Privacy Policy

VerveTech Consultancy is an information technology company based in Varanasi, India. We provide custom software development, IT outsourcing, staff augmentation, dedicated development teams, digital solutions, and related consulting. We also design, license, and sell IT products, including software, SaaS platforms, and digital tools.

• Registered / operating address: Near Mayur Vihar Colony, Varunapuri Colony, Varanasi cantonment, Phulwaria, Varanasi, Uttar Pradesh 221106, India
• Email: info@verve-tech.in
• Phone: +91 6307820260
• Website: www.verve-tech.in

This Policy applies to personal data processed in connection with our website, marketing, sales, client delivery, product subscriptions, support, and recruitment.

Depending on where you are located, the following laws may apply:

• India: Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and applicable rules.
• European Economic Area / United Kingdom: General Data Protection Regulation (GDPR) and UK GDPR.
• United States: applicable state privacy laws, including the California Consumer Privacy Act (CCPA/CPRA), where relevant.
• Other countries: local data protection, consumer, and electronic communications laws that apply to your use of our services or products.

Where Indian law and another country's law both apply, we will honour the stronger privacy protection required for your situation, to the extent legally possible.

We collect information that you provide, information generated through use of our services or products, and limited information from third parties.

3.1 Information you give us

• Identity and contact details: name, company name, job title, email address, phone number, country, and postal address.
• Enquiry and project details submitted through contact forms, email, WhatsApp, phone, or meetings.
• Billing and contract information: GSTIN/VAT/tax IDs, invoicing address, payment references, and purchase orders.
• Career information: résumé/CV, cover letter, portfolio, education, work history, and other details you submit when applying for a role.
• Product account information: login identifiers, workspace names, user roles, and support tickets for our software or SaaS products.

3.2 Information collected automatically

• Device and usage data such as IP address, browser type, operating system, pages visited, referring URL, date/time, and approximate location.
• Cookies, pixels, and similar technologies used for website function, analytics, and (where permitted) marketing.
• Product usage logs needed to operate, secure, and improve our IT products, such as feature usage, error reports, and security events.

3.3 Information from others

We may receive information from clients who authorise us to work on a project, payment providers, recruitment platforms, publicly available professional profiles, and business partners, only as needed to provide services or products.

We use personal information to:

• Respond to enquiries and provide quotes for IT services or product licences/subscriptions.
• Enter into and perform contracts for software development, outsourcing, staffing, consulting, and product sales.
• Create and manage product accounts, licences, invoices, and customer support.
• Process job applications and communicate with candidates.
• Operate, secure, maintain, and improve our website, services, and IT products.
• Send service messages, invoices, renewal notices, and (with consent or as otherwise permitted) business updates.
• Comply with Indian and international legal, tax, accounting, and audit obligations.
• Detect, prevent, and investigate fraud, abuse, security incidents, and unauthorised access.

We do not sell your personal information for money. We also do not use personal data for automated decisions that produce legal or similarly significant effects without human review.

For users in India (DPDP Act)

We process personal data based on your consent and/or for legitimate uses permitted by the DPDP Act, including fulfilment of a contract, compliance with law, employment purposes, and purposes for which you have voluntarily provided data.

For users in the EEA/UK (GDPR)

• Performance of a contract or steps prior to entering a contract.
• Legitimate interests, such as securing our systems, improving products, and B2B communications, balanced against your rights.
• Compliance with legal obligations.
• Consent, where required (for example, certain cookies or marketing emails). You may withdraw consent at any time.

When we sell or license an IT product, or when we build and host software for a client, two categories of data may arise:

• Account and billing data about the customer organisation and its authorised users, which we process as a data fiduciary / controller.
• Customer content uploaded into a product or processed during a client project (for example, end-user records, files, or business data). In that case we typically act as a data processor on the client's instructions, and the client remains responsible for having a lawful basis to share that data with us.

Product customers should not upload special-category or sensitive personal data unless the contract expressly allows it and appropriate safeguards are in place. We process customer content only to provide the product or service, to prevent or fix issues, and as required by law.

We share personal information only when needed:

• With employees, contractors, and dedicated team members who need it to deliver work.
• With service providers such as hosting, email, analytics, payment, accounting, and communication tools, bound by confidentiality and data-protection obligations.
• With professional advisers (legal, tax, audit) where required.
• With government, courts, or regulators when required by Indian or applicable foreign law, or to protect our rights, users, or the public.
• In connection with a merger, acquisition, or business transfer, subject to appropriate safeguards.

We do not rent or sell personal information to third-party marketers.

VerveTech is based in India. If you are located outside India, your information will be transferred to and processed in India and, where our vendors operate, in other countries. Those countries may have different data-protection standards.

For EEA/UK users, we use appropriate transfer mechanisms where required, such as standard contractual clauses, and we implement technical and organisational measures to protect the data. For Indian users, cross-border transfers are handled in line with the DPDP Act and any government restrictions on transfer to notified countries.

Our website may use:

• Essential cookies needed for the site to function and remain secure.
• Analytics cookies to understand traffic and improve content.
• Preference cookies to remember language or other settings.

You can control cookies through your browser settings. Blocking some cookies may affect site features. Where consent is required by local law, we will request it before non-essential cookies are used.

We keep personal data only as long as needed for the purposes described in this Policy, including:

• Enquiry data: generally up to 24 months after the last meaningful contact, unless a contract follows.
• Client, billing, and tax records: for the period required by Indian tax, company, and contract law (typically 8 years or longer if a dispute is pending).
• Product account data: for the life of the account and a reasonable period after closure for backup, security, and legal purposes.
• Job applications: generally up to 12 months unless you ask us to keep your profile longer or we hire you.

We use reasonable technical and organisational measures to protect personal information, including access controls, encrypted transmission where appropriate, least-privilege access, and staff confidentiality obligations. No method of transmission or storage is completely secure. Please keep your product passwords confidential and notify us promptly of any suspected unauthorised use.

If you are a Data Principal under the DPDP Act, you may request to:

• Access a summary of the personal data we hold about you and the processing activities.
• Correct, complete, or update inaccurate or misleading personal data.
• Erase personal data that is no longer necessary for the stated purpose, subject to legal retention duties.
• Withdraw consent where processing is based on consent.
• Nominate another person to exercise your rights in the event of death or incapacity, where applicable.
• Raise a grievance with us and, if unresolved, with the Data Protection Board of India.

Grievance Officer (India): write to info@verve-tech.in with the subject line "Privacy Grievance". We will acknowledge and aim to resolve grievances within the timelines required by applicable Indian law.

Depending on your location, you may also have the right to:

• Access, rectify, or erase your personal data.
• Restrict or object to certain processing.
• Receive a portable copy of data you provided to us.
• Withdraw consent without affecting prior lawful processing.
• Lodge a complaint with your local data protection authority (for example, an EU/UK supervisory authority).
• For California residents: know, delete, and correct personal information, and opt out of "sharing" for cross-context behavioural advertising, if we ever engage in that activity.

To exercise these rights, email info@verve-tech.in. We may need to verify your identity before fulfilling a request. We will not discriminate against you for exercising privacy rights.

Our website, services, and IT products are intended for businesses and adults. We do not knowingly collect personal data from children under 18. If you believe a child has provided us information, contact us and we will delete it.

Our site may contain links to third-party websites, maps, payment pages, or social media. Their privacy practices are governed by their own policies. We are not responsible for those sites.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will change when we do. Material changes will be indicated on this page or notified by email where appropriate. Continued use of our website, services, or products after an update means you accept the revised Policy.

For privacy questions, data requests, or complaints:

• Email: info@verve-tech.in
• Phone: +91 6307820260
• Address: Near Mayur Vihar Colony, Varunapuri Colony, Varanasi cantonment, Phulwaria, Varanasi, Uttar Pradesh 221106, India