Privacy policy

Vedha IT Solutions ("Vedha IT", "we", "us", "our") is committed to protecting your privacy. This policy explains what personal data we collect when you visit vedhait.com, get in touch, or apply for a role with us, how we use and share it, how long we keep it, and the rights you have under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act").

Who we are

Vedha IT Solutions Private Limited is an India-based software company (CIN U63999AP2024PTC114751), registered in Ongole, Andhra Pradesh. For the purposes of the DPDP Act, we are the Data Fiduciary for the personal data described in this policy. If you have any question about how we handle your data, contact us at privacy@vedhait.com.

Data we collect

Information you give us. When you submit a contact, demo, RFP, newsletter, or careers form, we collect the details you choose to provide. Depending on the form this may include:

• Your name, email address, and (where relevant) company name and phone number.
• The content of your message or enquiry.
• For recruitment applications, any CV, cover letter, or supporting files you upload, and the role you are applying for.

Information we collect automatically. When you submit a form, we also record limited technical metadata to help us route, verify, and protect against abuse of the submission — specifically your IP address, browser user-agent string, and the page you submitted from. We use privacy-respecting analytics to understand which pages are visited; these only run after you give consent (see our Cookie policy).

Cookies and local storage. We use a small number of strictly-necessary cookies for the website and CMS to function, and we store your cookie-consent choice locally in your browser. Optional analytics and marketing cookies are only set with your consent. Full detail is in our Cookie policy.

Proof-of-consent records. To meet our accountability obligations, each time you make a cookie-consent choice we keep a dated record of it: a pseudonymous consent id, the categories you allowed, the consent-model version, and basic technical metadata (IP address and browser user-agent). This lets us demonstrate the consent that was given. The id is not linked to your name unless you also submit a form.

How we use your data

Under the DPDP Act we process your personal data on the basis of your consent and for the following purposes:

• Responding to your enquiry or demo/RFP request — to reply to you and take steps at your request.
• Newsletter — with your consent. You can unsubscribe at any time using the link in any email.
• Recruitment — to assess your application and take steps prior to a possible engagement.
• Security and abuse prevention — rate-limiting and spam filtering using IP address and metadata, to keep the site secure.
• Analytics — only where you have given consent.

We do not use your data for automated decision-making or profiling, and we never sell your personal data.

Who we share your data with

We share data only with service providers ("Data Processors") who help us run the site and respond to you, under contracts that require them to protect it:

• Microsoft Azure — cloud hosting for the website and database (India region).
• MongoDB Atlas — the managed database in which form submissions are stored.
• n8n — our workflow automation, used to route your submission to the right person at Vedha IT.
• Analytics providers (e.g. Google Analytics, Microsoft Clarity) — only where analytics consent has been given.

We may also disclose data where required by law or to protect our legal rights.

Data location & transfers

Our website and primary database are hosted in India. Where a service provider processes data outside India, we ensure appropriate safeguards are in place and that any transfer complies with the DPDP Act and applicable regulations.

How long we keep your data

• Enquiry, demo, and RFP submissions — kept for up to 24 months from your last contact, then deleted, unless we enter into a business relationship.
• Newsletter — until you unsubscribe.
• Recruitment applications — kept for up to 12 months after the recruitment process closes, unless you are hired or ask us to delete them sooner.
• Proof-of-consent records — kept for 24 months from the date of the choice to evidence the consent that was in effect, then automatically and permanently deleted.

How we protect your data

We use appropriate technical and organisational measures to keep your data safe, including encryption in transit (HTTPS), access controls on our CMS and database, and the principle of least privilege for staff access. No method of transmission or storage is completely secure, but we work to protect your data and to notify you and the relevant authority of any breach where the law requires.

Your rights

As a Data Principal under the DPDP Act you have the right to:

• Access a summary of the personal data we hold about you and how we process it.
• Have inaccurate or incomplete data corrected and updated.
• Have your data erased when it is no longer needed.
• Nominate another individual to exercise your rights in the event of death or incapacity.
• Withdraw consent at any time, where we rely on consent.
• Grievance redressal — raise a complaint with us about how we handle your data.

To exercise any of these rights, email privacy@vedhait.com. We will respond within the timelines required by law. If you are not satisfied with our response, you may lodge a complaint with the Data Protection Board of India.

Grievance Officer

In accordance with the DPDP Act, you can reach our Grievance Officer for any questions, requests, or complaints about how we handle your personal data:

• Grievance Officer, Vedha IT Solutions Private Limited
• Email: privacy@vedhait.com
• Address: Flat No.102, Charitha Apartments, Sri Krishna Nagar, Ongole, Prakasam, Andhra Pradesh 523001, India

We will acknowledge and address grievances within the timelines required under the DPDP Act. If you remain unsatisfied, you may escalate to the Data Protection Board of India.

Children

Our website and services are intended for businesses and are not directed at children. We do not knowingly process the personal data of anyone under 18 without verifiable parental or guardian consent, as required by the DPDP Act.

Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the latest revision; material changes will be highlighted on this page.

Contact us

Vedha IT Solutions — privacy@vedhait.com · General enquiries: info@vedhait.com · Phone: +91 96775 83606.