Privacy Policy
We collect the minimum we need, tell you plainly what we do with it, and never sell it. This page explains the details.
Template notice for the Vallunex team: this document is a solid starting draft, not legal advice. Have it reviewed by counsel against the DPDP Act 2023 and your actual data practices before launch, then delete this notice.
1. Scope of this policy
This policy explains how Vallunex Innovations Private Limited (“Vallunex”, “we”, “us”) handles personal data collected through this website, our marketing activities, and our products including ArumbuNexus.
Where a school, clinic or other organisation uses our products, that organisation is the data fiduciary for the records it stores, and Vallunex acts as a data processor on its instructions. In those cases the organisation's own privacy notice governs how that data is used.
2. Information we collect
Information you give us. When you book a demo, contact us or subscribe to our newsletter we collect the details you enter: name, designation, organisation, email, phone number, city, state, country, approximate size of your organisation, and anything you write in a free-text field.
Information collected automatically. Standard web data such as IP address, browser and device type, pages viewed, referring URL and UTM campaign parameters, gathered through cookies and analytics tools.
Information inside our products. Data our customers upload — student, staff, attendance, academic and payment records — is processed strictly on that customer's instructions.
We do not knowingly collect personal data directly from children through this website.
3. How we use your information
- To arrange, prepare for and follow up on demonstrations you request
- To answer enquiries and provide customer support
- To provide, operate, secure and improve our products
- To send service communications such as onboarding, billing and incident notices
- To send marketing communications where you have opted in — you can withdraw at any time
- To measure the effectiveness of our marketing and improve the website
- To detect and prevent fraud, spam and abuse
- To meet legal, tax and regulatory obligations
4. Legal basis for processing
We process personal data on the basis of your consent (which you give when submitting a form and may withdraw at any time), the performance of a contract with you or your organisation, our legitimate interest in running and improving our business, and compliance with applicable law — including the Digital Personal Data Protection Act, 2023.
7. How we protect your data
Our security controls include:
- TLS encryption for all data in transit and encryption at rest for stored data
- Strict logical isolation between customer tenants
- Role-based access control with least-privilege defaults
- Audit logging of administrative access and changes
- Daily automated backups with periodic restore testing
- Rate limiting, input validation and spam protection on all public forms
- Regular dependency patching and security review of new features
No system is perfectly secure, but if a breach affects your data we will notify you and the relevant authority without undue delay.
8. How long we keep data
Demo and enquiry records are retained for up to 24 months from your last interaction, unless you ask us to delete them sooner. Customer product data is retained for the term of the agreement plus 90 days, after which it is permanently deleted. Records we must keep for tax or statutory reasons are retained for the period the law requires.
9. Your rights
Subject to applicable law, you may ask us to:
- Confirm what personal data we hold about you and provide a copy
- Correct data that is inaccurate or incomplete
- Delete data we no longer need to keep
- Stop sending you marketing communications
- Withdraw consent you previously gave
- Nominate someone to exercise these rights on your behalf
Write to hello@vallunex.com and we will respond within 30 days. If you use one of our products through a school or business, please raise the request with that organisation first — we will assist them in fulfilling it.
10. Where your data is stored
Product data is hosted in Indian data centre regions. Some service providers — for example analytics and email delivery — may process limited data outside India under contractual safeguards requiring an equivalent standard of protection.
11. Changes to this policy
We may update this policy as our products and the law evolve. Material changes will be announced on this page and, for customers, by email at least 14 days before they take effect. The date at the top always reflects the current version.
12. Contact us
Questions, requests or complaints about privacy can be sent to our Grievance Officer:
Vallunex Innovations Private Limited
Vallunex Innovations, Tech Park, Anna Salai
Chennai, Tamil Nadu 600002, India
Email: hello@vallunex.com
Phone: +91 90000 00000