In short.
- We collect only what the waitlist needs: your email, and your name and role if you choose to give them.
- We use it to run the waitlist and tell you about early access. Product updates only if you tick the box.
- It is stored with Cloudflare. We never sell it, and we use no cookies, analytics or advertising trackers.
- It is deleted on a fixed schedule, or whenever you ask. Write to hello@trenzign.com.
1. Who we are
Trenzign is a trading name of Santosh Kumar Avadhutha, an individual (sole proprietor) based in Surat, Gujarat, India. Trenzign is not a registered company or LLP. In this policy, “Trenzign”, “we”, “us” and “our” mean Santosh Kumar Avadhutha trading as Trenzign.
For the personal data described here, we are the “data fiduciary” under India’s Digital Personal Data Protection Act, 2023, and the “body corporate” collecting information under the Information Technology Act, 2000. You can reach us at hello@trenzign.com.
2. What this policy covers
This policy covers the websites trenzign.com and trenzign.in (which redirects to trenzign.com), the Trenzign waitlist, emails we send about the waitlist, and messages you send us.
The Trenzign AI product is still in development and nothing is sold through this website. Before the product launches, we will update this policy to cover accounts, uploads, generated designs and payments, and we will tell waitlist members about the change by email.
3. The laws we follow
- Information Technology Act, 2000, section 43A, and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. These apply to us now. They require a published privacy policy, reasonable security practices and a named Grievance Officer.
- Digital Personal Data Protection Act, 2023, and the Digital Personal Data Protection Rules, 2025. The Rules were notified in November 2025 and come into force in phases. Most duties on data fiduciaries (notice, consent, security safeguards, breach notification, retention and erasure, and the rights described below) apply from about May 2027. We already follow them, because waitlist data collected today may still be held then.
4. What we collect
When you join the waitlist
| Data | Required? | Why |
|---|---|---|
| Email address | Yes | To add you to the waitlist and contact you about early access. |
| Name | No | To address you personally. |
| Role (for example printer, brand, designer, trader) | No | To understand who is interested and send relevant early-access information. |
| Whether you ticked the updates box | Yes (yes/no) | To know whether you agreed to product updates. |
| Date and time you joined, and the version of the privacy notice you saw | Yes (automatic) | To prove what you consented to, and when. |
We give each waitlist entry a random identifier, used in the unsubscribe and delete links in our emails.
Technical data
- Bot check. When the waitlist form loads, Cloudflare Turnstile runs in your browser to check that the sign-up comes from a person. It processes your IP address and technical signals about your browser and device. We receive only a pass/fail result.
- Rate limiting. To stop abuse, our server counts recent requests from the same network. It stores a one-way keyed hash of your IP address (not the address itself) together with a counter, and deletes it within 24 hours.
- Hosting logs. Like any web host, Cloudflare processes your IP address, browser type and the pages requested in order to deliver and secure the website. Our own code never writes your email address or IP address to logs.
When you write to us
If you email us, we receive your email address, your message and anything you choose to include.
What we do not collect
We do not collect payment details, government ID numbers, passwords, precise location, or any “sensitive personal data or information” as defined in the 2011 Rules. Please do not send us such information.
5. Why we use it, and on what basis
- Running the waitlist and emailing you about early access and launch: based on your consent, given when you tick the required box and select “Join the waitlist”.
- Occasional product updates: only if you tick the separate, optional updates box. This is a separate consent and you can withdraw it on its own.
- Keeping the website and waitlist secure (bot checks, rate limiting, preventing fake sign-ups): necessary to provide the service you asked for and to protect it.
- Replying to your messages and requests, including privacy requests and grievances.
- Meeting legal obligations, for example keeping a record that an erasure request was completed.
We do not sell your data, share it for advertising, or use it to build profiles about you. We do not make automated decisions about you.
6. Consent and withdrawing it
You give consent by ticking the box that confirms you are 18 or older and agree to this policy, and then selecting “Join the waitlist”. The updates box is never pre-ticked.
Withdrawing consent is as easy as giving it:
- Use the unsubscribe and delete link in any email we send. It opens trenzign.com/unsubscribe, where you can stop updates or delete all your waitlist data with one button.
- Or email hello@trenzign.com from the address you signed up with.
If you withdraw consent for updates, we stop sending them and keep you on the waitlist. If you withdraw consent for the waitlist, we delete your entry. Withdrawal does not affect anything we did lawfully before it.
