1. Who we are
VaishnovaLabs ("VaishnovaLabs", "we", "us") provides technology strategy, engineering, Salesforce, integration, data, cloud and AI services. This policy explains how we handle personal data when you visit our website, contact us, or work with us. For the purposes of applicable data-protection law, VaishnovaLabs is the data fiduciary / controller for the data described here.
2. Data we collect
- Information you give us: your name, work email, company, area of interest, timeline, and anything you write in a brief or email.
- Business contact data: details of client and partner contacts we work with during an engagement.
- Technical data: basic server logs such as IP address, browser type and pages requested, kept for security, spam prevention and reliability.
We do not knowingly collect sensitive personal data through this website, and we ask that you don't include it in a brief.
3. How we use it
- To reply to your enquiry, arrange a call and prepare a proposal.
- To deliver, manage and invoice services we have agreed with you.
- To keep our website and systems secure, including filtering spam.
- To send occasional updates about our work, only where you have agreed, with an unsubscribe option in every message.
- To meet legal, tax and regulatory obligations.
We do not sell personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you.
4. Legal basis
We process personal data on the basis of your consent (for example, when you send us a brief), to take steps towards or perform a contract with you, to comply with legal obligations, and for legitimate uses permitted by law such as security. We handle data in line with India's Digital Personal Data Protection Act, 2023 and, where it applies, the EU/UK General Data Protection Regulation.
5. Cookies and analytics
This website does not use advertising or cross-site tracking cookies. If we add privacy-friendly analytics in future, we will update this policy and, where required, ask for your consent first.
6. Sharing
We share personal data only with service providers who help us run our business, under contracts that require them to protect it and use it only on our instructions. These include our email provider (Google Workspace), our website host, and accounting and productivity tools. We may also disclose data where the law requires it. Some providers may process data outside India; when that happens we use appropriate safeguards as required by applicable law.
7. AI systems and client data
When we build or operate AI systems for clients, we process client data only under the client's written instructions and the terms of our agreement. We do not use client data to train third-party foundation models, we apply access controls and redaction where appropriate, and we choose AI providers and configurations that meet the client's data-residency and retention requirements.
8. Retention and security
We keep enquiry data for up to 24 months after our last contact unless we start working together, in which case we keep project records for as long as the contract and the law require. We protect data with encryption in transit, role-based access and multi-factor authentication. We will notify you and the relevant authorities of a breach where the law requires.
9. Your rights
Depending on where you live, you may have the right to access, correct, complete or erase your personal data; withdraw consent at any time; nominate another person to exercise your rights; and complain to a data-protection authority, including the Data Protection Board of India. To use any of these rights, email us. We respond within the time the law allows, usually within 30 days.
10. Contact and changes
For privacy questions or requests, write to hello@vaishnovalabs.com with "Privacy request" in the subject line. This mailbox also serves as our grievance contact. We may update this policy as our services or the law change; the date at the top shows when it last changed.