Privacy Policy

01Scope

This policy applies to VectovateAI's website, our marketing communications, and the services we deliver under engagement contracts. It does not apply to third-party websites or services that link from ours; we encourage you to review their policies separately.

02Information we collect

We collect information in three ways:

• Information you give us — name, work email, company, project brief, and any other details you submit through our contact form, RFPs, or business correspondence.
• Information we collect automatically — IP address, browser and device information, pages viewed, referrer URL, and approximate location, captured through server logs and privacy-respecting analytics.
• Information from third parties — limited to publicly available information (LinkedIn, company websites) used to verify a prospective client or partner's identity.

We do not knowingly collect sensitive personal data (financial account details, biometric data, health information) through our website. If you share such information with us during an engagement, it is governed by the executed engagement agreement and our internal data-handling controls.

03How we use your information

We use the information we collect to:

• Respond to your inquiry and prepare a relevant proposal.
• Deliver, support, and improve the engagement we are contracted for.
• Send service-related communications (project updates, invoices, security advisories).
• Send occasional insights, case studies, or event invitations — only where you have opted in.
• Comply with applicable laws, respond to lawful requests, and protect our rights.
• Run aggregate analytics to understand how our website performs (no individual targeting).

04Legal basis (GDPR / DPDP Act)

We process your personal data on one or more of the following legal grounds: your explicit consent; the necessity of performing a contract with you; our legitimate interests in operating and improving our business; and compliance with legal obligations applicable to us.

05Cookies and tracking

Our website uses a small number of essential and analytics cookies. We do not use advertising cookies. For details, see our Cookie Policy.

06How we share information

We do not sell, rent, or trade your personal information. We share it only with:

• Service providers who help us operate our business (hosting, analytics, communications) — bound by confidentiality and data-protection terms.
• Professional advisors (lawyers, accountants, auditors) acting under confidentiality.
• Authorities, where lawfully required, with the minimum data needed to comply.
• Acquirers, only in the event of a merger, acquisition, or sale of all or substantially all of our assets — subject to confidentiality.

07International transfers

Our primary operations are based in India. Some of our service providers may process data in other jurisdictions. Where we transfer personal data outside the originating country, we apply appropriate safeguards (Standard Contractual Clauses or equivalent).

08Data retention

We retain personal information only as long as needed to fulfil the purposes described in this policy, comply with legal and accounting obligations, resolve disputes, and enforce our agreements. Project-specific data is governed by the executed engagement agreement.

09Your rights

Subject to applicable law, you have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your personal data, where applicable.
• Object to or restrict certain processing.
• Withdraw consent at any time, where processing is based on consent.
• Request data portability, where applicable.
• Lodge a complaint with the supervisory authority in your jurisdiction.

To exercise any of these rights, email us at [email protected]. We respond within 30 days.

10Security

We follow industry-standard administrative, technical, and physical safeguards to protect personal data — including encryption in transit, role-based access controls, audit logging, and regular security reviews. No system is perfectly secure; we'll notify you and the relevant authorities if a notifiable data breach affects you.

11Children's privacy

Our website and services are not directed at children under 16. We do not knowingly collect personal information from children. If you believe we have done so inadvertently, contact us and we will delete it.

12Third-party links

Our website may link to third-party sites. Those sites operate under their own privacy policies, and we are not responsible for their practices. Please review their policies before sharing personal information.

13Changes to this policy

We may update this Privacy Policy from time to time. The updated version will be posted here with a new "Last updated" date. Material changes will be communicated via the contact methods you've provided where required by law.

14Contact us

Questions or requests about this policy? Email [email protected] or write to: