Legal

Privacy policy

Last updated 21 October 2026

This policy explains how Avenor Platforms Private Limited, which builds and sells Borentis (“Borentis”, “we”, “us”), handles personal data when you visit borentis.com, fill in a form on it, or write to us. It is written to meet India's Digital Personal Data Protection Act 2023 and, for visitors in the European Economic Area and the United Kingdom, the GDPR.

What this policy covers

This policy covers the website at borentis.com and the emails we exchange with you because of it. It does not cover the Borentis platform that our customers use to record and score conversations, run store checklists or manage field teams. Inside the platform, our customer decides what personal data is collected and why, and we process it only on the customer's instructions under our agreement with them. In the language of the DPDP Act, the customer is the data fiduciary and Borentis is the data processor. If you are a shopper, a store employee or a sales rep whose conversation or photos were captured by a Borentis customer, please contact that business first; we will help them answer you.

Who we are

Avenor Platforms Private Limited, A-803, Pioneer Urban Square, Sector 62, Gurgaon 122098, India. General questions: hello@borentis.com. Privacy requests and complaints: grievance@borentis.com.

What we collect and why

Information you give us

• Pricing requests. Your name, company, work email, phone number (optional), team size and the goals you choose. We use it to send you a plan and to follow up about it.
• Checklist template downloads. Your name, company email and phone number. We use it to email you the template and a download link, and to contact you about BorentisOps.
• Job applications. Your name, email, phone number, portfolio link (optional) and your CV. We use it only to assess your application and to contact you about it.
• Demo bookings. When you book a walkthrough, the booking page is run by Google Calendar. Google collects your name, email and any notes you add, and shares them with us so we can hold the meeting. Google's own privacy policy applies to that page.
• Emails and messages. Whatever you choose to send us, used to reply to you and to keep a record of the conversation.

Information collected automatically

• Google Analytics 4. Pages viewed, referring site, approximate location, device and browser type, and events such as a submitted form. It uses cookies. We use it to understand which pages are useful.
• Microsoft Clarity. Clicks, scrolling and mouse movement, used to produce heatmaps and session replays so we can find pages that are confusing or broken. It uses cookies and runs only on borentis.com. Clarity masks text typed into form fields by default.
• Hosting and security logs. Our host, Cloudflare, processes your IP address, browser details and the pages requested in order to serve the site and block attacks.
• Embedded video. The introduction video on the About page is embedded from YouTube in privacy-enhanced mode, which sets no YouTube cookies until you press play.

We do not sell personal data, we do not use it for advertising, and we do not run advertising trackers on this site.

Our legal basis

Under the DPDP Act we process the data you give us on the basis of your consent, which you give when you submit a form or write to us, and for the purpose you submitted it for. For visitors in the EEA and the UK, we rely on your consent or on steps you ask us to take before entering into a contract (pricing requests, demo bookings), on our legitimate interest in running and improving a secure website (logs, analytics), and on your consent for job applications. You can withdraw consent at any time by writing to us; this does not affect processing that happened before.

Who processes the data for us

We use these service providers, each bound by its own terms and data protection commitments:

• Cloudflare: website hosting, content delivery and security.
• Supabase: database and private file storage for template requests and job applications, including CVs.
• FormSubmit: delivers pricing requests and application notices to our inbox.
• Resend: sends the template emails.
• Google: Analytics, the demo booking calendar and the YouTube embed.
• Microsoft: Clarity.
• Our email provider: stores the emails we send and receive.

Within Borentis, only the founding team and the people who need the data for the purpose above can see it. We may also disclose personal data where Indian law or a court requires it.

Where the data is stored

Our providers store and process data outside India, including in the United States, the European Union and South Korea, where our database is hosted. We transfer data only to countries the Government of India has not restricted under the DPDP Act. For visitors in the EEA and the UK, transfers rely on the providers' standard contractual clauses or an equivalent safeguard.

How long we keep it

• Pricing requests, template requests and emails: up to 24 months after our last contact with you, then deleted, unless you become a customer.
• Job applications and CVs: up to 12 months after the role closes, then deleted, unless you ask us to keep you in mind for future roles.
• Analytics data: for the retention period set in Google Analytics and Clarity, no longer than 14 months.
• Security logs: for the periods Cloudflare applies to serve and protect the site.

You can ask us to delete your data sooner, as described below.

Your rights

Whether you are in India, the EEA, the UK or elsewhere, you can ask us to:

• tell you what personal data we hold about you and who we have shared it with;
• correct, complete or update it;
• delete it;
• withdraw a consent you gave;
• nominate someone to exercise these rights for you if you die or become unable to (DPDP Act);
• object to or restrict our processing, or receive your data in a portable format (GDPR).

Write to grievance@borentis.com with the subject line “Privacy request”. We may ask you to confirm your identity. We reply within 30 days.

Grievance officer

If you have a complaint about how we handle your personal data, contact our Grievance Officer at grievance@borentis.com or by post to the Grievance Officer, Avenor Platforms Private Limited, A-803, Pioneer Urban Square, Sector 62, Gurgaon 122098. We acknowledge complaints within 7 days and resolve them within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India, or, in the EEA or UK, to your local data protection authority.

Cookies and how to turn them off

Google Analytics and Microsoft Clarity set cookies to count visits and tell one visit from another. The site works without them. You can block or delete cookies in your browser settings, use Google's Analytics opt-out browser add-on, or turn on your browser's Global Privacy Control or Do Not Track setting.

Security

The site is served only over HTTPS. Form data is stored in a private database and file store that the public website can write to but cannot read back, and access is limited to the people who need it. No method of transmission or storage is perfectly secure; if a breach affects your personal data we will tell you and the authorities as the law requires.

Children

This site is meant for businesses and job applicants who are at least 18 years old. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, write to us and we will delete it.

Changes to this policy

We will update this page when our practices change and show the new date at the top. If a change materially affects how we use data you have already given us, we will tell you by email before it takes effect.