1. Who we are
Makani Tech ("Makani Tech", "we", "us") is run by Kishan Makani from Surat, Gujarat, India. We build AI and automation systems for students, developers and business owners. For the personal data described in this policy we are the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (DPDP Act), and the controller for the purposes of the EU and UK General Data Protection Regulation (GDPR), where it applies.
This policy covers makani-tech.com, our admin tools, our email and our services. Email [email protected], or write to Makani Tech, Surat, Gujarat, India.
2. What we collect
We only collect what you give us or what is needed to run the website securely:
| Where | Data | Why |
|---|---|---|
| Contact, discovery audit and calculator forms | Name, email, who you are (student, developer, business owner), your message and any numbers you entered | To reply and to prepare advice or a proposal |
| Readiness assessment | Name, email, company (optional), industry, team size, tools, hours, pain points, budget range, score | To send your results and suggest next steps |
| Account sign-up and sign-in | Name, email, role, password (stored only as a one-way hash) | To give you access to playbooks and plan requests |
| Playbook downloads and plan requests | Name, email, the playbook or plan, any note you add | To deliver the playbook and follow up on your request |
| Newsletter | Email, the page you signed up from, IP address and browser type at sign-up | To send the newsletter and keep a record of your consent |
| Job applications | Name, email, phone, city, LinkedIn and portfolio links, your note and your CV (PDF) | To assess your application |
| Every visit | IP address, browser and device type, pages visited, time of visit | Security, spam and abuse prevention (rate limits, captcha), and site analytics |
We do not ask for sensitive personal data such as financial account details, health information, caste, religion or biometric data. Please do not include it in messages or CVs.
3. Our legal basis
- Consent: when you submit a form, subscribe, create an account or apply for a job, you consent to us processing the data in that form for the stated purpose. You can withdraw consent at any time; this does not affect processing already done.
- Legitimate uses permitted by law: keeping the website secure, preventing fraud and spam, and complying with legal obligations.
- Contract: when you become a client, we process the data needed to deliver the work you asked for.
4. Analytics and cookies
With your permission we use Google Analytics 4 to understand which pages are useful and which forms people complete. Google Analytics uses cookies and receives your IP address, device and browser details and the pages you visit. We do not send names, emails or form contents to Google. Advertising features are switched off.
You choose whether analytics cookies are used through the banner on your first visit, and can change your choice at any time from the Cookie Policy page. Details are in our Cookie Policy.
6. How long we keep it
| Data | Kept for |
|---|---|
| Contact and audit messages that do not become a project | 24 months after the last message |
| Client project records | 8 years after the project ends, for tax and accounting law |
| Assessment results | 24 months |
| Accounts | Until you ask us to delete the account, or 3 years without a sign-in |
| Newsletter subscription | Until you unsubscribe; we then keep only your email on a suppression list so we never email you again |
| Job applications and CVs | 12 months after the role closes, unless you ask us to delete them earlier |
| Security and server logs | Up to 90 days |
| Google Analytics data | 14 months |
7. How we protect it
- All traffic is encrypted with HTTPS.
- Passwords are stored only as salted one-way hashes; nobody, including us, can read them.
- CVs are stored privately and can only be opened by signed-in team members.
- Admin access is limited by role (admin, editor, viewer), and every change in the admin panel is logged.
- Public forms are protected by a captcha and rate limits.
No system is perfectly secure. If a personal data breach affects you, we will inform you and the Data Protection Board of India as the DPDP Act requires, and tell you what we are doing about it.
8. Your rights
Under the DPDP Act, and the GDPR where it applies, you can:
- Ask for a summary of the personal data we hold about you and who we have shared it with.
- Ask us to correct, complete or update your data.
- Ask us to erase your data, unless the law requires us to keep it.
- Withdraw consent at any time, for example by unsubscribing or asking us to delete your application.
- Nominate another person to exercise your rights if you die or become unable to.
- Complain to our Grievance Officer, and if you are not satisfied, to the Data Protection Board of India (or your local data protection authority in the EU/UK).
To use any of these rights, email [email protected] from the address you used with us. We may ask you to confirm your identity before acting on the request.
9. Children
Our services are meant for adults. Under the DPDP Act anyone under 18 is a child. If you are under 18, a parent or legal guardian must agree to you using our forms or services, and should contact us first. If we learn we have collected a child's data without that consent, we will delete it.
10. Job applicants and team members
Job applicants: your application is seen only by the people involved in hiring. We use it only to assess you for the role you applied for and, if you agreed, similar roles. We do not use automated decision-making to reject candidates.
Team members: for people with access to our admin panel we keep their name, work email, role and a log of the changes they make, for security and accountability. Team members must only use personal data for the task it was collected for, never copy it to personal devices or accounts, and must report any suspected breach to the Grievance Officer at once.
11. Grievance Officer
Grievance Officer: Kishan Makani, Makani Tech, Surat, Gujarat, India. Email: [email protected].
We acknowledge complaints within 48 hours and aim to resolve them within 15 days.
12. Changes to this policy
We will post any change on this page with a new date. If a change is significant, we will tell people we have an email address for before it takes effect.