Legal

Privacy Policy

How ATIIAD Technologies Pvt. Ltd. handles personal data collected through suprflo.com.

Effective 24 July 2026

The short version. We use analytics to understand aggregate site usage: Google Analytics 4 (which sets cookies) and PostHog (configured cookieless). We run no advertising pixels, no session recording, and no A/B testing. The only personal data you actively give us is what you type into the waitlist form, plus the referring page and any campaign parameters in the URL you arrived from. We do not sell it, and you can have it deleted by emailing hq@suprflo.com.

01Who we are

ATIIAD Technologies Pvt. Ltd. (trading as Baaz) is the data controller for personal data collected through this website. We are a company registered in India.

  • Registered office: WeWork, RMZ Latitude, Hebbal, Bengaluru, Karnataka 560024, India
  • Privacy contact: hq@suprflo.com

02What this policy covers

This policy covers the public Suprflo website: the marketing pages, the product walkthroughs, and the waitlist form. It does not cover the Suprflo product itself, which is in private pre-launch and is governed by the written agreement with each customer.

03What we collect

Information you give us

When you submit the waitlist form, we receive exactly the following fields and nothing else:

nameThe name you enter.
emailThe email address you enter, used to contact you about access.
spend_bandThe monthly LLM spend band you select. Used to prioritise the queue.
noteOptional free text describing your agents and workload. Please do not include confidential information, personal data about other people, or credentials in this field.

Information collected automatically with your submission

The following are captured at the moment you submit the form, to tell us how people find us:

sourceThe path and query string of the page you submitted from.
referrerThe page that linked you here, if your browser sent one.
utm_source, utm_medium, utm_campaignCampaign parameters, if the link you followed contained them.

These are recorded only when you submit the form. We do not track your browsing before or after that.

Server logs

The site is served from Amazon Web Services. In common with any web host, AWS records standard request information - IP address, timestamp, requested URL, user agent - for delivery, security and abuse prevention. We do not use these logs to build profiles of individual visitors.

04Cookies, analytics and tracking

We use two analytics tools to understand aggregate site usage: Google Analytics 4, which sets its own cookies, and PostHog, configured cookieless so it stores nothing on your device. Neither is used for advertising, and we run no ad pixels, no session recording, and no A/B testing.

Google Analytics 4 sets cookies (for example _ga) to measure page views and traffic sources. You can opt out with the Google Analytics opt-out add-on, or by blocking analytics in your browser.

PostHog records page views and basic interaction events to help us improve the site. We run it in cookieless mode, so it sets no cookies and writes nothing to your browser storage, and each visit is measured without a persistent identifier. Data is processed by PostHog, Inc. on its US cloud. We honor Do Not Track and Global Privacy Control signals, so enabling either in your browser stops it.

Aside from analytics, the site uses your browser’s local storage for functional purposes only. Local storage stays on your device and is never transmitted to us:

themeRemembers whether you chose light or dark mode.
access_tokenPresent only if you have signed in to the product. Used to keep you signed in.
suprflo_org_id, suprflo_project_id, suprflo_user_idPresent only for signed-in users. Remembers which workspace you last selected.

You can clear these at any time through your browser’s site-data settings. Clearing them signs you out and resets your theme preference; nothing else is affected.

05Why we use it, and for how long

We use waitlist data for one purpose: to evaluate and contact you about early access to Suprflo. We use the acquisition context (referrer and campaign parameters) in aggregate to understand which channels bring us relevant users.

Where the UK/EU GDPR applies, our lawful basis is legitimate interest - responding to a request you initiated by submitting the form - and, for any subsequent marketing email, your consent, which you can withdraw at any time.

We keep waitlist submissions for as long as the waitlist programme is active and you have not asked us to delete them. When the programme ends, we delete or anonymise submissions that have not converted into a customer relationship. You can ask us to delete your entry sooner, at any time, and we will do so.

06Who else sees it

We do not sell personal data, and we do not share it for advertising. We share it only with service providers that we need in order to operate:

  • Cloud hosting and delivery - Amazon Web Services, which hosts this site and the API that receives the form.
  • Email - the provider we use to reply to you.
  • Scheduling- if you book a call, that booking is handled by Google Calendar’s appointment scheduling, subject to Google’s own privacy policy.

We may also disclose data where we are legally required to, or to establish or defend legal claims. A current list of sub-processors is available on request from hq@suprflo.com.

07International transfers

We operate from India and the United States, and our infrastructure runs in AWS regions that may be outside your country. Where data is transferred out of the UK/EEA, we rely on appropriate safeguards, including the European Commission’s Standard Contractual Clauses where they apply.

08Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, restrict or object to how we use it, receive it in a portable format, and withdraw consent you previously gave. Under India’s Digital Personal Data Protection Act, 2023 you additionally have the right to nominate another person to exercise these rights on your behalf.

To exercise any of these, email hq@suprflo.com. We will respond within 30 days. You will not be charged, and exercising a right will not affect your place in the waitlist.

If you are in the UK or EEA and you believe we have handled your data improperly, you may complain to your national supervisory authority. We would appreciate the chance to resolve it first.

09Security

The site is served over HTTPS. Waitlist submissions are transmitted over TLS and stored in access-controlled systems. We limit access to personal data to people who need it to do their job.

We hold no third-party security certifications at this time. Suprflo is pre-launch and we have not completed SOC 2, ISO 27001 or equivalent audits. We would rather say that plainly than imply otherwise. If you need a security review before sharing anything sensitive, contact us and we will tell you exactly what we do and do not have.

10Children

This site is aimed at businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has submitted data to us, contact us and we will delete it.

11Changes

If we change this policy we will update the effective date above. Material changes affecting how we use data you have already given us will be notified by email where we hold one.

12Contact

Privacy questions and requests: hq@suprflo.com, or by post to ATIIAD Technologies Pvt. Ltd., WeWork, RMZ Latitude, Hebbal, Bengaluru, Karnataka 560024, India.


Suprflo is a product of ATIIAD Technologies Pvt. Ltd. (trading as Baaz). Questions about this page: hq@suprflo.com.