Privacy
Policy.

VUI Innovate Private Limited is a security product company based in Gurugram, Haryana, India. We build compliance, endpoint detection, AI security, and private communications products for Indian enterprises, MSMEs, and government organisations.

Our registered office is located in Gurugram, Haryana, India. We are committed to protecting your personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable Indian data protection laws.

When you visit our website at www.vuiinnovate.com, we collect minimal personal information. The types of information we may collect include:

• Information You Provide Directly: When you contact us via email at paras.goel@vuiinnovate.com or call us at +91 8447686862, we may collect your name, email address, phone number, company name, and any other information you choose to share in your communication.
• Server Log Data: Our web servers automatically collect standard technical information when you visit our website, including your IP address, browser type, operating system, referring URLs, pages visited, and access timestamps. This data is used for website security, performance monitoring, and troubleshooting.
• Essential Cookies: Our website uses only essential cookies required for basic functionality. We do not use analytics cookies, advertising cookies, or any tracking technologies.

We use the information we collect for the following purposes:

• To respond to your inquiries and communicate with you about our products and services
• To provide customer support and address your questions or concerns
• To maintain and improve the security and performance of our website
• To comply with legal obligations under Indian law
• To protect the rights, privacy, safety, or property of VUI Innovate, our users, or the public

We process your personal data based on your consent, which you provide when you voluntarily contact us. You may withdraw your consent at any time by contacting us at the details provided below.

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following limited circumstances:

• Service Providers: We use Firebase Hosting (provided by Google) to serve our website. Google may process certain technical data as part of this service. Google's privacy policy governs their handling of this data.
• Legal Requirements: We may disclose your information if required by Indian law, court order, or government regulation, or to protect the rights and safety of VUI Innovate or others.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your data.

Your personal data is stored on secure servers. We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL
• Access controls limiting who can access personal data
• Regular security assessments and updates
• Employee training on data protection practices

While we take reasonable steps to protect your data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to promptly addressing any security incidents in accordance with applicable Indian law.

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required or permitted by Indian law. Specifically:

• Communication records (emails, call logs) are retained for a period of 3 years from the date of last contact, unless you request deletion
• Server log data is retained for a maximum of 90 days for security and troubleshooting purposes
• When your data is no longer needed, we will securely delete or anonymise it

Under the Digital Personal Data Protection Act, 2023, you have the following rights as a Data Principal:

• Right to Access: You have the right to request access to the personal data we hold about you
• Right to Correction: You have the right to request correction of inaccurate or incomplete personal data
• Right to Erasure: You have the right to request deletion of your personal data when it is no longer necessary for the purpose for which it was collected
• Right to Withdraw Consent: You have the right to withdraw your consent for data processing at any time
• Right to Grievance Redressal: You have the right to file a complaint with us regarding any grievances related to your personal data

To exercise any of these rights, please contact our Data Protection Officer using the contact details provided at the end of this policy. We will respond to your request within 30 days, as required by the DPDP Act.

Our website and services are intended for use by businesses, government organisations, and professionals. We do not knowingly collect personal data from children under the age of 18. If we learn that we have collected personal data from a child under 18 without parental consent, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

Our website is hosted on Firebase, a service provided by Google. As part of this hosting arrangement, your data may be processed on servers located outside India. We ensure that any such transfers comply with the requirements of the DPDP Act and that adequate safeguards are in place to protect your personal data.

Google's infrastructure includes data centres in multiple regions, and they implement robust security measures to protect data during transfer and storage.

Our website may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

We may update this privacy policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. We will notify you of any material changes by posting the updated policy on our website with a revised "Last Updated" date.

We encourage you to review this policy periodically to stay informed about how we are protecting your information.

In accordance with the Digital Personal Data Protection Act, 2023, we have appointed a Grievance Officer to address any concerns or complaints regarding your personal data. You may contact our Grievance Officer at:

Name: Paras Goel
Email: paras.goel@vuiinnovate.com
Phone: +91 8447686862
Address: VUI Innovate Private Limited, Gurugram, Haryana, India

We will acknowledge your grievance within 48 hours and endeavour to resolve it within 30 days from the date of receipt.