Privacy Policy

RAHATE Enterprises ("RAHATE", "we", "us", or "our") is dedicated to protecting the privacy, confidentiality, and integrity of the personal information entrusted to us by visitors, prospective clients, and business partners.

This Privacy Policy explains how RAHATE Enterprises collects, uses, protects, and manages personal information when you access or interact with our website located at https://www.therahate.com (the "Website"), communicate with our team, subscribe to our technical publications, or submit inquiries regarding our professional engineering and digital services.

Please read this Privacy Policy alongside our Terms & Conditions. By accessing our Website or submitting information through our web forms, you acknowledge the information handling practices described in this policy.

RAHATE Enterprises is an engineering and technology solutions provider specializing in bespoke enterprise software development, artificial intelligence and automation architectures, custom CRM systems, digital platform engineering, search engine optimization (SEO), and performance marketing management.

• Business Brand: RAHATE Enterprises
• Legal Entity: [LEGAL ENTITY NAME: RAHATE Enterprises]
• Founder & Leadership: Gaurav Rahate
• Operational Address: [VERIFIED BUSINESS ADDRESS: Plot no 414, New Nandanwan Layout, Nagpur - 440024, Maharashtra, India]
• Official Website: https://www.therahate.com
• Official Privacy Contact Email: [OFFICIAL PRIVACY CONTACT EMAIL: privacy@therahate.com]
• General Contact Email: help@therahate.com
• Phone: +91 8007987232

RAHATE Enterprises functions as a commercial technology partner serving businesses and organizations. We do not operate an open consumer marketplace, retail store, or physical goods delivery network.

This Privacy Policy applies specifically to personal data collected through:

• The public website https://www.therahate.com and any official subdomains operated by RAHATE Enterprises.
• Online inquiry, audit request, and technical consultation forms hosted on our Website.
• Newsletter, email subscription, and whitepaper download forms.
• Direct electronic and telephonic communications between prospective clients and our solutions team.

This policy does NOT apply to: • Client-owned applications, proprietary data stores, or customer environments engineered or managed by RAHATE Enterprises on behalf of enterprise clients under individual Master Services Agreements (MSAs) or Statements of Work (SOWs), which are governed by specific client data-processing agreements. • Third-party websites, external platforms, or external vendor portals linked from our Website.

Depending on your interaction with RAHATE Enterprises, we may collect and process information that identifies or relates to you ("Personal Data"). We limit our collection to information necessary to fulfill legitimate commercial inquiries, provide requested technical evaluations, maintain website operations, and communicate effectively.

We collect Personal Data through three primary channels: 1. Information you provide directly to us through forms or direct communication. 2. Information automatically recorded through your device when browsing our Website. 3. Information generated through subsequent business discussions, technical discovery sessions, and project proposals.

When you voluntarily interact with RAHATE Enterprises through our Website or direct channels, you may provide:

• Contact Identifiers: Full name, professional email address, telephone or mobile number.
• Professional & Business Information: Company name, job title, industry sector, website URL, and geographic location.
• Project & Technical Requirements: Information regarding your existing technical stack, system requirements, automation goals, budget ranges, and proposed project timelines.
• Communication Records: Inquiries, feedback, consultation notes, and correspondence submitted via email, contact forms, or scheduled virtual meetings.

You are under no statutory obligation to provide personal data; however, failure to provide essential contact and business information may prevent us from responding to your inquiries or preparing technical proposals.

When you browse our Website, our servers and infrastructure may automatically log standard technical and diagnostic data, including:

• Network Identifiers: Internet Protocol (IP) address and approximate regional location derived from IP.
• Device & Browser Information: Browser type and version, operating system, device manufacturer, screen resolution, and language preferences.
• Usage & Interaction Details: Pages viewed, referring URLs, date and time of visits, time spent on individual pages, and navigation pathways across the Website.
• System Logs: Diagnostic logs generated during server requests to maintain system stability, monitor performance, and prevent malicious activities.

Our Website features discovery and contact forms (e.g., at /contact) that allow prospective clients to request architectural audits, project estimations, or technical consultations.

• Data Processing Flow: Data submitted through these forms is securely transmitted to our centralized operational database and internal CRM.
• Purpose of Processing: To evaluate your project requirements, assign an appropriate solutions architect, prepare custom quotations, and contact you regarding your inquiry.
• Pre-contractual Context: Submission of an inquiry indicates your desire to evaluate RAHATE Enterprises services and constitutes a pre-contractual step initiated at your request.

