Legal
Privacy Policy
Last updated 7 October 2026
Who we are
This website and the Sarasto products are operated by Sarasto Labs Pvt. Ltd. (“Sarasto”, “we”), a company based in Kalanki, Kathmandu, Nepal. This policy explains what personal information we collect, why, and what you can ask us to do with it.
The short version
Browsing this website does not require you to give us any personal information. The site uses a cookie consent tool and the Google Ads tag, and the Google Ads tag only sets cookies if you agree to them. The sections below cover cookies, what happens when you contact us, and what happens when you use one of our products.
Cookies on this website
Consent banner. We use CookieHub to ask for and remember your cookie choices. Where the banner is shown, it records your choice so it does not ask again on every page.
Google Ads. We use the Google Ads tag to measure visits to this site and the results of our advertising. Until you accept advertising cookies, it is set not to store cookies on your device; Google may still receive limited information that a page was viewed, without cookies. If you accept, Google may set advertising cookies, as described in Google’s advertising policy. You can change your choice at any time from the cookie settings.
Information we collect
When you contact us. If you email us, call us, message us on WhatsApp or use the contact form (which sends an email from your own email app), we receive what you send: your name, contact details and the contents of your message. We use it to reply to you and nothing else.
When you use Sarasto Flow. Sarasto Flow processes messages and documents on behalf of the business that uses it. In that arrangement the business is the data controller and Sarasto is the processor: we handle the data according to that customer’s instructions and the agreement we have with them.
When you use Luno. Luno is open-source software that you run yourself, on an Android phone and SIM card you own. The messages and contacts it handles stay on infrastructure you control.
Operational logs. Our servers keep standard technical logs (IP address, timestamp, request path, error traces) to keep services running and to investigate faults and abuse.
What we do not do
- We do not sell personal information.
- We do not share personal information with advertisers or data brokers.
- We do not use customer data to train models for other customers.
How we protect it
Data is encrypted in transit and at rest. Internal access is scoped to least privilege, granted only where a job requires it, logged, and revocable. Customer data is logically isolated between tenants.
How long we keep it
Correspondence is retained while there is an active relationship and for as long as we may need it to answer questions about that work. Product data is retained according to the customer agreement governing it, and deleted on request or on termination as set out in that agreement. Operational logs are retained on a rolling short-term basis.
Service providers
We use third parties for hosting, infrastructure, and communications. This website is hosted by Vercel, cookie consent is handled by CookieHub, and advertising measurement by Google. They process data only to provide those services to us.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete personal information we hold about you, and to object to or restrict certain processing. Write to us and we will action it. If the data was given to us by a business using one of our products, we will refer you to that business, who controls it.
Changes
If we change this policy we will update the date at the top of this page. Material changes will be communicated directly to affected customers.
Contact
Questions about privacy go to info@sarasto.com or +977 974-7955477. Our address is Sarasto Labs Pvt. Ltd., Kalanki, Kathmandu, Nepal.