Privacy Policy

1. Overview

Access Authority ("we", "us", "our") is a product-led technology company established in 2026, based in India. We build and operate our own digital products — Qrastra, Chitrakit and Tapegali — and provide web, app, software, design and SEO services to clients.

This Privacy Policy explains what information we collect when you use our websites and products, why we collect it, and the choices you have. It applies to:

• accessauthority.in and its subpages
• Our products: Qrastra, Chitrakit and Tapegali (each may have its own additional notice where relevant)
• Any communication you have with us (email, contact form)

By using our website or products, you agree to this policy. If you do not agree, please do not use our services.

2. Data we collect

We collect only what is necessary to run our products and respond to your enquiries. Broadly, we collect two types of information:

2.1 Information you provide to us

• Contact details — when you use our contact form or email us, we receive your name, email address, phone number (if shared) and the message content.
• Project information — if you engage us for a client project, we may collect business details, requirements and files you share.
• Product account data — if you create an account in one of our products (e.g. Qrastra paid plans), we collect your name, email and account credentials.

2.2 Information collected automatically

• Usage data — pages visited, time spent, referring links, browser and device type.
• Technical data — IP address, approximate location (city-level), operating system.
• Cookies — see section 4 below for details.

We do not collect sensitive personal data such as health records, financial account numbers, or government ID numbers through our website.

3. How we use your data

We use the information we collect only for these purposes:

• To respond to enquiries — replying to your contact form or email within a reasonable time.
• To deliver client projects — planning, designing and building what you asked for.
• To run our products — providing QR code generation, image tooling, music discovery, and other product features.
• To improve our services — understanding what is used, what is ignored, and where we can do better.
• To communicate updates — only if you subscribed to our newsletter, and you can unsubscribe at any time.
• To meet legal obligations — such as responding to lawful requests, if any.

We do not sell your personal data. We do not share your data with advertisers.

4. Cookies

Cookies are small text files placed on your device. We use them in three ways:

• Essential cookies — needed for the website to work (e.g. remembering your theme or login state).
• Analytics cookies — help us understand how visitors use the site (via tools such as Google Analytics).
• Preference cookies — remember your choices, like search filters or language.

You can disable cookies in your browser settings at any time. This may affect some features of our website.

For more details, see our Cookie Policy.

5. Third parties

We use a small number of trusted services to operate our website and products. These may process some data on our behalf:

• Google Analytics — anonymous usage statistics to help us improve.
• Google Fonts — fonts served from Google's CDN.
• Hosting providers — the servers that store and serve our website and products.
• Email providers — used to send and receive messages (contact form replies, newsletters).

Each of these services has its own privacy policy. We choose providers that take privacy seriously, but we cannot control their internal practices.

6. Data retention

We keep your data only as long as needed for the purpose it was collected:

• Contact enquiries — up to 24 months after the last exchange.
• Client project data — for the duration of the project plus 3 years, to handle follow-up and support.
• Newsletter subscriptions — until you unsubscribe.
• Analytics data — typically 14 months, as set by our analytics provider.

When data is no longer needed, we delete it securely.

7. Your rights

Depending on where you live, you may have the following rights over your personal data:

• Access — request a copy of the data we hold about you.
• Correction — ask us to fix inaccurate or incomplete data.
• Deletion — request that we delete your data, where we are not legally required to keep it.
• Objection — object to how we use your data, in certain cases.
• Portability — receive your data in a structured, machine-readable format.
• Withdraw consent — where our processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, email us at info@accessauthority.in. We respond within 30 days.

8. Children's privacy

Our website and products are not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

9. Policy changes

We may update this Privacy Policy occasionally — for example, when we add a new feature or a law changes. When we do, we update the "Last updated" date at the top of this page.

For significant changes, we will notify you by email (if you are subscribed) or with a notice on our website.

10. Contact us

Questions, concerns, or want to exercise your rights? Reach us at: