Privacy Policy

This Privacy Policy explains how YantrAdhigam (“we”, “us”, “ViDU Lite”) collects, uses, shares and protects personal data in connection with the ViDU Lite website and product (the “Services”). It is written to comply with India's Digital Personal Data Protection Act, 2023 (DPDP) and the Information Technology Act, 2000, and, for users outside India, the EU/UK GDPR and the California Consumer Privacy Act (CCPA/CPRA). By using the Services you agree to this Policy.

1. Two categories of data and our role

• (A) Account & usage data: data about you as an account holder and visitor (name, email, phone, billing details, device/usage/analytics). For this, we are the Data Fiduciary (a “controller” under GDPR).
• (B) Customer Content: the business records you upload into the ERP, including personal data about your own customers, suppliers and employees. For this, you are the Data Fiduciary and we are only your Processor, handling it on your instructions to run the Services. We do not use identifiable Customer Content for our own purposes.

2. Information we collect

• You provide: account details (name, work email, phone, company), authentication data, billing information (processed by our payment processor), support and demo-request messages, and any content you enter.
• Automatically: usage, log, device and approximate-location data, and strictly-necessary cookies used to run the site and keep you signed in.
• From your ERP (Category B): the personal data of your customers, suppliers and employees that you upload, processed only as your Processor.

3. How we use personal data (purposes & legal bases)

• Provide, secure, maintain and support the Services (contract; legitimate interests).
• Process payments, billing and tax invoicing (contract; legal obligation).
• Respond to demo requests and enquiries, and, with consent, send you product news you can opt out of at any time (consent; legitimate interests).
• Analytics, product improvement and new-feature development, on a de-identified/aggregated basis (legitimate interests).
• Comply with law, prevent fraud/abuse, and enforce our terms (legal obligation; legitimate interests).

4. Cookies

This website uses only strictly-necessary cookies required to run the site securely. We do not run third-party advertising trackers, and our demo forms are protected by a self-hosted, privacy-first proof-of-work check rather than a third-party captcha. If we introduce optional analytics or marketing cookies in future, we will ask for your consent first.

5. Sharing and our no-sale commitment

We do not sell your personal data, and we do not “share” it for cross-context behavioural advertising. We disclose personal data only to: (a) our vetted service providers / sub-processors who help run the Services (payments, hosting, email, storage) under contract; (b) our affiliates within the YantrAdhigam group; and (c) authorities or acquirers where required by law or in a corporate transaction, with safeguards. A current list of sub-processors is available on request from info@yalabs.in.

6. International transfers & hosting

The Services are primarily hosted in India. Where personal data is transferred across borders (including to sub-processors), we use lawful transfer mechanisms, for DPDP, transfers only to jurisdictions not restricted by the Central Government; for the EEA/UK, Standard Contractual Clauses or an adequacy basis. Details are available on request.

7. Data retention

We keep account and Customer Content for as long as your account is active, and after closure only as long as needed for the purposes above or as required by law (typically up to 90 days for operational data, and longer for tax/legal records; GST invoices are retained per statutory periods). You may request earlier deletion (§9). De-identified/aggregated data may be retained indefinitely.

8. Security & breach notification

We apply reasonable technical and organisational safeguards, TLS 1.2+ in transit, encryption at rest, role-based access control, tenant isolation and audit logging. No system is perfectly secure. In the event of a personal-data breach, we will notify the Data Protection Board of India and affected Data Principals, and (where applicable) EEA/UK supervisory authorities, without undue delay and within the timelines the law requires.

9. Your rights (DPDP Act 2023)

As a Data Principal you have the right to: access and obtain a summary of your personal data; correction, completion, updating and erasure; grievance redressal; and to nominate another individual to exercise your rights in the event of death or incapacity. You can export your data or request erasure in-product, or contact us. We aim to respond within 30 days.

If you are a customer, supplier or employee whose data appears in another organisation's ERP (Category B), please contact that organisation (the Data Fiduciary); we will assist them as their Processor.

10. EEA/UK rights (GDPR)

If you are in the EEA or UK, you also have the rights to portability, restriction, objection (including to direct marketing and profiling), and to lodge a complaint with your supervisory authority. Our legal bases are set out in §3. You can object to processing based on legitimate interests at any time.

11. California rights (CCPA/CPRA)

If you are a California resident, you may request to know, access, correct and delete your personal information, and you have the right to opt out of any “sale” or “sharing” although we do not sell or share personal information as those terms are defined. We honour Global Privacy Control (GPC) browser signals and will not discriminate against you for exercising your rights. Email info@yalabs.in to make a request.

12. Children

The Services are for businesses and are not directed to children under 18; we do not knowingly collect their data.

13. Changes

We may update this Policy; material changes will be notified through the site or product, and the “effective” date above will change.

14. Contact & grievances

For privacy questions, to exercise your rights, or to raise a grievance, email info@yalabs.in, or write to YantrAdhigam, Ahmedabad, Gujarat, India. You may escalate unresolved complaints to the Data Protection Board of India.