Privacy policy.

Steadyfolk provides interior surface protection and managed scenting across Bengaluru, Hyderabad, Goa and selected areas of Telangana and Andhra Pradesh. This policy explains what personal information we handle, on what basis, and what you can ask us to do with it. It applies from 15 October 2026 and replaces any earlier privacy notice shown on this website.

Who we are

Steadyfolk is a business operating in India under the brand name Steadyfolk (“Steadyfolk”, “we”, “us”). We are the data fiduciary for the personal information described here — that is, we decide why and how it is handled.

• Website: steadyfolk.in
• Email: steadyfolk.india@gmail.com
• Phone and WhatsApp: +91 90002 97938

What this policy covers

This policy covers:

• The steadyfolk.in website, including the enquiry form and the blog.
• Enquiries and conversations you have with us by phone, WhatsApp or email.
• Information we record while carrying out an assessment, installation or review for you.
• The internal tools Steadyfolk runs to prepare and publish its own marketing content, including the connection to a Google account described under Google user data.

It does not cover other companies' services that you reach from our site or use to contact us — WhatsApp, Instagram and Facebook each handle your information under their own privacy policies.

Information we collect

What you type into the enquiry form

The enquiry dialog on this website asks for your name, an email address or phone number, your neighbourhood or PIN code, the service you are considering, the type of space, its city, and any notes you choose to add about the surface or room.

These details are not sent anywhere when you type them. The form runs entirely in your browser. There is no server behind it, and the details are cleared when you close or reload the page. Nothing reaches Steadyfolk until you choose one of two things at the last step:

• Continue on WhatsApp. This opens WhatsApp with your details pre-filled as a draft message. You review it and decide whether to send. If you send it, we receive it and WhatsApp also handles it under its own privacy policy.
• Download a copy of your brief. This saves a text file on your own device. It is not sent to us.

What you send us directly

When you call, message or email us, we receive whatever you choose to include — typically your name, contact details, address or site location, and a description of the space, along with photographs or drawings if you send them.

What we record while serving you

If you become a client, we keep a Space Care Record and the related job paperwork: the address where work was carried out, the surfaces or rooms assessed, the materials and finishes identified, what was recommended, agreed and installed, the aftercare given, and the dates of any review. We also keep proposals, invoices and payment records as our tax and accounting obligations require.

Technical information from hosting

The website is served by Cloudflare. Like any web host, Cloudflare processes the request data that reaching a website necessarily involves — IP address, the page requested, timestamp, browser and device type — to deliver pages and to protect the site against attack and abuse. We do not use this to build a profile of you, and we do not combine it with anything else we hold.

How we use information

We use personal information only to:

• Reply to your enquiry and discuss your space and the service you asked about.
• Carry out an assessment, prepare a proposal, and agree scope and charges.
• Deliver the agreed work, hand over your Space Care Record, and arrange the reviews we agreed.
• Answer questions, resolve problems and honour any warranty or aftercare commitment.
• Keep accounts, invoices and the records that Indian tax and company law requires.
• Keep the website secure and working.
• With your permission, understand website visits and which pages and contact options are useful.

We rely on your consent for the enquiry you send us, and on the necessity of performing the service you asked for and meeting our legal obligations for the rest. We do not use your information for automated decision-making or profiling.

We do not sell personal information. We do not share it with advertisers or data brokers, and we do not add you to a marketing list because you made an enquiry. If we ever want to send you anything beyond the matter you contacted us about, we will ask you first.

Cookies and analytics

We use Google Analytics 4 only after you choose Allow analytics. You can choose Decline analytics and still use every part of the website. Until you allow it, the Google Analytics tag does not load and this website sends no analytics events to Google.

If you allow analytics, Google receives information about page visits, browser and device characteristics, approximate location, traffic sources, engagement and contact actions such as opening an enquiry or choosing WhatsApp, phone or email. Google Analytics uses first-party cookies, including _ga and _ga_*, to distinguish visits. We do not send enquiry names, email addresses, phone numbers, location fields, notes or WhatsApp message text to Analytics. Page query strings and fragments are omitted from the page addresses we send. Standard campaign labels may be sent separately to identify which marketing link brought a visit.

Advertising consent remains off, and we disable Google signals and advertising personalisation in our tag. Read how Google uses information from sites that use its services.

We save your choice in your browser's local storage under steadyfolk-analytics-consent-v1. Change it at any time with Analytics preferences in the footer. Withdrawing permission stops tracking, removes Analytics cookies set by this site and reloads the page. It does not erase information already processed by Google. You can also use Google's Analytics opt-out browser add-on.

Photographs, fonts and other website assets are served from our own domain.

Google user data

Steadyfolk runs an internal tool — used only by our own staff, not offered to the public — that helps us prepare, review and archive Steadyfolk's own marketing content. A member of our team may connect their Google account to that tool so finished creative work can be archived into Google Drive. This section explains exactly what that connection can and cannot do, and is provided for the people who authorise it and for Google's review of our application.

What we request access to

We request a single, narrow Google Drive permission: https://www.googleapis.com/auth/drive.file. This grants access only to the files our application itself creates, or that the account holder explicitly opens with it. It does not give the application the ability to see, list, download or alter any other file in the connected Google Drive, and we do not request any broader Drive permission.

We do not request access to Gmail, Google Contacts, Google Calendar, Google Photos or any other Google service. When an account is connected, we also receive the basic profile and email address Google returns as part of sign-in, which we use to identify which account the connection belongs to.

How we use it

The only use is archival: uploading Steadyfolk's own finished images and videos into a folder our application created inside the connected Drive, and reading back those same files to confirm an upload succeeded. Google user data is never used to build profiles, to serve or target advertising, to train, improve or fine-tune any artificial intelligence or machine-learning model, or for any purpose unrelated to that archive.

How it is stored and protected

The authorisation credential Google issues is stored on a private Steadyfolk server, in a file readable only by the account that runs the application, and is never placed in our source code repository or shared with anyone outside Steadyfolk. Access to that server is restricted to the Steadyfolk personnel who operate the tool. The files themselves stay in the account holder's own Google Drive; we do not keep a separate copy of Google user data outside it.

Sharing

We do not transfer Google user data to any third party. It is not sold, not rented, not shared for advertising, and not passed to any other application. It would only ever be disclosed if a law or a valid legal order required it, or with the explicit consent of the account holder.

Retention and deletion

Archived files remain in the account holder's Drive until they choose to delete them; they own and control that folder. The stored authorisation credential is deleted when the connection is no longer needed, when access is revoked, or on request. To have every trace of a connection removed from our systems, write to steadyfolk.india@gmail.com and we will delete the stored credential and confirm within 30 days.

Revoking access

The account holder can withdraw our application's access at any time, without asking us, at myaccount.google.com/permissions. Revoking stops all further access immediately. Files already archived stay in the Drive folder and can be deleted there.

Limited Use disclosure

Steadyfolk's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Who we share information with

We keep the list of people who touch your information short and deliberate. We share it only with:

• Cloudflare — hosts and protects this website, and therefore processes the request data described above.
• WhatsApp (Meta) — if you choose to contact us on WhatsApp, your message passes through WhatsApp under its own privacy policy.
• Google — for optional website analytics as described under Cookies and analytics, and for our internal content archive as described under Google user data.
• Technicians and installers working on your job — given only the address, access arrangements and surface details they need to do the work.
• Our accountants and, where required, government authorities — for invoicing, tax and statutory compliance.

We share what those parties need and no more. We do not permit any of them to use your information for their own marketing.

How long we keep information

• Enquiries that do not become work: kept for up to 12 months so we can pick the conversation back up, then deleted.
• Client records, including the Space Care Record: kept for the life of the service relationship and for as long as any warranty, aftercare or review commitment runs.
• Invoices, payment and tax records: kept for the period Indian tax and accounting law requires, currently at least eight years.
• Analytics event and user data: retained in Google Analytics for two months. Aggregated reports may be retained longer.
• Hosting logs: retained briefly by Cloudflare for security and then discarded.

You can ask us to delete anything sooner, and we will unless the law requires us to keep it.

How we protect information

The website is served over HTTPS. Access to enquiry messages, client records and connected accounts is limited to the Steadyfolk people who need it, protected by account passwords and, where the service supports it, two-factor authentication. Credentials for connected services are stored in restricted files on private systems, never in shared documents or in our code repository.

No method of transmission or storage is perfectly secure, and we do not claim otherwise. If a breach ever affected your personal information, we would tell you and the relevant authority as the law requires.

Your rights and choices

Under India's Digital Personal Data Protection Act, 2023, and as a matter of how we prefer to work, you can ask us to:

• Tell you what personal information we hold about you and what we have done with it.
• Correct anything inaccurate, incomplete or out of date.
• Delete what we hold, where we are not legally required to keep it.
• Withdraw a consent you previously gave, at any time.
• Nominate someone to exercise these rights on your behalf if you are unable to.
• Raise a grievance about how we have handled your information.

Write to steadyfolk.india@gmail.com or call +91 90002 97938. We will respond within 30 days. We may ask you to confirm your identity first, so that we do not disclose your information to someone else. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

Children's information

Our services are sold to adults, and this website is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has sent us personal information, contact us and we will delete it.

Changes to this policy

If our practices change — a new tool, a new service, a new connected account — we will update this page and change the effective date at the top. Material changes will be described here rather than slipped in quietly. The version you are reading is effective 15 October 2026.

Contact us

For any question about this policy, about what we hold, or to ask us to correct or delete something:

• Email: steadyfolk.india@gmail.com
• Phone and WhatsApp: +91 90002 97938
• Service area: Bengaluru, Hyderabad, Goa, and selected areas of Telangana and Andhra Pradesh.