The short version
We collect very little.
What you type into our inquiry form, what you share when you book a call, basic analytics about how the site is used, and publicly available business details such as a LinkedIn profile.
We use it to reply, not to spam.
Your details are used to respond to your inquiry and continue that conversation. We don’t add you to a mailing list without asking.
We never sell personal data.
We share it only with the service providers that run our website, email and scheduling, and only as far as they need it.
Client project data is a separate matter.
Data we handle while building or running systems for a client is governed by that client’s contract and NDA, not this policy.
You stay in control.
Ask us to see, correct or delete your information at any time by writing to hello@apppotter.com.
The full policy below is what applies. This summary is here to make it easier to read.
1.Who we are
This policy explains how AppPotter LLP (LLPIN ACR-8418), a limited liability partnership registered in India (“AppPotter”, “we”, “us”), handles personal data collected through www.apppotter.com and through the conversations that start there.
For this data, AppPotter decides why and how it is processed. Under India’s Digital Personal Data Protection Act, 2023 that makes us the Data Fiduciary; under the EU and UK GDPR, the controller.
Our office is at 322, 3rd Floor, Sharan Circle Business Hub, Near Zundal Cross Road, Chandkheda, Ahmedabad 382421, Gujarat, India.
2.What this policy covers
This policy applies when you:
- visit or browse our website;
- send us an inquiry through a form on the site;
- book a GTM Systems Assessment or another call with us;
- email, phone, message or otherwise contact us about our services; or
- are a contact person at a client, prospect or partner organization we work with.
Data inside client systems
When we engineer, integrate or support a client’s systems, we may have access to data those systems hold. We process that data only on the client’s instructions and under the confidentiality, security and data protection terms of the client’s contract. In that role the client is the Data Fiduciary or controller and AppPotter acts on its behalf. Questions about that data should go to the client first.
3.Information we collect
We collect only what we need to respond to you and run our business.
| Source | What we receive |
|---|---|
| Inquiry forms | Your name, work email, phone or WhatsApp number (optional) and the message you write. |
| Call bookings | Calls are booked through Calendly. We receive your name, email, the time you choose and any answers you give on the booking page. |
| Direct contact | Whatever you choose to share when you email, call, message or connect with us, including on LinkedIn. |
| Public professional sources | Business contact details, such as name, role, company and professional profile, that people have made publicly available on LinkedIn, company websites and similar sources. |
| Website analytics | Pages visited, time on page, referring site, browser, device type and approximate location (city or region), collected by Google Analytics. |
| Technical logs | IP address, request time and similar data our hosting and form services record to deliver the site and prevent abuse. |
| Business relationships | Names, roles and contact details of people at clients and partners, plus proposals, contracts and invoices. |
We don’t ask for sensitive personal data, such as health, financial account or government ID details, through the website. Please don’t include it, or confidential business information, in a form. If you need to share something confidential, we’re happy to sign an NDA first.
If you choose not to share some details, we may not be able to respond to your inquiry fully.
4.How we use it and why
| Purpose | Lawful basis |
|---|---|
| Replying to your inquiry and continuing that conversation | Your consent, given when you submit the form or contact us |
| Running assessment calls, discovery and proposals | Steps you ask us to take before entering a contract |
| Contacting people in a professional capacity about work relevant to their business, and preparing for calls | Legitimate interests in business-to-business communication |
| Delivering, invoicing and supporting client engagements | Performance of a contract |
| Understanding which pages are useful and improving the site | Legitimate interests (GDPR); consent where the law requires it for analytics |
| Keeping the site and forms secure, and preventing spam and fraud | Legitimate interests; legitimate uses permitted by law |
| Meeting tax, accounting and other legal obligations | Legal obligation |
We don’t use your information for automated decision-making that has legal or similarly significant effects on you, and we don’t build advertising profiles.
5.AI tools and call recordings
We build AI and automation systems for clients, so we are deliberate about how we use them ourselves.
Call recordings. We don’t currently record calls or use AI note-taking tools on them. If we ever want to, we will ask for your permission at the start of the call, and we won’t record if you say no.
AI tools. We may use AI tools from established providers to help us summarize inquiries, draft replies and prepare proposals. When we do, we use business plans or settings under which the provider does not use your information to train its models, a person at AppPotter reviews everything before it is sent to you, and we don’t put information shared with us under an NDA into these tools without your agreement.
6.Follow-up and marketing
If you send us an inquiry or book a call, we’ll follow up about that conversation. We won’t add you to a newsletter or general marketing list unless you ask to join one.
We may also contact people in a professional capacity, for example on LinkedIn or by email, when we believe our work is relevant to their business. Our messages always make clear who we are, and if you ask us not to contact you again, we won’t.
If you would rather we didn’t contact you again, reply and say so, or write to hello@apppotter.com. We’ll stop straight away.
9.International transfers
AppPotter is based in India and works with clients in India and abroad. Some of our service providers store or process data in other countries, including the United States. Where we transfer personal data outside the country it was collected in, we rely on providers that offer recognized safeguards, such as the European Commission’s standard contractual clauses, and we comply with any restrictions the Government of India places on transfers.
10.How long we keep it
- Inquiries that don’t lead to an engagement: up to 24 months after our last contact, so we have context if you come back to us. Then we delete them.
- Client and partner records: for the length of the relationship and afterwards for as long as tax, accounting or contractual obligations require.
- Analytics data: for the retention period set in our Google Analytics account, after which Google deletes it.
- Anything you ask us to delete: as soon as practical, unless the law requires us to keep it.
11.How we protect it
Security is part of how we engineer systems for clients, and we apply the same habits to our own. The site is served over encrypted HTTPS connections, access to inquiry data is limited to the people who need it to reply, and we only grant access to our business tools on a need-to-know basis.
No method of transmission or storage is completely secure. If a personal data breach affects you, we will notify you and the relevant authorities as the law requires.
12.Your rights
Depending on where you live, you can ask us to:
- tell you what personal data we hold about you and how we use it;
- correct, complete or update it;
- delete it;
- withdraw consent you have given, which doesn’t affect anything done before you withdrew it;
- restrict or object to how we use it, or give you a portable copy (EU and UK residents); and
- nominate someone to exercise your rights if you die or become unable to (residents of India).
Write to hello@apppotter.com with the subject line “Privacy request”. We may need to confirm your identity first. We aim to respond within 30 days.
If you aren’t satisfied with our response, you can complain to the Data Protection Board of India, or to the data protection authority where you live if you are in the EU or UK. We’d appreciate the chance to resolve it with you first.
13.Children
Our website and services are for businesses. They are not directed at anyone under 18, and we don’t knowingly collect personal data from children. If you believe a child has sent us information, contact us and we will delete it.
14.Changes to this policy
We will update this policy when our practices or the law change. The effective date at the top of this page shows when it last changed. If a change materially affects how we use information you’ve already given us, we will tell you directly where we can.
15.Contact and grievance officer
For any question, request or complaint about how we handle personal data, contact our grievance officer, Umesh Sohaliya, Founder & CTO:
- Email: hello@apppotter.com
- Phone: +91 77779 56701
- Post: AppPotter LLP (LLPIN ACR-8418), 322, 3rd Floor, Sharan Circle Business Hub, Near Zundal Cross Road, Chandkheda, Ahmedabad 382421, Gujarat, India
Questions about this page?
Write to us and a founder will reply. We don’t route these to a support queue.
- hello@apppotter.com
- Post
- AppPotter LLP, 322, 3rd Floor, Sharan Circle Business Hub, Near Zundal Cross Road, Chandkheda, Ahmedabad 382421, Gujarat, India