Privacy Policy

1. Who we are

SteepGraph Systems Pvt. Ltd. (CIN U72200PN2009PTC134863) is responsible for the personal information collected through this website. It is the data fiduciary under India's Digital Personal Data Protection Act, 2023 and, where the GDPR applies, the controller.

• Registered office: C3-503, Kunal Icon, Pimple Saudagar, Pune, Maharashtra 411027, India
• Operating office: 5A, Indialand Global Tech Park, Phase 1, Hinjawadi, Pune 411057, India
• Email: contact@steepgraph.com
• Phone: +91 902 870 2000

SteepGraph Systems Pvt. Ltd. has two group companies, SteepGraph Corporation in the United States and SteepGraph GmbH in Germany (see section 4).

This policy covers this website only. It does not cover the work we do for customers, which our contract with them governs, or other websites we link to, such as our careers site or scaleb.com.

2. What we collect

Most of the personal information we hold is what you send us through a form. You can browse this website without telling us who you are.

The forms

• Enquiry form (the contact page and the homepage): your name and work email and, if you give them, your company and a message. Whether you would like a call or an email back and, for a call, your preferred time, which includes your time zone.
• Meeting request (on event pages): your name, work email and, if you give it, your company; the event, the city if the event runs in more than one, and the topic you picked. We reply by email.
• Event follow-up form (the page we share at our event stands): the city where we met, the topics you want to hear about, your name, company and work email, and a note if you add one.
• Webinar registration (each webinar page): your first and last name, work email, company and job title, your mobile number if you give it, and which webinar you registered for. Your browser also tells us your time zone. We use it only to register you with Microsoft Teams for a live Teams webinar (section 4), and we do not store it.
• Aras Assessment Kit: your name, work email and company, and your job title if you give it. Your results from the self-check: a score for each area, the statements you did not answer "Yes" to, and where to start. Any baseline figures you typed in, and whether you want to run the guided assessment with us.

With every form, we also record the consent or notice sentence shown on the form, word for word, and the date and time you sent it.

Where you came from

• Enquiry form, meeting request and event follow-up form: the page you were on before the form, the address of the form itself, the button that brought you there (when the link records it), the website that referred you (if your browser tells us), and any campaign tags in the link you followed, for example utm_source, or the QR code at our stand.
• Aras Assessment Kit: the page you sent it from, and the website that referred you (if your browser tells us).
• Webinar registration: none of this. We record which webinar it was, whether it was live or recorded when you registered and, for a live Teams webinar, whether the Teams registration went through and, if it did not, the error Microsoft returned.

Collected automatically

• Your IP address, which we hold in memory for a few minutes to stop repeated automated submissions. We do not store it with your form.
• Technical logs. Like most websites, the systems that run this site keep technical logs. These can include your IP address and browser details and, if an email to you fails to send, your email address.
• Analytics, described in section 7.

3. Why we use it, and on what basis

• To reply to your enquiry or meeting request, and to follow up on the topics you chose at an event: your consent, which you give with the tick box on the form.
• To register you for a webinar, send your confirmation and joining details, and open the recording for you: because you asked us to.
• To email you your Aras Assessment Kit results and, if you ask for it, arrange the guided assessment: because you asked us to.
• To send your details to the right person at SteepGraph: our legitimate interest in answering you well.
• To understand which pages and campaigns bring enquiries: our legitimate interest in running our website and our marketing. Analytics cookies are used only with your consent (section 7).
• To keep our forms free of spam and abuse, and this site secure: our legitimate interest in protecting the site and the people who use it.

Where we rely on your consent, you can withdraw it at any time (section 8). Withdrawing it does not affect anything we did before.

You can ask us to stop contacting you at any time. Reply to any email from us, or write to contact@steepgraph.com.

