Privacy Policy

1. Who We Are and What This Policy Covers

This Privacy Policy applies to the website srinivasvakati.com (the “Site”) and to the services offered through it (together, the “Services”). The Site is operated by Srinivas Vakati under the brand Dashboard CEO (“Dashboard CEO”, “we”, “us”, “our”), a business systems consulting practice based in India.

Our Services include:

Scalable Systems OS:our 12-week done-with-you program that helps founders of service-based businesses build operating systems that reduce founder dependency.
Dashboard CEO Scorecard:our diagnostic assessment of how dependent a business is on its founder.
Free resources, newsletters, content, and discovery or strategy calls.

Under Indian law, we act as the “Data Fiduciary” for personal data we collect through the Site. “You” means any individual who visits the Site or uses the Services.

By using the Site or submitting your information, you agree to this policy. If you do not agree, please do not use the Site.

2. Applicable Laws

We build this policy on Indian law first, and then add information for visitors in other regions.

India:the Information Technology Act, 2000; the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011; and the Digital Personal Data Protection Act, 2023 and the rules made under it, as they come into force.
International visitors:the GDPR and UK GDPR, the Australian Privacy Act 1988 and applicable US state laws, including the California Consumer Privacy Act (see Section 17).

3. Information We Collect

3.1 Information you give us

We collect the following information when you choose to give it to us:

Contact details:your name, email address and phone number, when you sign up for emails, download a free resource, send an enquiry or book a call.
Scorecard data:your answers, your score, and the business information you provide, such as team size, industry and how work flows through your business, when you complete the Dashboard CEO Scorecard.
Booking data:your name, email, phone number, time zone and any answers to booking questions, when you book a call through Booklikeaboss or Calendly.
Business information:your company name, role, team size, processes, documents and any financial or operational details you choose to share during calls and while we deliver Scalable Systems OS or other services.
Transaction data:your name, billing details, amount, payment status and invoice records, when you purchase through Razorpay, Stripe, PayPal or Instamojo. We do not receive or store your full card number, CVV or UPI PIN.
Communications:the emails, messages and feedback you send us.
Testimonials and reviews:your name, photo, business, role and the words you submit, only when you choose to submit them or give us written permission.

3.2 Information collected automatically

When you use the Site, we and our analytics and marketing partners collect technical data through cookies, pixels and similar technologies, including:

IP address and approximate location
Browser type, device type and operating system
Pages visited, time spent, referring website and links clicked
Email engagement, such as whether you opened or clicked an email we sent

3.3 Sensitive information

We do not ask for passwords, financial account numbers, government identity numbers, health data or other sensitive personal data through the Site. Please do not send these to us. If you share confidential business financials during client work, Section 12 applies.

3.4 Non-personal information

We also collect anonymous or aggregated data that does not identify you, such as total visitor counts. We use this to understand how the Site performs. When we combine non-personal data with personal data, we treat the combined data as personal data.

4. How and Why We Use Your Information

We use your personal data for these purposes:

Deliver what you ask for:send your Scorecard results, free resources, booking confirmations and reminders. Basis: consent and contract.
Provide our services:run discovery calls, deliver Scalable Systems OS and share program materials. Basis: contract and consent.
Process payments and keep records:issue invoices, confirm payment, and meet tax and accounting rules. Basis: contract and legal obligation.
Send you content and offers:newsletters, updates and invitations about our Services. Basis: consent and legitimate interests.
Improve the Site and our services:analyse visits, test content and refine the Scorecard. Basis: legitimate interests and consent.
Measure and improve our marketing:understand which content brings visitors and build audiences on Meta platforms. Basis: consent.
Protect our business and comply with law:prevent fraud or misuse, respond to legal requests and enforce our terms. Basis: legal obligation and legitimate interests.

We use your personal data only for these purposes, or for a purpose compatible with them. If we need to use it for a new purpose, we will ask for your consent first where the law requires it.

5. Consent

We rely on your consent wherever Indian law requires it. When you submit a form, complete the Scorecard, book a call or buy a program, you give us free, specific, informed and unambiguous consent to process your data for the purposes stated at that point and in this policy.

You can withdraw consent at any timeby emailing srinivas@srinivasvakati.com or using the unsubscribe link in any email.
Withdrawal does not affect processing we carried out before you withdrew.
If you withdraw consent for something we need to deliver a service, we may no longer be able to provide that service.