7. Who processes it for us
We use a small number of service providers (“data processors”) who process data only on our instructions:
| Provider | What they do | Data involved |
|---|---|---|
| Cloudflare, Inc. (Cloudflare Workers, D1 database, CDN, DNS) | Hosts this website and stores the waitlist database. | Waitlist data; technical data such as IP address. |
| Cloudflare, Inc. (Turnstile) | Checks that sign-ups come from people, not bots. | IP address and browser and device signals, while the form is on screen. |
| Cloudflare, Inc. (Email Routing) | Forwards messages sent to hello@trenzign.com to our mailbox. | Your email and message. |
| Google LLC (email mailbox service) | The mailbox where messages forwarded from hello@trenzign.com are delivered and answered. | Your email and message. |
We do not send waitlist emails through a mailing service yet. Before we send our first waitlist email, we will name the email-delivery provider in this policy.
Cloudflare’s own handling of data is described in its privacy policy. We may disclose data if Indian law requires it, for example in response to a lawful order. Otherwise we share it with no one.
8. Processing outside India
Cloudflare runs a global network, so your data may be processed or stored in data centres outside India, and Google may process email outside India. Under section 16 of the DPDP Act, transfers outside India are allowed except to countries the Government of India specifically restricts. We will follow any such restriction once notified.
9. How long we keep it
| Data | How long |
|---|---|
| Waitlist entry (no updates opt-in) | Until 12 months after you join, or 90 days after we send our launch email, whichever is earlier. Then it is deleted automatically. |
| Waitlist entry (with updates opt-in) | While you stay subscribed, and at most 24 months after you last gave consent. If you unsubscribe from updates, the rule above applies. |
| Rate-limiting counters (hashed) | Up to 24 hours. |
| Erasure record (a random identifier, the reason and the date; no name or email) | 3 years, to show that deletions were carried out. |
| Database backups (Cloudflare D1 point-in-time recovery) | Overwritten within 30 days, so deleted data disappears from backups within 30 days. |
| Emails you send us | Up to 2 years after the matter is closed, unless the law requires longer. |
| Hosting and security logs held by Cloudflare | As set by Cloudflare for security and operations; our own application logs contain no email or IP address and are kept for a few days. |
A scheduled job on our server enforces these limits every day.
10. How we protect it
- The website is served only over HTTPS, with strict security headers.
- Data is stored in Cloudflare D1, which encrypts data at rest.
- Only the founder has access, using accounts protected by two-factor authentication.
- We collect as little as possible, and our code does not log email or IP addresses.
- Unsubscribe and delete links are signed, so they cannot be guessed or altered.
If a personal data breach happens, we will tell affected people without delay, explaining what happened and what they can do, and we will report it to the Data Protection Board of India as the law requires.
11. Your rights
You can ask us to:
- Access: confirm whether we hold your data, give you a summary of it, and tell you who we have shared it with.
- Correct, complete or update your data.
- Erase your data (unless the law requires us to keep it).
- Withdraw consent at any time (see section 6).
- Nominate another person to exercise your rights if you die or become unable to act.
- Have a grievance redressed (see section 14).
Email hello@trenzign.com from the address you signed up with, or use the link in our emails. If you write from a different address, we may ask you to confirm your identity before acting. There is no charge.
12. Children
The waitlist is for businesses and professionals aged 18 or over. We do not knowingly collect data from anyone under 18. If we learn that we have, we delete it.
13. Cookies, analytics and fonts
- This website sets no cookies of its own and uses no analytics, advertising or tracking scripts.
- Our fonts are hosted on our own server, so loading the page does not send your details to a font provider.
- The only third-party script is Cloudflare Turnstile, on pages with the waitlist form. It may use browser storage strictly to perform the bot check. We do not use it to track you.
If we ever add analytics or cookies that need consent, we will update this policy and ask first.
14. Grievance Officer and complaints
- Grievance Officer
- Santosh Kumar Avadhutha
- Organisation
- Santosh Kumar Avadhutha, trading as Trenzign (sole proprietor), Surat, Gujarat, India
- hello@trenzign.com
- Response times
- We acknowledge every complaint or request within 24 hours and resolve it within 15 days.
If you are not satisfied with our response, you can complain to the Data Protection Board of India under the DPDP Act, after first using our grievance process.
15. Changes to this policy
We will post any change on this page and update the date at the top. If a change affects how we use your data, we will email waitlist members before it takes effect and, where needed, ask for fresh consent. Each version of the waitlist notice is recorded, so we always know which version you agreed to.
Version: waitlist-notice-2026-11-14-v1. Last updated: 14 November 2026.