Privacy Policy

1) Scope & applicability

This policy applies to information processed by us as a data controller/business (as applicable) in connection with the Services. Where we process information on behalf of an enterprise customer under a written agreement, the terms of that agreement may apply in addition to this policy.

2) Information we collect

• - Contact information: name, email address, phone number, company name, and inquiry details.
• - Account information: identifiers, authentication data, and service configuration details.
• - Transaction and billing metadata: payment status, order/invoice references, subscription plan details, and timestamps. We do not intentionally store complete card details; payment collection is generally handled by recognised payment partners.
• - Usage and device data: IP address, browser type, device information, logs, diagnostics, and usage events.
• - Support communications: messages sent to our support channels and related troubleshooting data you provide.

3) How we use information

• - Provide, operate, maintain, and improve the Services.
• - Verify users, prevent fraud, protect accounts, and secure systems.
• - Respond to inquiries and provide customer support.
• - Process subscriptions, payments, refunds (where applicable), and invoicing.
• - Comply with legal obligations, enforce agreements, and handle disputes.
• - Perform analytics and service performance monitoring.

4) Legal bases / grounds for processing

We process information based on one or more of the following: (a) to perform a contract or provide requested Services; (b) legitimate interests (security, fraud prevention, service improvement); (c) compliance with legal obligations; and (d) consent where required for certain cookies or marketing communications.

5) Disclosures & sharing

We may share information with: (a) service providers (hosting, analytics, email delivery, customer support tooling) acting under confidentiality and security obligations; (b) payment processing partners for transaction processing and reconciliation; (c) professional advisors (legal, auditors) as required; and (d) regulators or law enforcement where legally required or to protect rights and safety.

6) Payment & fintech compliance notes

Payment transactions are typically processed by recognised payment partners. We receive limited payment-related metadata (such as status, reference IDs, and timestamps) to provide Services, customer support, and accounting. Payment partners are responsible for handling sensitive payment instrument data per their compliance standards (e.g., PCI-DSS where applicable).

7) Data retention

We retain information for as long as necessary to provide the Services, comply with legal and accounting obligations, resolve disputes, and enforce agreements. Retention periods vary based on data type and legal requirements. When data is no longer required, we take reasonable steps to delete or anonymize it.

8) Security

We implement reasonable technical and organizational measures designed to protect information against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is 100% secure; therefore, we cannot guarantee absolute security.

9) Your rights & choices

• - You may request access, correction, or deletion of certain information, subject to legal and contractual limits.
• - You may opt out of non-essential cookies through your browser settings and our Cookie Policy.
• - You may unsubscribe from non-transactional communications where applicable.

To exercise rights, contact us at contact@vorynex.in. We may request verification to protect your information.

10) Cross-border transfers

Some service providers may process data outside India. Where this occurs, we take reasonable steps to ensure appropriate safeguards and contractual protections consistent with applicable law.

11) Children’s privacy

The Services are intended for business and general audiences and are not directed to children. If you believe a child has provided personal information to us, please contact us so we can take appropriate steps.

12) Governing law

This policy is governed by applicable Indian laws, including the Information Technology Act, 2000 and rules thereunder, and applicable data protection requirements (including the Digital Personal Data Protection Act, 2023, as and when notified and applicable).

13) Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the effective date and publishing the updated policy on this page.

14) Contact

Privacy and compliance communications: contact@vorynex.in
Support: support@vorynex.in