Privacy Policy

1. Identity of Data Fiduciary

OptiVulnix (referred to as "we", "our", or "us") acts as the Data Fiduciary under the Digital Personal Data Protection Act (DPDPA) 2023 for personal data collected through this website and our services.

2. Personal Data Collected

We collect the following categories of personal data through our website:

• Contact Information: Name, business email address, phone number, company name, job title
• Communication Data: Message content submitted through contact forms, consultation requests, and email correspondence
• Technical Data: IP address, browser type, device information, operating system, referral source
• Usage Data: Pages visited, time spent on pages, click behavior, navigation patterns
• Calendar Integration Data: Meeting scheduling preferences through Calendly integration

3. Purpose of Processing

We process your personal data for the following lawful purposes:

4. Third-Party Data Processors

We use the following third-party service providers to process personal data on our behalf:

• Formspree (United States): Processes contact form submissions. Data stored on US-based servers.
• Calendly (United States): Manages appointment scheduling. Data stored on US-based servers.
• Vercel (United States): Provides website hosting and content delivery. Data stored on globally distributed servers including US, EU, and Asia.
• Google Fonts (United States): Delivers web fonts. Browser metadata may be processed by Google.

All third-party processors have been selected based on their security practices and compliance with applicable data protection regulations.

5. Cross-Border Data Transfer

Your personal data may be transferred to and processed in countries outside India, including the United States and European Union, through our use of third-party processors listed above.

These transfers are necessary to provide our services and are conducted in accordance with DPDPA 2023 requirements. We ensure that appropriate safeguards are in place through contractual agreements with our processors that require them to maintain data security standards comparable to Indian law.

6. Data Retention Periods

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Contact Form Submissions: 24 months from submission date
• Email Correspondence: 24 months from last interaction
• Website Analytics Data: 12 months from collection
• Client Project Data: As specified in individual service agreements, typically 36-60 months

Data is automatically deleted after the retention period expires unless you request earlier deletion or legal obligations require longer retention.

7. Your Rights as a Data Principal

Under DPDPA 2023, you have the following rights regarding your personal data:

• Right to Access: Obtain confirmation of whether we process your data and access a copy of such data
• Right to Correction: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data when no longer necessary for the purpose collected
• Right to Grievance Redressal: Lodge a complaint with our Data Protection Officer or the Data Protection Board of India
• Right to Nominate: Nominate another individual to exercise your rights in the event of death or incapacity

To exercise any of these rights, please contact us at privacy@optivulnix.com. We will respond within 30 days of receiving your request.

8. Withdrawing Your Consent

You have the right to withdraw your consent for data processing at any time. To withdraw consent:

1. Send an email to privacy@optivulnix.com with subject line "Consent Withdrawal Request"
2. Include your name, email address, and specific data processing activities you wish to opt out of
3. We will process your request within 7 business days and confirm the withdrawal

Please note that withdrawal of consent may affect our ability to provide certain services to you.

9. Grievance Redressal Mechanism

If you have any concerns about how we handle your personal data, please contact our Data Protection Officer:

If you are not satisfied with our response, you have the right to lodge a complaint with the Data Protection Board of India.

10. Cookies and Tracking Technologies

Our website uses minimal tracking technologies:

• Essential Cookies: Required for website functionality, such as maintaining your session
• Analytics: We use privacy-focused analytics to understand how visitors use our site (IP addresses are anonymized)
• Third-Party Services: Google Fonts and other embedded services may set cookies as described in their respective privacy policies

You can control cookies through your browser settings. However, disabling cookies may affect website functionality.

11. Security Measures

We implement industry-standard security measures to protect your personal data:

• Encryption in transit using TLS 1.3
• Encryption at rest for stored data
• Access controls and authentication mechanisms
• Regular security audits and vulnerability assessments
• Incident response procedures for data breaches

12. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on this page with a revised "Last Updated" date. We encourage you to review this policy periodically.