Privacy Policy

This Privacy Policy governs the collection, use, processing, and disclosure of personal data by Vyqda Technologies Private Limited ("we," "us," "our," or "Company"), a private limited company incorporated under the Companies Act, 2013.

We are committed to protecting your privacy and ensuring the security of your personal data in accordance with the Information Technology Act, 2000, IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023.

2.1 Personal Data

We may collect the following categories of personal data:

• Contact Information: Name, email address, phone number, postal address
• Professional Information: Company name, job title, business address, industry
• Account Information: Username, encrypted passwords, account preferences
• Communication Data: Messages, feedback, support requests, and correspondence
• Financial Information: Billing address, payment method details (processed securely through third-party payment processors)

2.2 Technical Data

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Analytics: Website navigation patterns, feature usage, session duration
• Cookies and Tracking: Authentication cookies, preference cookies, analytics cookies
• Log Data: Server logs, error reports, performance metrics

2.3 Business Data

• Data you input into our software products (VYPOS, VYFOO, VYHRM, etc.)
• Business process information and workflows
• Integration data from third-party business systems
• Custom development requirements and specifications

We process your personal data for the following lawful purposes:

3.1 Service Provision

• Delivering our software products and services
• Processing transactions and managing accounts
• Providing customer support and technical assistance
• Customizing and improving user experience

3.2 Business Operations

• Contract performance and billing
• Fraud prevention and security monitoring
• Legal compliance and regulatory obligations
• Business analytics and performance improvement

3.3 Communication

• Service notifications and updates
• Marketing communications (with consent)
• Industry insights and educational content
• Event invitations and announcements

We process your personal data based on the following legal grounds:

We may share your personal data in the following circumstances:

5.1 Service Providers

• Cloud Infrastructure: AWS, Google Cloud, Azure for hosting and storage
• Payment Processors: Razorpay, PayU, and other secure payment gateways
• Communication Services: Email providers, SMS gateways, WhatsApp Business API
• Analytics Providers: Google Analytics, marketing automation platforms

5.2 Legal Requirements

• Compliance with court orders, legal processes, or government requests
• Protection of our legal rights and interests
• Investigation of fraud, security threats, or illegal activities
• Tax and regulatory reporting obligations

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, personal data may be transferred as part of the business transaction, subject to appropriate confidentiality agreements.

We implement comprehensive security measures to protect your personal data:

6.1 Technical Safeguards

• Encryption: Data encryption in transit (SSL/TLS) and at rest (AES-256)
• Access Controls: Multi-factor authentication and role-based access
• Network Security: Firewalls, intrusion detection, and monitoring systems
• Regular Backups: Automated, encrypted backups with disaster recovery

6.2 Administrative Safeguards

• Employee training on data protection and security practices
• Background checks for personnel with data access
• Incident response procedures and breach notification protocols
• Regular security audits and vulnerability assessments

6.3 Physical Safeguards

• Secure data centers with restricted physical access
• Environmental controls and monitoring systems
• Secure disposal of hardware and storage media

Under Indian data protection laws, you have the following rights:

We retain personal data for the following periods:

Note: Some data may be retained for longer periods as required by Indian law, including the Companies Act, Income Tax Act, and other applicable regulations.

Your personal data may be transferred to and processed in countries outside India for the following purposes:

• Cloud Services: Data stored on international cloud platforms with Indian data residency options
• Service Providers: Third-party vendors providing specialized services
• Business Operations: Group companies or partners for service delivery

All international transfers comply with Indian data protection requirements and include appropriate safeguards such as:

• Standard Contractual Clauses approved by regulatory authorities
• Adequacy decisions for specific countries
• Binding Corporate Rules for intra-group transfers
• Explicit consent where required by law

We use cookies and similar technologies to enhance your experience:

10.1 Types of Cookies

10.2 Cookie Management

You can control cookie preferences through your browser settings or our cookie consent manager. Disabling essential cookies may affect website functionality.

We may update this Privacy Policy from time to time to reflect changes in:

• Our business practices and services
• Legal and regulatory requirements
• Technology and security measures
• Industry best practices

Notification of Changes: We will notify you of material changes through email, website notifications, or other appropriate means at least 30 days before the changes take effect.

Version History: Previous versions of this policy are available upon request for your reference.

For any questions, concerns, or requests regarding this Privacy Policy or data protection, please contact: