1. Who we are
Apture (apture.in) is operated by Vancha Praneeth Reddy, an individual resident in India, as sole proprietor, trading as "Apture" ("we", "us"). We decide how and why your personal data is used, which makes us the "Data Fiduciary" under the Digital Personal Data Protection Act, 2023.
For any question about your personal data, write to privacy@apture.in, or to our postal address: 5th Floor, RMZ Spire, Silpa Gram Craft Village, HITEC City, Hyderabad, Telangana 500032.
2. What this policy covers
This policy covers Apture's website and, when they launch, its apps. It applies to clients, professionals, members of company teams, and anyone who visits Apture or contacts us.
3. The personal data we collect
When you create an account
- your first and last name and email address;
- your password (stored only in scrambled, "hashed" form) or, if you sign in with Google, your Google account's name, email and identifier;
- the account ID and public address Apture creates for you;
- two-step sign-in details, if you turn it on.
When you set up and use your account
- optional details: preferred name, phone number, city;
- for professionals and companies: your profile, photos, services, experience, team members and portfolio (which may include images of people and places);
- requirements you post, including location, budget, timing, photos and files;
- proposals, documents you share (such as quotes or agreements), Timeline cards, approvals, files and messages;
- reviews you write or receive;
- reports and complaints you send us.
Automatically
- technical data: IP address, browser and device type, pages visited and times, and security and error logs;
- small files called cookies, used only to keep you signed in and secure (section 13).
We do not ask for, and you should not upload, government ID numbers, bank or card details, or health information.
4. Why we use it
- Create and secure your account, and sign you in: Account details, technical data
- Show your public profile and portfolio (professionals): Profile and portfolio
- Show requirements to professionals in that field, and proposals to the client: Requirements, proposals, profile details
- Run conversations, shared documents and project Timelines between the people on a project: Project content, files, messages
- Send emails about your account and projects (for example, a new proposal or a password reset): Name, email, project activity
- Check and publish reviews from finished projects: Reviews, project records
- Keep Apture safe: prevent fraud and abuse, handle reports, enforce our Terms: All of the above, as needed
- Meet our legal duties, and respond to lawful requests from courts and authorities: As the law requires
- Understand and improve Apture, using combined figures that do not identify you: Technical data
We do not sell your personal data, and we do not show advertising.
5. The basis for using your data
We use your data with your consent, which you give when you create an account and agree to this policy, and for the purposes you provide it for. We also use data where the law requires it (for example, to keep records or answer a court order). You can withdraw consent at any time (section 10).
6. Who can see what
- A professional's public profile, portfolio and published reviews: Anyone, including people without an account
- Public project pages and their PDFs: Anyone
- A client's requirement: Professionals on Apture; only professionals in its field can respond. The budget is never shown to professionals
- Proposals: The client, and the professional or company team that sent it
- Shared documents, Timelines, project files and messages: The client and the hired professional or company team on that project, and anyone the client invites to the project
- Your phone number and email: Not shown to other users
- Reports and complaints: Only Apture
7. Who we share it with
- Other users, as described in section 6.
- Service providers who run parts of Apture for us and may use your data only on our instructions:
- Supabase (database and sign-in). Your data is stored in Mumbai, India;
- Cloudflare (photos, documents and other files, in its Asia-Pacific storage; videos, through its video service);
- Vercel (website hosting), region Mumbai, India;
- Resend (sending emails), region Tokyo, Japan;
- Google: only if you sign in with Google, and when a photographer shares a gallery from a Google Drive folder (shown to you from Google);
- your browser's notification service, only if you turn on notifications (it carries the notification, not your project data).
- Authorities, when the law requires it, for example a court order or a lawful request from a government agency.
- A successor company. We intend to form a company to run Apture. If we transfer Apture to it, your data will move with it. We will tell you beforehand, and you can delete your account if you do not agree.
8. Where your data is stored
Your account and project data are stored in India (Mumbai). Some service providers (section 7) may process data outside India, as the law allows, with safeguards in place.
9. How long we keep it
- While your account is open, we keep your data so Apture works for you.
- When you delete your account, we delete or anonymise your data, except:
- your sign-up details, kept for 180 days after deletion, as the IT Rules require;
- security and activity logs, kept for at least 1 year, as the data protection rules require;
- content we removed for breaking our Terms, and its records, kept for 180 days;
- anything we must keep longer by law or for a legal claim.
- Shared project records stay with the other party. What you shared with another user on a project (for example, a Timeline, document, file or message) stays available to them after you leave.
10. Your rights
You have the right to:
- access a summary of your personal data and of who we have shared it with (you can also download your data in Settings);
- correct, complete or update your data (most of it you can edit yourself);
- erase your data, by deleting your account in Settings or asking us;
- withdraw your consent at any time, as easily as you gave it. Because Apture cannot work without your account data, withdrawing consent means closing your account;
- nominate someone to exercise your rights if you die or become unable to;
- complain to us (section 15), and then, if you are not satisfied, to the Data Protection Board of India.
To make a request, write to privacy@apture.in from your account's email, with your account ID if you have it. We will reply by email within 30 days (and never later than the 90 days the law allows).
11. Keeping your data safe
We use reasonable security measures, including encrypted connections, scrambled passwords, access controls that limit who can see what, two-step sign-in, security logs and backups. No system is perfectly secure, so please use a strong password, keep it private and turn on two-step sign-in.
12. If something goes wrong
If there is a breach of personal data, we will tell the people affected without delay, explaining what happened, what it may mean for them, what we are doing and what they can do. We will also report it to the Data Protection Board of India and to CERT-In, as the law requires.
13. Cookies
We use only the cookies needed to keep you signed in and to keep Apture secure. We do not use advertising or tracking cookies. If we ever add analytics, we will update this policy first.
14. Children
Apture is only for people aged 18 or older. We do not knowingly collect data from anyone under 18. If we learn that an account belongs to someone under 18, we will close it and delete its data.
15. Grievance Officer and complaints
- Name: Vancha Praneeth Reddy
- Email: grievance@apture.in
- Phone: +91 76010 98040
- Address: 5th Floor, RMZ Spire, Silpa Gram Craft Village, HITEC City, Hyderabad, Telangana 500032
- Hours: Monday to Friday, 10 am to 6 pm IST (except public holidays)
You can also use the complaint form on our Contact page (apture.in/contact#grievances), with or without an account.
We acknowledge a complaint within 24 hours and resolve it within 7 days. If you are not satisfied, you can complain to the Data Protection Board of India. For complaints about content, you can also appeal to the Grievance Appellate Committee (https://www.gac.gov.in) within 30 days of our decision.
16. Changes to this policy
We may update this policy. We will tell you about material changes by email or on Apture before they apply, and show the version and date at the top.
17. Contact
privacy@apture.in · 5th Floor, RMZ Spire, Silpa Gram Craft Village, HITEC City, Hyderabad, Telangana 500032