Legal

Privacy policy

Short, because we collect very little. This describes exactly what happens to the details you give us and how to get them removed.

Last updated: January 2026

Who controls your data

Pinnacle Consultancy Group, 3-3-110/VF/301, Veejay Flora, Hyderguda, Hyderabad – 500048, India, is the controller for personal data collected through this website and the Aurevat platform. Contact: info@aurevat.com.

For transaction data you upload as a customer, we act as processor on your instructions and the terms of your agreement with us.

What we collect through this website

Only what you type into the enquiry form: your name, work email and, if you choose to give them, company, country, ERP system, transaction volume, plan interest and your message.

We do not run advertising trackers, marketing pixels or third-party analytics profiling on this site. There is no cookie banner because we are not setting the cookies that would require one.

Standard server logs (IP address, request time, user agent) are generated by our hosting provider for security and reliability and are retained for a short operational period.

Why we use it, and on what basis

To reply to your enquiry and, if relevant, scope a pilot. The basis is our legitimate interest in responding to a business enquiry you initiated, and, once you are a customer, performance of our contract with you.

We do not add you to a newsletter, sell your details, or share them with third-party marketers.

Who processes it on our behalf

Our cloud hosting and managed database provider (application, database and file storage), our email provider (to correspond with you), and Razorpay (to process payments — Razorpay handles card data directly and we never receive card numbers).

Each is engaged under terms that restrict them to processing on our instructions. We will name the current providers on request.

Where it is held and how long

Enquiry records are kept while the enquiry is live and for up to 24 months afterwards, then deleted. Customer transaction data is retained for the term of your agreement and deleted on request afterwards, subject to backup ageing.

Data may be processed outside your country by the providers above. Where personal data of EU or UK residents is involved, transfers rely on standard contractual clauses.

Your rights

You can ask for a copy of your personal data, correction of it, deletion of it, or restriction of how we use it, and you can object to processing based on legitimate interest. Email us and we will respond within 30 days.

If you are in the EU or UK you may also complain to your local supervisory authority. In India, you may raise a grievance with our contact address above.

Security

Encryption in transit and at rest, database-enforced tenant isolation, least-privilege access and an immutable audit trail of administrative actions. Our full posture — including what we do not yet have — is on the security page.

Children

Aurevat is a business product and is not directed at anyone under 18. We do not knowingly collect data about children.

Changes

If this policy changes materially we will update this page and notify account contacts by email.