4. Who receives it

• SteepGraph. Every form is saved in this website's content management system before anything else happens, and only people with a login to the site's administration can read it. Each submission is also emailed to the SteepGraph team that handles its topic, or to our general inbox.
• Our group companies. We may share your enquiry with SteepGraph Corporation (United States) or SteepGraph GmbH (Germany) where one of them is best placed to help you.
• Microsoft. Our email runs on Microsoft 365. The emails about your submission, and the emails we send you (an acknowledgement, your webinar confirmation or your Assessment Kit results), pass through it.
• Microsoft Teams, for live webinars we run on Teams. When you register for one, we send Microsoft your name, email address and time zone, a reference number for your registration and, if that webinar's Teams registration asks for them, your company, job title and mobile number. Microsoft Teams then emails you your personal joining link.
• The providers that host this website and its database for us.
• Google (Google Analytics) and Vercel (Web Analytics and Speed Insights), as described in section 7.
• Video services such as YouTube and Vimeo, only when one of their video players loads on a page you visit (section 7).
• At events. After an event, our team may export that event's follow-up forms to a file so that the right people can follow up with you.

We may also disclose personal information where the law requires us to.

5. Transfers outside your country

SteepGraph and the providers named in section 4 work in several countries, so your information may be processed outside the country where you live, including in India, the United States and the European Union. Where it is, we protect it as the law requires.

6. How long we keep it

We keep personal information only for as long as we need it for the purpose we collected it for, or for as long as the law requires, and then we delete it.

What is kept in your browser stays there for the time given in section 7, or until you clear it.

7. Cookies and similar technologies

We use a small number of cookies and similar technologies. Analytics cookies are set only if you accept them in the cookie banner. You can change your choice at any time with the "Cookie settings" link in the site footer.

• sg_consent (set by this website): remembers whether you accepted or rejected analytics cookies, so that we do not ask on every visit. It holds only that choice, is strictly necessary for the cookie banner to work, and lasts about six months.
• Google Analytics cookies (named _ga and _ga_GRYRPEMNNN): set only if you accept. They help us understand which pages are viewed and how visitors arrive, and last up to two years. If you reject analytics cookies, or later withdraw your consent, they are not set and any already stored are deleted. Google Analytics still receives basic signals, such as that a page was viewed or a form was sent, without any cookie being set or read on your device.
• sg_webinar_access (set by this website): set only after you register for a recorded webinar. It remembers which recordings you have unlocked, so that you are not asked to register again. It holds the webinars' identifiers and a security signature, not your details, and lasts one year from your latest registration.
• Vercel Web Analytics and Speed Insights: count page views and measure how fast pages load, without cookies. Visitors are counted using an anonymous identifier derived from the incoming request, which is discarded after 24 hours.

Kept in your browser, and not sent to us unless you send a form:

• Your Aras Assessment Kit answers and any baseline figures stay in your browser's local storage while you work through the self-check, until you remove them with "Clear my answers" on the page or clear your browser's storage.
• The event follow-up form, if you send it while your device is offline (on our stand tablet, or on your own phone at a busy venue), is held on the device until it can be delivered, and then removed. The page also remembers which event city was chosen.

Videos. Recorded webinars and some blog posts play videos from video services such as YouTube, in its privacy-enhanced mode (youtube-nocookie.com), and Vimeo. When a video player loads, the video service receives your IP address and browser details. YouTube's privacy-enhanced mode sets no cookies until you play a video. What each video service collects is covered by its own privacy policy.

8. Your rights

Depending on the law that applies to you, which is India's Digital Personal Data Protection Act, 2023 and, where they apply, the EU General Data Protection Regulation and the UK GDPR, you can ask us to:

• tell you what personal information we hold about you, and give you a copy
• correct it, complete it or bring it up to date
• delete it
• stop or limit using it, or object to a use
• give it to you in a portable form, where the GDPR gives you that right
• let someone you nominate exercise your rights if you cannot, where India's Act gives you that right
• withdraw your consent, at any time

To ask, email contact@steepgraph.com. We may need to confirm who you are before we act on a request. We will reply within 30 days.

You can also complain to the Data Protection Board of India or to the data protection authority where you live. Under India's Act, please raise it with us first.

9. How we protect it

We protect personal information with security measures appropriate to the risk, as the law requires. This website is served over an encrypted connection, and form submissions can be read only by people with a login to the site's administration.

10. Changes to this policy

When we change this policy, we will publish the new version on this page and update the date at the top.

11. Contact us

For any question about this policy or your personal information, email contact@steepgraph.com, call +91 902 870 2000, or write to SteepGraph Systems Pvt. Ltd., C3-503, Kunal Icon, Pimple Saudagar, Pune, Maharashtra 411027, India.