Legal

Privacy Policy

Last updated: 25 June 2026 · Version 2026-06-25

This Privacy Policy explains how Identity Plus Private Limited (“we”, “us”, “our”) collects, uses, shares, stores, and protects personal data when you visit our website and the Vishwaas AI documentation portal (together, the “Services”).

We process personal data in accordance with applicable data protection laws, including, where applicable, the EU General Data Protection Regulation (“EU GDPR”), the UK GDPR, and India's Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the rules framed thereunder.

1. Who we are

Data Fiduciary / Controller: Identity Plus Private Limited
Registered address: Bangalore, Karnataka, India
Email: privacy@vishwaas.ai

2. Scope of this Privacy Policy

This Privacy Policy applies to personal data collected through:

our public website;
contact, demo, pricing, partner, or other enquiry forms;
gated content download forms, if any;
the Vishwaas AI documentation portal and related admin interfaces; and
communications you send to us in relation to our Services.

This Privacy Policy does not apply to third-party websites, services, or platforms that may be linked from our website or documentation portal and that we do not control.

3. What personal data we collect

We may collect the following categories of personal data:

3.1 Information you provide directly

name;
work email address;
company / organisation name;
phone number;
job title or role, where provided;
country / region, where provided;
the content of your message, enquiry, or request; and
any other information you choose to share with us.

3.2 Website and usage information

pages viewed;
time spent on page;
scroll depth and clicks;
referrer / campaign information (such as UTM parameters);
browser type and version;
device and operating system information;
IP address or network information;
approximate location derived from IP (such as country or city-level region); and
date, time, and interaction logs.

Where required by applicable law, we collect analytics-related information only after obtaining your consent.

3.3 Cookie and preference data

your cookie / consent preferences;
your session or sign-in state, where required for the portal;
your theme or display preferences; and
analytics session identifiers, where enabled with consent.

3.4 Children's data

Our Services are intended for business / professional use and are not directed to children. We do not knowingly collect personal data from children. If we become aware that personal data of a child has been collected through our Services without appropriate authorisation, we will take reasonable steps to delete such data or otherwise handle it in accordance with applicable law.

4. Why we use personal data

to respond to your enquiries, requests, and demo / pricing / partner discussions;
to operate, administer, secure, and improve the website and documentation portal;
to authenticate users and manage portal / admin access;
to analyse usage trends and improve user experience, where analytics is enabled;
to maintain records, provide support, and communicate with you;
to investigate incidents, prevent misuse, and protect the security of our Services; and
to comply with legal, regulatory, contractual, and audit-related obligations.

5. Legal basis / grounds of processing

For individuals in the European Economic Area (“EEA”) and the United Kingdom, we rely on one or more of the following legal bases under the GDPR / UK GDPR, as applicable:

performance of a contract or steps taken at your request before entering into a contract;
our legitimate interests, such as operating and securing our Services, responding to business enquiries, and improving our website and documentation portal, provided those interests are not overridden by your rights;
your consent, where required by law, including for analytics or similar technologies where consent is required; and
compliance with a legal obligation.

For individuals in India, we process personal data in accordance with the DPDP Act and applicable rules, including on the basis of consent, compliance with legal obligations, and other permitted uses recognised under applicable law, where relevant.

6. Cookies & similar technologies

We use cookies, local storage, session storage, and similar technologies to operate the documentation portal, remember preferences, and understand usage of our Services. Where required by applicable law, analytics-related technologies are enabled only after obtaining your consent.

Name	Type	Category	Purpose	Duration
vishwaas_jwt	Cookie / session token	Necessary	Supports sign-in / session management for the documentation portal or admin area.	Session / up to 30 minutes
va_consent	Cookie	Necessary	Stores your cookie / analytics preference choice.	12 months
vishwaas-theme	Local storage	Necessary	Remembers display / theme preference.	Persistent until changed or cleared
va_sid	Session storage / first-party analytics identifier	Analytics	Used for first-party usage analytics where analytics is enabled with consent.	30 minutes idle / session-based

7. Consent and cookie preferences

Where required by applicable law, we seek your consent before enabling analytics or similar optional technologies. You may review, change, or withdraw your consent preferences at any time through the cookie preference settings made available on the website:

8. Sharing of personal data

We do not sell personal data. We may share personal data only on a need-to-know basis with the following categories of recipients:

hosting / cloud infrastructure providers;
email, communication, support, or CRM service providers;
security, monitoring, logging, or backup service providers;
professional advisers, auditors, or consultants engaged for legal, compliance, or operational support;
group entities / authorised personnel where required for internal administration and service delivery; and
regulators, law enforcement authorities, courts, or other competent authorities where disclosure is required by law or necessary to protect our legal rights.

9. Cross-border transfers

Personal data may be stored or accessed in India and/or in other jurisdictions depending on our hosting, support, and service provider arrangements. Where personal data is transferred across borders, we will take appropriate steps to ensure that such transfer is carried out in accordance with applicable law.

Where required under the GDPR / UK GDPR, we will implement appropriate safeguards for international transfers, such as standard contractual clauses or other lawful transfer mechanisms, as applicable.

10. Data retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide our Services, respond to enquiries, maintain business records, meet legal or regulatory requirements, resolve disputes, and enforce our rights.

enquiry / contact form records: up to 24 months from the last meaningful interaction, unless a longer period is required for contractual, compliance, or dispute-related reasons;
portal / account-related records: for the duration of the account relationship and for a reasonable period thereafter for security, audit, and legal purposes;
security, access, and audit logs: for such period as is reasonably necessary for security monitoring, incident investigation, and compliance purposes;
analytics data: for the configured analytics retention period or until deleted / anonymised in accordance with applicable law and our internal retention standards; and
consent records: for as long as necessary to demonstrate compliance with consent obligations and related legal requirements.

11. Security safeguards

We implement reasonable technical, organisational, and contractual measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, misuse, or destruction. These measures may include access controls, authentication controls, logging, monitoring, encryption and secure transmission measures where appropriate, backup and recovery controls, and contractual safeguards with relevant service providers.

12. Your rights

Depending on your location and the applicable law, you may have one or more of the following rights in relation to your personal data:

to request access to personal data we hold about you;
to request correction, completion, or updating of inaccurate or incomplete personal data;
to request deletion / erasure of personal data, subject to applicable legal exceptions;
to withdraw consent, where processing is based on consent;
to object to, or request restriction of, certain processing under the GDPR / UK GDPR, where applicable;
to request portability of personal data, where applicable under law;
to nominate another person to exercise rights on your behalf under applicable Indian law, where relevant; and
to seek grievance redressal and raise concerns regarding the handling of your personal data.

13. Complaints and grievance redressal

If you have any concerns about how we handle your personal data, please contact us using the details provided in Section 1.

If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant supervisory authority or competent regulator, including the Data Protection Board of India or the relevant data protection authority in your jurisdiction, where applicable.

14. Third-party links

Our website or documentation portal may contain links to third-party websites or resources. We are not responsible for the privacy practices, content, or security of such third-party websites or services. We encourage you to review the privacy notices of any third-party sites you visit.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our Services, technology, legal requirements, or data handling practices. The updated version will be posted on this page with the revised 'Last updated' date and version. Where required by applicable law, we will take additional steps to notify you of material changes.

16. Contact us

Identity Plus Private Limited
Bangalore, Karnataka, India
privacy@vishwaas.ai