Visitors may choose to subscribe to our engineering insights, architectural whitepapers, and technology updates by submitting their email address (and optional phone number) via subscription modules on the Website.

• Voluntary Subscription: Newsletter subscription is strictly opt-in. We do not automatically enroll visitors in marketing broadcasts without voluntary submission.
• Content of Communications: Subscriptions deliver technical analyses, system design case studies, automation frameworks, and company announcements.
• Unsubscribe Mechanism: Every marketing email includes a clear unsubscribe link. You may opt out of promotional communications at any time without affecting your ability to browse our Website or receive one-to-one service communications.

RAHATE Enterprises uses collected Personal Data solely for legitimate business purposes, including:

• Service Delivery & Project Scoping: Evaluating technical feasibility, conducting discovery calls, preparing proposals, and delivering agreed technology services.
• Client Relationship Management: Maintaining records of inquiries, prospective client preferences, and project communications within our internal CRM.
• Communication & Support: Responding to questions, scheduling consultation sessions, providing project updates, and delivering operational notices.
• Website Administration: Monitoring server performance, debugging technical errors, optimizing page load velocity, and ensuring cross-device responsiveness.
• Security & Fraud Prevention: Protecting our infrastructure, users, and digital assets from unauthorized access, cyber threats, spam, and denial-of-service attempts.
• Legal & Regulatory Compliance: Fulfilling accounting, taxation, and statutory record-keeping duties under applicable law.

We process personal information only when authorized by applicable data protection legislation, including the Digital Personal Data Protection Act, 2023 (DPDPA) where applicable in India, and standard commercial legal grounds:

• Consent: Where you have provided clear, affirmative consent for specific purposes, such as subscribing to our email newsletter or accepting non-essential analytics cookies.
• Performance of a Contract / Pre-Contractual Steps: Where processing is necessary to respond to your project request, prepare a formal Statement of Work (SOW), or deliver contracted engineering deliverables.
• Legitimate Business Purposes: Where processing is reasonably necessary for operational security, server maintenance, intellectual property protection, and business-to-business communications, balanced against individual privacy rights.
• Legal Obligation: Where processing or retention is required by statutory regulations, tax authorities, or lawful governmental directives.

Our Website utilizes cookies—small text files placed on your browser or device—to ensure seamless navigation, store user preferences, and provide analytical insight.

Types of Cookies We Use: • Essential / Necessary Cookies: Required for core website functions, security verification, session management, and routing. These cannot be disabled through the consent banner. • Preference Cookies: Remember basic user selections, such as theme preferences or cookie consent status. • Analytics & Performance Cookies: Collect aggregated, anonymous metrics regarding visitor navigation patterns to help us measure and improve website responsiveness.

Managing Cookie Preferences: You can manage or modify your cookie selections through our on-site Cookie Preferences banner or configure your browser settings to decline or delete cookies. Note that disabling essential cookies may impact website functionality.

To continually optimize website architecture, load times, and content relevance, RAHATE Enterprises may employ privacy-conscious analytics tools.

• Aggregated Metrics: Analytics systems record aggregated parameters such as page load speed, session duration, device categories, and general navigation flow.
• IP Anonymization: Where web analytics are utilized, IP masking or truncation is prioritized so that individual visitors cannot be personally identified from raw analytics tables.
• No Unauthorized Profiling: We do not use analytics data to build invasive behavioral dossiers across unrelated third-party websites.

As an enterprise digital services provider, RAHATE Enterprises may run targeted professional marketing campaigns (such as on Google Ads or Meta) to reach businesses seeking custom software, CRM, and automation solutions.

• Conversion Tracking: When you click an official RAHATE advertisement and navigate to our Website, standard conversion measurement pixels may verify whether an inquiry was submitted.
• Granular Control: Advertising measurement scripts are subject to user cookie consent and applicable platform opt-out mechanisms.
• No Selling of Personal Information: RAHATE Enterprises does not rent, broker, or sell visitor personal information to data aggregators, ad exchanges, or commercial third parties.

To manage prospective client interactions and maintain high service standards, RAHATE Enterprises operates a centralized Customer Relationship Management (CRM) system hosted securely on our primary database infrastructure.

• Stored Records: When you submit an inquiry, your contact details, company information, communication history, and project requirements are organized within our CRM database.
• Access Control: Access to CRM records is strictly limited to authorized solutions architects, project leads, and executive management on a role-based need-to-know basis.
• Confidentiality: Inquiries, architectural requirements, and business discussions recorded in our CRM are treated as confidential business communications.

