Skip to main content

Privacy Policy

This policy is provided by WorkflowSaga, an agency based in India working with clients internationally ("WorkflowSaga", "we", "us", "our"). It explains what personal data we collect, why, and how we handle it.

Last updated: 20 October 2026

1. Who we are

The data controller for the personal data described in this policy is WorkflowSaga, an agency based in India working with clients internationally. Under India's Digital Personal Data Protection Act, 2023 we are the "data fiduciary".

  • Address: Anand, Gujarat, India — 388001
  • Email: workflowsaga@gmail.com

We handle personal data in line with India's Digital Personal Data Protection Act, 2023 (the DPDP Act). If you are in the United Kingdom, the UK GDPR and the Data Protection Act 2018 also apply to how we handle your data. Wherever else you are, we also follow the data protection laws that apply to you.

2. What we collect

We collect personal data in two contexts:

  • Booking a call. If you open our booking calendar and book a time, Cal.com handles that booking: you give it your name, email and any notes, and it sends the calendar invite. We receive the booking details from Cal.com.
  • Enquiries. When you use our booking form, we collect your name, work email, company, what you'd like to discuss (or which product demo you want), your preferred days and time of day, your timezone, and — if you choose to give them — a budget range and a note. If you email us directly, we receive whatever you include in your email.
  • How you found us. With an enquiry we also receive the page you first landed on, the website that referred you (if any) and any campaign tags in the link (UTM parameters). This is held in your browser only for the current session and is sent to us only if you submit the form.
  • Client projects. If you become a client, we collect and store the information needed to deliver the project and manage the relationship — for example your business address, invoicing details, and communications relating to the work.

We use Vercel Web Analytics to understand how the website is used — which pages are visited, which websites refer visitors, and which buttons are used. It doesn't use cookies, doesn't track you across other websites and doesn't build a profile of you; visitors are counted using a short-lived identifier that resets every day, and we only see aggregated figures. We don't use advertising or tracking cookies.

3. Why we collect it

We use your personal data to:

  • Respond to your enquiry and discuss whether we're a good fit to work together;
  • Deliver, invoice and support a project if you become a client;
  • Meet our legal obligations, for example around accounting records.

Under the DPDP Act, we process your data with your consent or for the legitimate uses the Act allows — for example, using information you have voluntarily given us for the purpose you gave it, such as replying to your enquiry. You can withdraw consent at any time by emailing us.

For visitors in the UK, under the UK GDPR our legal basis for processing enquiry data is legitimate interest (responding to business enquiries you've initiated), and for client project data it is performance of a contract with you.

4. Where your data is stored

Client project data (including agreements, invoices and scheduling information) is stored on infrastructure we control, on our own database — not sold to, or shared with, third-party marketing platforms.

To run this website and receive enquiries we use these service providers, who process data on our behalf under their own data processing terms:

  • Vercel — hosts this website, processes the booking form request and provides our cookieless website analytics.
  • Resend — delivers your booking request to our inbox by email.
  • Cal.com — provides the booking calendar, if you choose to open it, and manages calendar bookings and invites.
  • Google (Gmail) — where we receive and reply to enquiries.

International transfers

Because we work with clients internationally and use the providers above, your data may be stored or processed outside India and the UK, including in the United States and the European Union. Transfers from India are made in line with the DPDP Act. Where data from the UK is transferred to a country without UK adequacy regulations, our providers rely on the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU standard contractual clauses, or the UK–US Data Bridge where the recipient is certified.

5. How long we keep it

Enquiry data that doesn't turn into a project is kept for a reasonable period to allow for follow-up, then deleted. Client project data, including invoices, is kept for as long as required by applicable tax and accounting rules, and deleted or anonymised after that unless we're required to keep it longer.

6. Your rights

Depending on where you are, you have the right to:

  • Access a summary of the personal data we hold about you and how we use it;
  • Ask us to correct, complete or update inaccurate data;
  • Ask us to delete your data, where we're not required to keep it for legal reasons;
  • Withdraw consent you have given;
  • Have your grievance dealt with by us, and nominate someone to exercise your rights if you are unable to (DPDP Act);
  • Object to or restrict certain processing, and request a copy of your data in a portable format (UK GDPR).

To exercise any of these rights or raise a grievance, email workflowsaga@gmail.com and we'll respond as quickly as we can. If you're not satisfied with our response, you can complain to the Data Protection Board of India, or — if you're in the UK — to the Information Commissioner's Office (ico.org.uk).

7. Data sharing

We do not sell your personal data. We only share it with third parties where necessary to run our business (for example, email or hosting providers) or where required by law.

8. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page will always reflect the most recent version.