SutranetTowerPrivacy Policy
Last updated: 23 July 2026
This Privacy Policy explains how Sutranet (operated by Oruganti Vamsi Krishna, an individual carrying on business under the name and style of "Sutranet"; "we", "us", "our") collects, uses, and protects personal data when you use SutranetTower (the "Service") at www.sutranet.co.in. We are the data fiduciary for this data under India's Digital Personal Data Protection Act, 2023 ("DPDP Act").
1. Data We Collect
| Category | What | Why |
|---|---|---|
| Account data | Email address; display name and basic profile if you sign in with Google; an assigned user ID and account role/quota. | To create and manage your account, authenticate you, and enforce usage limits. |
| Content you provide | Tower definitions, section and bracing inputs, and any saved bracing patterns. | To run the analysis you request and to save your work. |
| Technical data | IP address, browser type, request timestamps, and server logs. | Security, debugging, and reliable operation of the Service. |
| Local storage | An authentication token stored in your browser's local storage. | To keep you signed in between visits. This is not a third-party tracking cookie. |
We do not intentionally collect sensitive personal data, and we ask that you do not submit any.
2. How We Use Your Data
- to provide, operate, secure and improve the Service;
- to authenticate you and maintain your account, role and usage quota;
- to run the analyses you request and store the inputs and results associated with your account;
- to communicate with you about your account or the Service;
- to comply with legal obligations and enforce our Terms & Conditions.
3. Legal Basis
We process your personal data on the basis of your consent (given when you create an account and use the Service) and, where applicable, to perform our contract with you and for our legitimate interest in operating a secure Service. You may withdraw consent at any time by closing your account (see Section 7).
4. Third-Party Services (Processors)
We rely on a small number of trusted providers to run the Service. Data may be processed by them on our behalf:
- Google Firebase Authentication & Cloud Firestore — to authenticate accounts (including Google Sign-In) and store account role/quota. Governed by Google's privacy policy.
- Google Cloud Platform — hosting infrastructure for the Service.
- Anthropic (Claude API) — only when AI guidance features are used, the relevant inputs (e.g. a bracing pattern or analysis summary) may be sent to Anthropic's API to generate guidance. No account credentials are sent. If this feature is not enabled, no data is sent to Anthropic.
Some of these providers may process data on servers outside India; where they do, we rely on the provider's safeguards and applicable law for such transfers.
5. Data Sharing
We do not sell your personal data. We share it only with the processors above, or when required by law, or to protect the rights, safety and security of Sutranet, our users, or the public.
6. Data Retention
We retain account data for as long as your account is active. Analysis jobs are processed transiently and are not kept in a permanent job store; saved bracing patterns and account records persist until you delete them or close your account. Server logs are retained for a limited period for security and troubleshooting.
7. Your Rights
Subject to the DPDP Act and applicable law, you may:
- access and obtain a summary of the personal data we hold about you;
- request correction or updating of inaccurate data;
- request erasure of your data and closure of your account;
- withdraw consent to processing;
- nominate another individual to exercise your rights in the event of death or incapacity.
To exercise any of these, contact us at vamsikrishna.oruganti@gmail.com.
8. Security
We use reasonable technical and organisational measures, including transport encryption (HTTPS) and access controls, to protect your data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Children
The Service is intended for professional use and is not directed to children. We do not knowingly collect personal data from children. Where required, processing of a child's data will only occur with verifiable parental/guardian consent as mandated by the DPDP Act.
10. Changes to This Policy
We may update this Policy from time to time. Changes take effect when posted, indicated by the "Last updated" date above. Material changes will be brought to your attention where appropriate.
11. Grievance / Contact
For any privacy question, request, or complaint, contact our grievance contact:
Oruganti Vamsi Krishna
Sutranet
Email: vamsikrishna.oruganti@gmail.com
Penamaluru, Krishna District, Andhra Pradesh, India