Your data, on your terms.

GDPR

Compliant

DPDP Act

India-compliant

CCPA

California-ready

Third-party data sales

This policy describes what personal information FableSquare collects, why we collect it, how we use and store it, and your rights over that data. We’ve written it in plain English. If something is unclear, email [email protected] and we’ll answer directly.

Summary

The short version, before the legal one.

We collect only the data we need to deliver our services and respond to you. We don’t sell, rent or trade your data. We store it securely, delete it when it’s no longer needed, and give you control over it. Here’s how that plays out in practice.

01.If you fill our contact form, we use the information to reply to you. That’s it.
02.We use Google Analytics to understand site traffic. You can opt out with any standard browser extension.
03.Our newsletter is double opt-in. One-click unsubscribe in every email.
04.We never buy email lists, run dark patterns or hide consent behind legalese.

What we collect

The information covered by this policy.

Depending on how you interact with FableSquare, we may collect some or all of the following. Each category has a clear purpose and a defined retention window.

Contact form data

Name, email, phone, company, service interest, message. Used to respond to your enquiry. Retained for 24 months unless you become a client.

Client engagement data

Business details, project files, communications and deliverables shared during an engagement. Retained for 7 years per Indian tax rules, then deleted.

Website analytics

Anonymous or pseudonymous IP, browser, pages viewed, referral source. Used to improve the site. Retained for 14 months by Google Analytics.

Newsletter subscriptions

Email address, first name, subscription date. Stored in our ESP. Retained until you unsubscribe.

Cookies & pixels

Essential site cookies, analytics cookies (with consent), and the Meta / LinkedIn pixels for remarketing (with consent).

Job applications

CV, portfolio, contact details, cover note. Retained for 12 months, then deleted unless you ask us to keep it longer.

Your rights

What you can ask us to do.

Under GDPR, DPDP (India) and CCPA (California), you have rights over your data. Here’s how to exercise them. We respond within 30 days, usually much faster.

Request a copy

Email [email protected] and ask for a copy of the personal data we hold on you. We’ll send it in a portable format within 30 days.

Correct inaccurate data

Tell us what’s wrong and what it should be. We update it in our systems within 30 days and confirm in writing.

Delete your data

Ask us to delete all personal data. We’ll honour the request, except where we’re required by law to retain it (e.g. invoices for 7 years).

Opt out of marketing

Unsubscribe from any email with one click. Or tell us in writing you don’t want to hear from us. We stop immediately.

How we protect it

What we do behind the scenes.

Encryption in transit and at rest.

Every connection to our site uses TLS 1.2+. Client files are stored in encrypted cloud drives (Google Workspace, Dropbox Enterprise) with 2FA enforced on every account.

Access on a need-to-know basis.

Only team members working on your account have access to your data. Offboarded team members lose access the same day they leave. All admin actions are logged.

Breach notification within 72 hours.

In the unlikely event of a personal-data breach that affects you, we’ll notify you and the relevant data protection authority within 72 hours of discovery, as required under GDPR and DPDP.

Policy FAQs

Common questions.

Questions that tend to come up in the first discovery call. If yours isn’t here, just ask.

Do you sell my data?

No. FableSquare has never sold, rented or traded personal data and never will. We are a services business, not an ad-tech business. Our revenue comes from clients paying us to do work — not from monetising visitors.

Who processes my data outside FableSquare?

A short list of trusted sub-processors: Google (Workspace + Analytics), Dropbox, Meta/Google ads pixels (with your consent), our website host (Hostinger), our ESP (ConvertKit). Each is GDPR-compliant. Full list on request.

How do I contact your DPO?

FableSquare is a small agency and does not have a formal DPO. Privacy queries are handled by our co-founder Mangal Karnad — reach him at [email protected]. Serious complaints can also be raised with the Indian Data Protection Board or your local authority.

How long do you keep my data?

Retention windows are listed above by category. TL;DR: 24 months for contact form submissions, 7 years for client records (tax law), 14 months for analytics, indefinite for newsletter until you unsubscribe.

Is this policy legally binding?

Yes. This policy is the binding privacy notice under which FableSquare processes personal data. Material changes will be notified in the footer and via the newsletter. The last updated date appears at the top of this page.

Questions about your data?

Email us directly.

Privacy questions don’t go to a support desk here. Email [email protected] and a co-founder will reply personally, usually within one business day.