RAHATE Enterprises engineers state-of-the-art AI and automation systems for clients and incorporates modern AI tools internally to enhance engineering efficiency.

• Inquiry Processing: We may use server-side AI models (such as Google Gemini via verified enterprise APIs) to assist in categorizing inquiry topics or drafting preliminary technical proposals for human review.
• Human Oversight: All formal technical proposals, contractual quotes, and project recommendations are reviewed and approved by qualified human engineers before delivery.
• No Model Training on Client Inquiries: We do not submit confidential client project submissions, personal names, or proprietary code to public foundational AI models for public model training.
• No Automated Adverse Decisions: We do not use automated profiling to make decisions that produce legal or similarly significant adverse effects on visitors.

To operate our digital platform, RAHATE Enterprises engages vetted third-party service providers who process data strictly under our instruction:

• Cloud Hosting & Infrastructure: Managed cloud infrastructure (Google Cloud Platform / Cloud Run) hosting our web applications and reverse proxy layer with end-to-end SSL/TLS encryption.
• Database & Authentication: Secure cloud-hosted database infrastructure (Supabase / PostgreSQL) enforcing row-level security (RLS) for data persistence.
• Telecommunications & Email: Secure enterprise communication channels used to dispatch operational emails and correspondence.

All third-party service providers are contractually obligated to maintain confidentiality, process data only for authorized purposes, and implement technical security measures consistent with industry standards.

RAHATE Enterprises takes reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, destruction, loss, alteration, or disclosure.

Security Measures Implemented: • Encryption: Transport Layer Security (TLS 1.2/1.3) encryption for all data in transit across our Website, and industry-standard AES encryption for data at rest. • Access Control: Strict Role-Based Access Control (RBAC) and multi-factor authentication governing access to administrative dashboards and databases. • Database Isolation: Strict database row-level security policies (RLS) preventing unauthorized cross-tenant data exposure. • Codebase Auditing: Regular security dependency updates, automated vulnerability monitoring, and code reviews.

While we take reasonable and appropriate technical precautions, no electronic transmission over the internet or cloud storage environment can be guaranteed to be 100% secure. Visitors are encouraged to take prudent measures when transmitting sensitive information.

RAHATE Enterprises retains Personal Data only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law.

Retention Principles: • General Inquiries & Quotes: Retained in our CRM for the duration of the commercial evaluation and for up to three (3) years thereafter to support ongoing discussions or recurring project cycles, unless deletion is requested earlier. • Active Client Records: Retained for the duration of the commercial contract and for statutory limitation periods (typically 7 years for tax, accounting, and legal audit compliance under Indian law). • Newsletter Subscriptions: Retained until you opt out or unsubscribe via the provided unsubscribe mechanism. • Server & Diagnostic Logs: Routinely rotated, overwritten, or anonymized within short operational cycles (typically 30 to 90 days).

When Personal Data is no longer required, it is securely deleted, purged from active systems, or rendered irreversibly anonymous.

We do not sell, rent, or lease your personal information. We disclose personal information only in the limited circumstances described below:

• Authorized Service Providers: Trusted infrastructure and technology vendors who assist in hosting, database administration, and communications under strict confidentiality agreements.
• Professional Advisors: Qualified legal, accounting, and financial auditors who require access to business records to provide professional advice under binding professional confidentiality obligations.
• Corporate Transactions: In the event of a merger, acquisition, corporate reorganization, or sale of business assets, customer and inquiry records may be transferred subject to equivalent privacy commitments.
• Legal & Regulatory Mandates: Where disclosure is required by a valid court order, governmental inquiry, or applicable statutory duty to protect the rights, property, or safety of RAHATE Enterprises, our clients, or the public.

Because RAHATE Enterprises utilizes global cloud infrastructure providers (such as Google Cloud and Supabase) with distributed data centers, personal information collected through our Website may be hosted or processed on servers located outside your home state or country.

• Safeguards: Where cross-border data transfers occur, we ensure appropriate contractual and technical safeguards are maintained in compliance with applicable Indian data protection laws and international data-transfer frameworks.
• Server Standards: Our cloud infrastructure partners maintain internationally recognized certifications (such as ISO 27001 and SOC 2) for data center security and physical infrastructure protection.

