Privacy policy

1. Who we are

Throughline is a GTM and revenue advisory practice based in Hyderabad, Telangana, India. We decide how and why your personal data is used, so we are the "data fiduciary" under Indian law and the "controller" under the GDPR and similar laws.

Questions, requests and complaints about your data go to our grievance officer at privacy@throughlineai.tech.

2. What we collect

• Details you type into our forms: work email, company name, role and company revenue band, and which form you used.
• On the review request form, also: your company website, company stage and what you need help with, plus — only if you choose to give them — a message and your mobile number.
• If you ask for a Leak Calculator report: the numbers you entered and the resulting leak estimate. The calculator itself runs in your browser and sends nothing unless you submit the form.
• What you tell us when we reply by email or speak on a call.
• Analytics data, only if you accept analytics cookies: pages visited, device and browser type, approximate location and how you arrived on the site (see section 5).
• Your IP address, used briefly in memory to block spam and abuse. It is not stored with your details. Our hosting provider may keep standard server logs for security.

We do not ask for sensitive data such as health, financial account or government ID details. Please don't send them.

3. Why we use it, and on what basis

• To reply to your request, send your report and arrange a call — based on your consent when you submit a form (DPDP Act) and on steps you ask us to take before a possible engagement (GDPR).
• To understand which pages help visitors — based on your consent to analytics cookies, which you can withdraw at any time.
• To keep the site secure and prevent abuse — based on our legitimate interest in protecting the site and the people who use it.
• To meet legal obligations, such as record-keeping, where the law requires it.

We do not sell your personal data, share it for cross-context behavioural advertising, use it to train AI models or make automated decisions about you.

4. Consent and withdrawing it

Where we rely on consent, you can withdraw it as easily as you gave it: email us to stop all contact and have your details deleted, or use Cookie settings at the bottom of any page to switch analytics off. Withdrawing consent does not affect processing that already happened.

5. Cookies and analytics

We use Google Analytics 4 only after you click Accept on our cookie banner. Before that, and if you decline, no analytics cookies are set and no analytics data is sent. Google Analytics sets cookies named _ga and _ga_*; we strip query strings from page addresses, never send your form answers to Google and switch off Google's advertising features (Google signals and ad personalisation).

We also store your cookie choice in your browser so we don't ask again. That is strictly necessary and contains no personal data.

6. Who we share it with

Only service providers that help us run the site and reply to you, under contracts that require them to protect your data and use it only on our instructions:

• Hostinger, which hosts our website and database on servers in India.
• HubSpot, our customer relationship management (CRM) system, where your request is recorded so we can follow up (United States).
• Resend, which delivers the email alert we receive when you submit a form (United States).
• Google, for Google Analytics (only with your consent) and for our email.
• Professional advisers such as lawyers or accountants, where needed.

7. International transfers

Our providers may store or process data outside your country, including in India, the European Union and the United States. Where the law requires it — for example for data from the EU, UK, UAE or Saudi Arabia — we rely on approved safeguards such as standard contractual clauses. We do not transfer data to any country the Government of India has restricted under the DPDP Act.

8. How long we keep it

• Form details and Leak Calculator reports: up to 24 months after our last contact with you, then deleted — unless you become a client, in which case the client agreement applies.
• Analytics data: 14 months in Google Analytics, then deleted automatically.
• We delete your data sooner if you ask us to, unless the law requires us to keep it.

9. Your rights

Depending on where you live, you can ask us to:

• tell you what personal data we hold about you and how we use it, and give you a copy;
• correct, complete or update it;
• delete it;
• stop or restrict using it, or object to how we use it;
• move it to another service in a common format;
• withdraw any consent you have given;
• nominate someone to exercise your rights if you die or become unable to (India);
• opt out of any sale or sharing of personal data (California) — we do neither.

10. How to make a request or complaint

Email privacy@throughlineai.tech. We will confirm receipt and respond within 30 days. We may ask you to confirm your identity first. We will never treat you differently for exercising your rights.

If you are not satisfied with our answer, you can complain to your data protection authority: in India, the Data Protection Board of India; in the EU, your national supervisory authority; in the UK, the Information Commissioner's Office; in the UAE, the UAE Data Office; in Saudi Arabia, the Saudi Data & AI Authority (SDAIA); in California, the California Privacy Protection Agency.

11. Security

We use encrypted connections, strict security headers, server-side validation of every form, abuse protection and automated security scanning of every change. Access to your data is limited to the founder. If a personal data breach affects you, we will notify you and the relevant authorities as the law requires.

12. Children

Our site and services are for businesses and are not directed at anyone under 18. We do not knowingly collect children's data; if we learn we have, we delete it.

13. Language and changes

On request, we will provide this policy in any language listed in the Eighth Schedule to the Constitution of India.

We will update this policy when our practices or the law change, and show the date of the latest version at the top. If a change materially affects how we use data you have already given us, we will tell you.