Joining our email list, downloading a free resource or submitting the Scorecard may add you to our newsletter. You can leave at any time and the free resource or Scorecard result remains yours.

6. Cookies, Analytics and Pixels

A cookie is a small text file that a website places on your device. We use cookies and similar technologies for three purposes:

Essential:to make the Site work and remember your settings.
Analytics:Google Analytics shows us how visitors use the Site, such as which pages they read and how long they stay.
Marketing:the Meta Pixel measures the results of our content and helps us reach relevant audiences on Facebook and Instagram.

We do not currently show a cookie banner. By continuing to use the Site, you accept the use of these cookies and technologies as described here. If you object to analytics or marketing cookies, you can block them using the options below, or email srinivas@srinivasvakati.com and we will review your request and respond within 30 days. You can control them at any time:

Change your browser settings to block or delete cookies. Some Site features may not work if you block all cookies.
Opt out of Google Analytics with the Google Analytics Opt-out Browser Add-on.
Manage ad preferences in your Facebook and Instagram settings.

We do not run paid third-party advertising on the Site and we do not display third-party ads.

7. Who We Share Your Information With

We do not sell, rent or lease your personal information or our email list to anyone. We share data only with service providers who process it for us:

Kit:runs our email sign-ups, newsletters and automated emails. It handles your name, email, sign-up source, and email opens and clicks.
Booklikeaboss and Calendly:run call booking and scheduling. They handle your name, email, phone number, time zone and booking details.
Google Analytics:measures Site usage. It handles cookie identifiers, IP-derived location, pages viewed and device data.
Meta (Facebook and Instagram):provides marketing measurement and audience tools through the Meta Pixel. It handles cookie identifiers, page views and actions on the Site.
Razorpay and Instamojo:process payments in Indian rupees. They handle your name, email, phone number, billing details and payment status.
Stripe and PayPal:process international payments. They handle your name, email, billing details and payment status.
Website hosting and platform providers:host and run the Site. They handle technical logs and form submissions.
Professional advisers:accountants, lawyers and auditors who need records to advise us.

Each provider uses your data under its own privacy policy for the services it provides. We choose providers that maintain reasonable security standards, and we ask them to use your data only to provide their service to us.

We may also disclose personal data:

When the law, a court order or a government authority requires it.
To protect our rights, safety or property, or the rights and safety of others, or to investigate fraud or misuse.
As part of a sale, merger or restructuring of our business. We will tell you if that happens and your rights under this policy will continue to apply.

8. Transfers of Data Outside India

Many of the providers in Section 7 store and process data on servers outside India, including in the United States and the European Union. By using the Site, you understand that your personal data may be transferred to and processed in those countries.

We take reasonable steps to make sure your data stays protected when it leaves India, including working with providers that publish security and data protection commitments. We will comply with any restrictions the Government of India places on transfers to specific countries.

9. How Long We Keep Your Information

We keep personal data only for as long as we need it for the purpose we collected it, to deliver our services, or to meet legal, tax and accounting requirements. When we no longer need it, we delete it or anonymise it.

Email subscribers:we keep your details until you unsubscribe or ask us to delete them.
Scorecard, booking and enquiry data:we keep it while it is useful for the purpose you gave it, and delete it when you ask or when we no longer need it.
Client records and program materials:we keep them for the length of the engagement and for a reasonable period after it ends, so we can support you and handle any follow-up.
Invoices and payment records:we keep them for the period Indian tax, GST and accounting law requires.

You can ask us to delete your data sooner at any time (see Section 11), unless the law requires us to keep it.

10. Security

We use reasonable security practices and procedures that suit the nature of the data we hold, as Indian law requires. These include access controls, use of reputable, encrypted platforms, and limiting access to people who need it.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Email is not always encrypted, so please do not send passwords or financial account details by email.

If a personal data breach affects you, we will notify you and the relevant authorities as the law requires, and we will tell you what happened, what data was involved and what steps to take.

11. Your Rights

11.1 Under Indian law

You have the right to:

Access:get a summary of the personal data we hold about you and how we use it.
Correction and completion:ask us to fix inaccurate or incomplete data.
Erasure:ask us to delete your data when you no longer want us to hold it, unless the law requires us to keep it.
Withdraw consent:at any time, as described in Section 5.
Grievance redressal:raise a complaint with us first (see Section 18).
Nominate:name another person to exercise your rights if you die or become incapacitated.

