This Privacy Policy explains how VeXtiv ('we', 'us', 'our') collects, uses, stores, and protects personal data when you visit our website (vextiv.tech) or engage us for digital services. We are committed to handling your information responsibly and in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.
Data We Collect
We collect personal data only to the extent necessary to provide our services and operate this website. The categories of data we may collect are:
Data you provide directly
- Name and email address submitted via the contact form.
- Business name, phone number, and project details provided during consultation.
- Any files, assets, or documents shared with us during an engagement.
- Correspondence content from emails sent to vextiv.tech@gmail.com.
Data collected automatically
- Browser type, operating system, and device identifiers.
- IP address and approximate geolocation (country/city level).
- Pages visited, time on page, referral source, and navigation paths.
- Cookie identifiers and session data (see Cookie Policy below).
How We Use Your Data
We use the data we collect for the following purposes, each grounded in a lawful basis under the DPDP Act 2023:
- Responding to contact form submissions and consultation requests (legitimate interest / consent).
- Delivering contracted digital services including website design, branding, and social media management (contract performance).
- Sending project-related communication and progress updates (contract performance).
- Analysing aggregate website usage to improve content and user experience (legitimate interest).
- Retargeting website visitors through advertising platforms with your consent where required (consent).
- Complying with applicable legal obligations, including tax and financial record-keeping (legal obligation).
- Preventing fraud and protecting the security of our systems (legitimate interest).
Third-Party Services
We use carefully selected third-party processors to operate our website and deliver services. Each processor is bound by their own privacy terms and applicable data protection law. We do not sell your personal data to any third party.
Supabase
We use Supabase (Supabase Inc., USA) as our backend database and authentication service. Contact form submissions and certain client project data are stored in Supabase. Data is stored on servers in the EU region. Supabase processes data in accordance with its Data Processing Agreement and complies with GDPR standards.
Resend
We use Resend (Resend Inc., USA) to send transactional emails, including contact form confirmations and project notifications. Your email address and message content are transmitted to Resend for delivery purposes only and are not used for any other purpose by Resend.
Google Analytics 4 (GA4)
We use Google Analytics 4 (Google LLC, USA) to analyse website traffic. GA4 collects anonymised usage data including page views, session durations, and approximate location. IP addresses are anonymised before storage. You can opt out of GA4 tracking by installing the Google Analytics Opt-out Browser Add-on or by declining cookies when prompted.
Meta Pixel
We use Meta Pixel (Meta Platforms Ireland Ltd.) on our website to measure the effectiveness of our advertising and to serve relevant ads to visitors on Meta's platforms. Meta Pixel sets cookies that track your interactions with our website. This data is shared with Meta under our advertising relationship. You can manage your Meta ad preferences at your.meta.com/adpreferences.
Vercel
Our website is hosted on Vercel (Vercel Inc., USA). Vercel processes server request logs including IP addresses and request metadata as part of normal infrastructure operation. These logs are retained for a limited period for security and debugging purposes. Vercel is GDPR-compliant and operates under a Data Processing Agreement with us.
Data Retention
We retain personal data only for as long as necessary for the purpose for which it was collected or as required by applicable law.
- Contact form submissions: retained for 24 months from the date of submission, then deleted.
- Client project data and correspondence: retained for 5 years following project completion, consistent with Indian tax and contract record-keeping requirements.
- Analytics data: aggregated and anonymised; individual session data retained by Google for up to 14 months.
- Advertising pixel data: governed by Meta's data retention policies, typically up to 180 days.
- Infrastructure logs (Vercel): retained for up to 30 days.
Your Rights under the DPDP Act 2023
As a Data Principal under India's Digital Personal Data Protection Act, 2023, you have the following rights with respect to your personal data processed by VeXtiv:
- Right to Access: You may request a summary of the personal data we hold about you and the purposes for which it is being processed.
- Right to Correction and Erasure: You may request that we correct inaccurate or incomplete personal data, or erase data that is no longer required for the purpose for which it was collected.
- Right to Grievance Redressal: You have the right to have your grievance addressed by us in a timely manner. If you are unsatisfied, you may approach the Data Protection Board of India once it is constituted.
- Right to Nominate: You may nominate another individual to exercise your rights in the event of your death or incapacity.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
How to exercise your rights
To exercise any of the above rights, please contact us by email at vextiv.tech@gmail.com with the subject line 'DPDP Data Request'. We will acknowledge your request within 72 hours and respond substantively within 30 days. We may need to verify your identity before processing any request.
Contact for Data Requests
VeXtiv acts as the Data Fiduciary for personal data processed through this website and our service engagements.
For all privacy-related queries, data access requests, correction requests, erasure requests, or complaints, please contact us at:
- Email: vextiv.tech@gmail.com (Subject: DPDP Data Request)
- Studio: VeXtiv, Hyderabad, Telangana, India