91 98765 43210
  • Post: [PLACEHOLDER: registered office address]

We will respond to verified requests within a reasonable period and in line with the DPDP Act. We may need to verify your identity before acting on a request.

7. How we protect your data

We take reasonable security safeguards to protect personal data against unauthorised access, disclosure, alteration, or loss. These include HTTPS encryption in transit, access controls, server-side handling of all secrets, bot and abuse protection (Cloudflare Turnstile and rate limiting) on our forms, and redaction of obvious identifiers in stored transcripts. Sign-in codes are stored only as hashes — short-lived, single-use, and attempt-capped — and no password exists to be leaked, because we never set one. No method of transmission or storage is completely secure, but we work to protect your data and to notify the relevant parties of a breach where required.

8. Cookies & analytics

We use a privacy-first approach to analytics. We use Cloudflare Web Analytics, which does not use cookies, does not fingerprint you, and does not track you across other websites. We do not use advertising trackers or third-party marketing cookies. We may use a small amount of browser storage strictly to make the site work (for example, to carry your first question into the chat) — this is not used to track you.

If you register with the advisor we set one cookie: a signed, HTTP-only session cookie that keeps you signed in so you do not have to enter a code on every message. It is strictly necessary for that purpose, it cannot be read by scripts, and it is not used to profile you or to follow you to other websites.

9. Children's data

This website and our services are intended for business owners and adults. We do not knowingly collect personal data of children. If you believe a child has provided us personal data, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. When we do, we will change the "Last updated" date above. Material changes will be made clear on this page. Please review it periodically.

11. Contact us

Questions about this policy or your data? Email us at hello@launchmybusiness.in, call +91 98765 43210, or use our contact page.