Legal
Privacy Policy
Last updated 13 October 2026
The short version: we collect your first name and email so we can tell you when SIPTRUS launches. We never sell them. You can leave the list and have your details deleted with one click in any email from us, or by writing to info@siptrus.com.
Who we are
SIPTRUS is a new business that is not yet registered as a company. This website is run by its founder, Uday Mehra ("SIPTRUS", "we", "us"), based in New Delhi, India. The best way to reach us is info@siptrus.com. When SIPTRUS is registered, we'll update this policy with the company's name and address and tell you by email. For your personal data we are the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act") and the rules made under it. We also follow the Information Technology Act, 2000 and the rules under it.
What we collect
| Data | Why | Where it comes from |
|---|---|---|
| First name | To greet you in our emails and show your place on the list | You type it in |
| Email address | To send your welcome email launch updates and your early-bird perks | You type it in |
| Consent record (date, time and which version of this policy you agreed to) | To show that you agreed, as the DPDP Act requires | Created when you join |
| A scrambled (hashed) form of your IP address | To stop spam and repeated sign-ups. We can't turn it back into your IP address. | Your device, when you submit the form |
| Basic technical logs (browser type, pages requested, errors) | To keep the site secure and working | Your browser, through our hosting provider |
We don't collect health information, payment details, or any sensitive personal data on this page. Please don't send them to us.
Why we're allowed to use it
We use your name and email only because you gave us consent by ticking the box and joining (section 6 of the DPDP Act). We use technical logs and the hashed IP for the legitimate purposes of keeping the site and your data secure and preventing fraud.
We use your data only for the purposes above. If we ever want to use it for something new, such as sending offers after launch, we'll ask you first.
Who we share it with
We never sell or rent your personal data. We share it only with service providers (Data Processors) who help us run the waitlist, under contracts that require them to protect it and use it only on our instructions:
- Cloudflare, Inc. hosts this website and its database, and protects it from attacks and spam.
- Resend (Plus Five Five, Inc.) delivers our emails.
These providers may store or process data on servers outside India. The DPDP Act allows this except to countries the Government of India restricts, and we will follow any such restriction. We may also disclose data where Indian law requires it, for example to a court or government authority with a valid legal request.
How long we keep it
We keep your name and email while the waitlist is running. We delete them when you unsubscribe or withdraw consent, or within 12 months after SIPTRUS launches publicly in New Delhi, whichever comes first, unless you've become a customer and agreed to new terms. Spam-prevention records are overwritten automatically within hours. Technical logs are kept by our hosting provider for a short period, usually no more than 30 days.
Your rights
Under the DPDP Act you can:
- Withdraw consent at any time, as easily as you gave it. Click "Unsubscribe and delete my details" in any email, or write to us. We'll stop using your data and delete it.
- Ask for a summary of the personal data we hold about you and who we've shared it with.
- Correct or update your name or email, or ask us to erase your data.
- Raise a grievance with our Grievance Officer (below), and then, if you're not satisfied, complain to the Data Protection Board of India.
- Nominate someone to use these rights for you if you die or become unable to.
To use any of these rights, email info@siptrus.com from the address you signed up with. We'll reply within the time the law sets, and we aim to reply within 7 days.
Age
The waitlist is for people aged 18 or over. Under the DPDP Act, anyone under 18 is a child, and we would need verifiable consent from a parent or guardian. If you're under 18, please don't join. If we learn that someone under 18 has joined, we'll delete their details.
How we protect it
- The whole site uses HTTPS encryption.
- Your details are stored in an access-controlled database that only authorised SIPTRUS team members can reach.
- We never store your IP address in readable form.
- We use bot checks, rate limits and strict browser security settings to block spam and attacks.
No system is perfectly secure. If a personal data breach affects you, we'll tell you and the Data Protection Board of India as the law requires, and explain what happened and what we're doing about it.
Cookies
See our Cookie Policy. In short, we use only what's needed to run and protect the site unless you agree to more.
Grievance Officer and contact
Uday Mehra
Grievance Officer and founder, SIPTRUS
New Delhi, India
Email: info@siptrus.com (subject line: "Grievance")
We'll acknowledge your grievance within 48 hours and aim to resolve it within 7 days, and always within the period the law requires.
Changes to this policy
If we change this policy, we'll update the date at the top. If a change affects how we use your data, we'll email you first and, where needed, ask for your consent again.