Subject to applicable data protection legislation (including the Digital Personal Data Protection Act, 2023 where applicable in India, and corresponding rights recognized in other relevant jurisdictions), you may have the right to:

• Right to Access / Confirm: Request confirmation of whether we process your personal data and obtain a summary of the personal data held.
• Right to Correction: Request correction of inaccurate, misleading, or incomplete personal data.
• Right to Erasure / Deletion: Request the deletion or erasure of personal data that is no longer necessary for the purposes for which it was collected, subject to statutory retention obligations.
• Right to Grievance Redressal: Access transparent grievance redressal mechanisms regarding the processing of your personal data.
• Right to Nominate: Designate an authorized representative to exercise privacy rights in the event of incapacity, as provided under applicable law.

We will not discriminate against you for exercising any of your statutory privacy rights.

Where the legal basis for processing your personal information is consent (such as voluntary newsletter subscription or non-essential cookies):

• Clear & Voluntary: You provide consent through clear affirmative action, such as clicking a submission button, submitting a contact form, or selecting cookie preferences.
• Right to Withdraw: You maintain the right to withdraw your consent at any time.
• Ease of Withdrawal: You may withdraw consent by clicking the "unsubscribe" link in any newsletter email, adjusting your browser or website cookie settings, or emailing our privacy team directly at [OFFICIAL PRIVACY CONTACT EMAIL: privacy@therahate.com].
• Effect of Withdrawal: Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal, nor does it affect processing conducted under other lawful grounds, such as contractual necessity.

To exercise any of your privacy rights or submit inquiries regarding the personal data we maintain about you, please submit a written request to:

• Designated Privacy Email: [OFFICIAL PRIVACY CONTACT EMAIL: privacy@therahate.com]
• Subject Line: "Privacy Rights Request - [Your Full Name]"
• Information Required: To protect your data security, please provide sufficient information to verify your identity (e.g., matching the email address used in original correspondence) and specify the precise action you are requesting (access, correction, or deletion).

Response Timeline: We will acknowledge your request promptly and aim to provide a substantive response within thirty (30) calendar days, subject to identity verification and statutory extensions permitted under applicable law.

The Website and services of RAHATE Enterprises are designed exclusively for commercial entities, professional enterprises, and adult individuals capable of entering into binding commercial contracts.

• Age Limitation: We do not knowingly solicit, collect, or process personal data from individuals under the age of eighteen (18) years (or the applicable age of majority in your jurisdiction).
• Inadvertent Collection: If we become aware that personal information of a minor has been inadvertently submitted through our Website without verified parental or legal guardian consent, we will promptly delete such information from our active databases.
• Reporting: Parents or guardians who believe their child has provided personal information to us may contact us immediately at [OFFICIAL PRIVACY CONTACT EMAIL: privacy@therahate.com].

Our Website may contain references, articles, or hyperlinks directing you to third-party websites, industry documentation, client case study assets, or social media platforms (such as LinkedIn, GitHub, or Twitter/X).

• Independent Entities: These external websites operate independently from RAHATE Enterprises and maintain their own distinct privacy policies and terms of use.
• No Endorsement or Liability: We do not control, endorse, or accept responsibility for the privacy practices, content, or data collection policies of third-party platforms.
• Recommendation: We strongly advise reviewing the privacy statements of any external websites you visit after navigating away from https://www.therahate.com.

RAHATE Enterprises reserves the right to revise, modify, or update this Privacy Policy periodically to reflect enhancements in our digital platform, updates to our service offerings, emerging operational practices, or amendments in applicable data protection legislation.

• Notification of Revisions: When material revisions are made, we will update the "Last Updated" date displayed at the top of this policy.
• Active Review: We encourage visitors to review this page periodically to remain informed about how we safeguard personal data.
• Continued Use: Your continued access to or interaction with our Website following the publication of updated terms signifies your acknowledgment of the revised Privacy Policy.

If you have questions, inquiries, concerns, or grievances regarding this Privacy Policy or our information handling practices, please contact our designated privacy and operations team:

• Business Name: RAHATE Enterprises
• Founder & Leadership: Gaurav Rahate
• Designated Privacy Email: [OFFICIAL PRIVACY CONTACT EMAIL: privacy@therahate.com]
• Operational Address: [VERIFIED BUSINESS ADDRESS: Plot no 414, New Nandanwan Layout, Nagpur - 440024, Maharashtra, India]
• General Inquiries: help@therahate.com
• Phone: +91 8007987232
• Digital Contact Form: Contact Solutions Team
• Terms of Service: Review Terms & Conditions

Grievance Redressal (India): For individuals seeking formal grievance redressal under Indian data protection legislation, communications addressed to our designated email with the subject line "Formal Data Privacy Grievance" will be prioritized and addressed in accordance with statutory timeframes.