Privacy Policy

This Privacy Policy explains how Sageflow Labs (“Sageflow,” “we,” “us,” or “our”) collects, uses, and shares information when you visit https://sageflow.in, contact us, or engage us for professional services.

We aim to collect only what we need to operate the website, respond to inquiries, and deliver contracted work.

1. Who is responsible

Controller for this website and consultancy-related processing: Sageflow Labs. Contact: contact@sageflow.in.

Product-specific privacy practices for TokenSentinel (if you use that product) are described on tokensentinel.dev and may differ from this policy.

2. Information we collect

2.1 Information you provide

• Contact and inquiry data — name, work email, company, role, message content, and any files you send when you email us or submit a form.
• Engagement data — project requirements, technical details, credentials you choose to share, contracts, invoices, and communication history related to a proposal or SOW.

2.2 Information collected automatically

• Technical logs — IP address, browser type, device/OS hints, referrer, pages viewed, and timestamps, typically via hosting or analytics infrastructure.
• Cookies and similar tech — essential cookies for security and load balancing; optional analytics cookies if we enable them (see §6).

2.3 Information from third parties

We may receive limited information from social platforms if you interact with our profiles (e.g. LinkedIn, Instagram), or from referral partners you authorize to introduce us.

3. How we use information

• Respond to inquiries and schedule discovery calls;
• Prepare proposals, SOWs, and commercial correspondence;
• Deliver and support professional services under a Service Agreement;
• Operate, secure, and improve the website;
• Comply with legal obligations and enforce our Terms;
• Send service-related messages; we do not sell personal data or use it for unsolicited bulk marketing without a lawful basis and, where required, consent.

4. Legal bases (where applicable)

Depending on your location, we may rely on:

• Contract — to take steps before entering a contract or to perform a Service Agreement;
• Legitimate interests — website security, basic analytics, B2B relationship management (balanced against your rights);
• Consent — where required (e.g. certain cookies or marketing);
• Legal obligation — tax, accounting, or lawful requests.

5. Sharing

We may share personal data with:

• Service providers — hosting (e.g. Vercel), email, accounting, or collaboration tools bound by confidentiality and data-processing terms;
• Professional advisors — lawyers, accountants, insurers when needed;
• Authorities — when required by law or to protect rights and safety;
• Business transfers — in connection with a merger, acquisition, or asset sale, with appropriate notice where required.

We do not sell personal information.

6. Cookies and analytics

Essential cookies keep the site reliable. If we enable analytics (for example privacy-oriented or first-party analytics), we will configure them to minimize personal data and, where required, obtain consent. You can control cookies through your browser settings.

7. International transfers

Our providers may process data in countries other than yours. Where required, we use appropriate safeguards (such as standard contractual clauses or vendor terms that provide equivalent protections).

8. Retention

• Inquiry emails — typically retained while useful for follow-up, then deleted or archived under ordinary business practice;
• Contracts, invoices, and project records — retained as required by law and for legitimate business records (often several years);
• Server logs — retained for a short operational period unless needed for security investigations.

9. Security

We use reasonable technical and organizational measures appropriate to a small consultancy (access control, HTTPS, least-privilege on systems we operate). No method of transmission or storage is perfectly secure; please avoid sending highly sensitive secrets over email unless we agree a secure channel.

10. Your rights

Depending on applicable law (including GDPR/UK GDPR or other local rules), you may have rights to access, correct, delete, restrict, or port personal data, and to object to certain processing or withdraw consent. To exercise rights, email contact@sageflow.in. You may also lodge a complaint with a supervisory authority in your country.

11. Children

Our website and services are directed at businesses and professionals. We do not knowingly collect personal data from children under 16 (or the age required by local law).

12. Industry-specific data

Engagements in fintech, healthcare, or real estate may involve regulated or sensitive datasets. Handling of such data is defined in the Service Agreement, NDA, and any data processing addendum (DPA). Do not send production personal health, payment card, or similar sensitive data via the public website contact form unless we have agreed secure procedures in writing.

13. Changes

We may update this Privacy Policy periodically. The “Effective date” will be revised when we publish changes. Material changes will be highlighted on this page or communicated when appropriate.

14. Contact

Privacy questions or requests: contact@sageflow.in

This policy is a practical standard template for a consultancy website. It is not legal advice. Have qualified counsel adapt it to your entity, jurisdictions, and tooling stack before production use.