Privacy notice

Who we are

This site and Drapli are run by CoreArk Software Private Limited, Flat No 501, Block C, Sai Balaji Enclave, Kondapur, Serilingampally, K.V. Rangareddy – 500084, Telangana, India. We decide how your data is used, so we are the Data Fiduciary under the Act.

For any question about your data, email connect@corearksoftware.com.

What we collect

We collect personal data only when you ask for a demo. The demo form collects exactly these details, and nothing else:

• Your name
• Your shop or business name
• Your mobile number
• Your city
• What you sell (product category)
• How you heard about Drapli, and the short detail you add if you choose "Other"
• Whether you ticked the optional box to get Drapli tips, when you ticked it, and which version of this notice you saw
• Where your visit came from, if your browser tells us: campaign tags in the link you followed (such as utm_source) and the website that sent you, without its query string. If we cannot tell, we record that we do not know
• Which page of this site you asked from, the time of your request, and how many times you have asked

What we do not collect

The site has no login, and Drapli sets no cookies of its own. Our security provider, Cloudflare, may set a short-lived cookie to tell people from bots. We do not ask for your email address, your address, payment details, photos or documents.

To deliver pages and stop abuse, our hosting and security providers see your IP address and browser details, as every website does. We use your IP address to limit repeated form submissions and keep it only for that limit window. It is never stored with your demo request.

Why we use it

• To call you about the demo you asked for. This is the only reason we use your mobile number.
• To count which channels and pages bring demo requests, so we know where Drapli is found.
• To protect the form from spam and abuse.
• To send you Drapli tips, only if you ticked that box.

The legal basis

You give us your details yourself to ask for a demo, and we use them only for that purpose. The Act allows this use without a separate consent tick (section 7(a)).

Tips from Drapli are different. We send them only with your consent, given by ticking a separate box that starts unticked. Asking for a demo never signs you up. You can withdraw that consent at any time by emailing us, and withdrawing does not affect your demo request.

Who can see it

Only the people at CoreArk who arrange demos. They read requests through an access-controlled tool that records every read, export and deletion. We do not sell your data or share it for anyone else's marketing. We share it with others only when the law requires it.

These service providers process data for us, under our instructions:

• Cloudflare, which serves this site, protects it from attacks, passes your form to our server, and stores the deletion record described below.
• DigitalOcean, which runs our server, in its Bengaluru data centre in India.
• Supabase, which hosts the database that holds demo requests, on Amazon Web Services in Mumbai, India.
• PostHog, our website analytics tool, hosted in the European Union. See "Analytics" below.

Analytics

We count visits with PostHog, through our own web address (drapli.com), so your browser does not contact PostHog directly. The events still reach PostHog's servers in the European Union.

Analytics is cookieless. Session replay is off and autocapture (automatic recording of clicks and typing) is off. We record only page views, where the visit came from, clicks on our buttons, and how far down a page you scroll. No event ever contains anything you type into the form.

To count unique visitors without cookies, PostHog briefly uses your IP address and browser details to make a code that changes every day. We never link analytics to your demo request. Analytics events are kept for 12 months, then deleted.

How long we keep it

We keep a demo request for 24 months after your last request, then delete it automatically.

Our database backups are kept for 30 days, so a deleted request can remain in a backup for up to 30 days. If we ever restore a backup, we delete those requests again before the site uses it.

When we delete your details, we keep a one-way coded version of your mobile number, never the number itself, for 7 years. It only lets us make sure a restored backup cannot bring your details back.

Your rights

Under the Act you can:

• Get a summary of the personal data we hold about you and how we use it.
• Have wrong or incomplete details corrected or updated.
• Have your details deleted.
• Withdraw your consent to Drapli tips.
• Nominate someone to use these rights for you if you die or cannot act.
• Raise a grievance with us, and then with the Data Protection Board of India.

How to use your rights

To use any of these rights, email connect@corearksoftware.com and tell us what you want. A mobile number is not a secret, so before we act we call the number we hold to confirm the request is yours. We carry out deletion and withdrawal requests within 30 days.

You will not be asked to pay, and you will not be treated differently for asking.

Grievances

If you are unhappy with how we handled your data, email connect@corearksoftware.com with "Grievance" in the subject.

We reply to a grievance within 30 days.

If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

Children

This site is for business owners. It is not meant for anyone under 18, and we do not knowingly collect a child's data. If you think a child has sent us a request, email us and we will delete it.

Changes to this notice

When we change this notice, we update the version and date at the top of this page. When you tick the tips box, we record which version you saw.