To use any of these rights, email srinivas@srinivasvakati.com. We may ask you to verify your identity first. We aim to respond within 30 days. If we cannot resolve your complaint, you may approach the Data Protection Board of India once it is operational.

11.2 In other regions

Visitors in the EU, UK, Australia and the United States have additional rights, described in Section 17.

12. Client Information and Confidentiality

Founders who work with us often share sensitive business information, such as financials, processes, SOPs, team structures and customer details. We treat all of it as confidential.

We use client information only to deliver the engagement.
We do not share it with anyone outside our service providers, and only to the extent needed to deliver the work.
We do not use it in our content, case studies or marketing in any identifiable form without your written permission.
Our client agreement sets out the confidentiality terms in detail and prevails over this policy where the two differ.

If you share personal data about your own employees or customers with us, you are responsible for having the right to share it. Please share only what is necessary and anonymise it where you can.

13. Calls, Recordings and AI Tools

We may record or transcribe calls to take accurate notes and to deliver your program. We will ask for your consent before recording starts, and you can ask us to stop recording or to delete a recording at any time.

We may use AI-assisted tools, such as transcription or drafting tools, to support our work. We do not use your confidential client information to train public AI models.

14. Testimonials, Reviews and Public Comments

We display testimonials and reviews on the Site and in our content.

We publish a client testimonial, name, photo or result only with the person’s consent, and we can remove it on request.
Reviews or comments you post on a public part of the Site, or on our social media pages, are visible to others and may be collected by third parties. Please do not post sensitive information.
To have your testimonial or comment edited or removed, email srinivas@srinivasvakati.com. We remove it within 14 days of verifying your request.

15. Children

The Site and Services are for adults and businesses. We do not knowingly collect personal data from anyone under 18 years of age, which is the age of a child under the Indian Digital Personal Data Protection Act. If you believe a child has given us personal data, please email us and we will delete it promptly.

16. Links to Other Websites

The Site, our emails and our content may link to other websites and platforms, such as LinkedIn, YouTube, Instagram and tools we recommend. We do not control these and are not responsible for their privacy practices. Please read their policies before you share information with them.

17. Visitors from the EU, UK, Australia and the United States

We are based in India, and this policy applies to all visitors. If you are in the European Union, United Kingdom, Australia or the United States, the points below apply in addition to the rest of this policy.

Your rights:you can ask to access, correct, delete or receive a copy of your personal data, object to or restrict how we use it, and withdraw consent at any time. Email srinivas@srinivasvakati.com. We may verify your identity first and aim to respond within 30 days.
Who is responsible:Srinivas Vakati, operating Dashboard CEO, is the controller of your personal data.
Why we use your data (EU and UK):consent, contract, legitimate interests and legal obligation, as shown in Section 4. We do not make decisions about you based solely on automated processing.
Transfers:your data moves to India and to the countries where our providers operate (see Section 8). Where required, we rely on safeguards such as the standard contractual clauses our providers maintain. For Australian visitors, we take reasonable steps to make sure overseas recipients handle your information in line with the Australian Privacy Principles.
United States:we do not sell personal information. Use of the Meta Pixel may count as “sharing” under California law, and you can opt out through your browser settings or by emailing us. In the last 12 months we collected identifiers, commercial information, internet activity and professional information. You may use an authorised agent to make a request.
Complaints:please contact us first. If we do not resolve it, you may complain to your local regulator, such as your EU data protection authority, the UK Information Commissioner’s Office, the Office of the Australian Information Commissioner, or the California Privacy Protection Agency.

18. Grievance Officer and Contact

In line with Indian law, you can direct questions, complaints and requests about your personal data to our Grievance Officer. We acknowledge complaints within 48 hours and aim to resolve them within 30 days.

Grievance Officer: Srinivas Vakati

Brand: Dashboard CEO

Email: srinivas@srinivasvakati.com

Website: srinivasvakati.com

19. Changes to This Policy

We may update this policy when our practices, tools or the law change. We post the new version on this page with a new “Last updated” date. If a change is significant, we will tell you by email or by a notice on the Site, and where the law requires it, we will ask for your consent again. Please check this page from time to time.

Last updated: 5 October 2026

This policy should be read together with our Website Terms of Use.