Privacy Policy

1. Information We Collect

We may collect information in the following categories:

• Contact & Account Data: When you register an account, submit an inquiry form, or contact us, we collect your name, email address, organization name, phone number, and any custom message details.
• Technical & Log Data: When accessing our services, our servers log device IP addresses, browser user agents, referring URLs, operating system metadata, and access timestamps for security, rate-limiting, and auditing.
• Subscription & Billing Metadata: When subscribing to services, we maintain records of subscription tiers, billing dates, transaction identifiers, and invoices.

2. Payment Processing & Gateway Information

We do not collect, process, or store sensitive credit card numbers, debit card PINs, CVV codes, or net banking credentials on our local servers. Payment transactions are executed directly via SSL/TLS 256-bit encrypted communication with PCI-DSS certified payment processors.

3. How We Use Collected Data

Collected data is used strictly for legitimate business purposes:

• Provisioning and maintaining your tenant subdomain, client admin consoles, and user logins.
• Responding to your project inquiries, quotation requests, and technical support tickets.
• Processing authorized subscription billings and delivering transaction receipts.
• Protecting our services from unauthorized access, fraud, abuse, and DDoS attacks.
• Complying with statutory tax, invoicing, and regulatory obligations in India.

4. Data Sharing & Third-Party Disclosure

We do not sell, rent, trade, or monetize your personal data. We disclose data solely in these limited scenarios:

• Payment Service Providers: Sharing transaction identifiers with payment gateways (such as PayU) for billing fulfillment and fraud detection.
• Cloud Infrastructure: Securely hosting data on encrypted cloud infrastructure providers (e.g. database hosts, transactional email relays like Brevo) under strict data protection terms.
• Legal Requirements: When mandated by court summons, law enforcement agencies, or competent regulatory authorities under Indian law.

5. Cookies & Local Storage

We use strictly necessary functional session cookies and secure authentication tokens to verify user identities across client subdomains. We do not use third-party behavioral advertising cookies.

6. Data Retention & Security Measures

We enforce physical, administrative, and technical safeguards including encryption in transit (HTTPS / TLS), isolated multi-tenant data schemas, and restricted administrative credentials. Data is retained only for as long as your account remains active or as required by applicable tax retention laws.

7. Your Rights

Subject to applicable local data protection regulations, you have the right to request access to, correction of, or deletion of your personal data stored on our systems. To submit a request, contact us at contact@vitamin2001.in.

8. Grievance Officer & Contact

In accordance with the Information Technology Act, 2000 and rules made thereunder, any privacy concerns or grievances should be addressed to: