Privacy Policy

Ventron ("Ventron", "we", "us") operates the website at https://ventron.in. The website is a marketing and company site for our software, SaaS, AI and automation work. The legal entity responsible for your personal data is Ventron, Azad Nagar, Hisar, Haryana, India.

For any privacy question, or to exercise your rights, contact us at [email protected]. Our designated contact for grievances and data-protection matters is Ventron Grievance Contact ([email protected]).

This policy covers personal data collected through the https://ventron.in website. It does not govern the software products or custom systems we build for clients — those are covered by the specific agreement, Statement of Work, or Data Processing Addendum for that engagement, where we typically act as a processor on the client's behalf.

Information you give us directly

When you submit our project-inquiry form, we receive the details you choose to enter:

• Name
• Company name (optional)
• Work email address
• Phone number (optional)
• Project type and estimated budget
• Your project description and any details you include in the message
• If you opt in, your preference to receive product updates

Submitting the form is the only way this data reaches us — nothing is collected silently. We ask only for what we need to respond usefully to your inquiry.

Information collected automatically

The website itself sets no analytics or tracking cookies and runs no third-party analytics. However, our hosting and form providers process limited technical data as a normal part of delivering the service securely:

• Our hosting provider (Cloudflare Pages) may process your IP address, approximate location, browser/device information and request logs to serve the site and protect it against abuse.
• Our form provider (Web3Forms) may capture technical metadata such as your IP address when you submit the form, for delivery and spam prevention.
• These providers apply their own standard retention periods to such technical logs; we do not control those periods.

Information from third parties

We do not buy, rent or enrich your personal data from third-party sources.

We use the personal data described above only to:

• Read, evaluate and respond to your project inquiry
• Have the follow-up conversation needed to scope potential work
• Keep records of our correspondence and any resulting engagement
• Operate, secure and maintain the website
• Send product updates, only where you have separately opted in
• Comply with applicable legal obligations

Under India's Digital Personal Data Protection Act, 2023, we rely on your consent (which you give by submitting the form) and, where relevant, on the legitimate uses permitted by that Act. Where the EU/UK GDPR applies to a particular interaction, our lawful bases are your consent, and our legitimate interest in responding to and managing business inquiries.

We do not sell your personal data, and we do not share it with advertisers. We share it only with the service providers that make the website work, and only as needed:

• Cloudflare, Inc. — website hosting, content delivery and security (processes technical/log data).
• Web3Forms — relays your inquiry from the form to our inbox (processes the submission for delivery only).
• Our email provider, Hostinger — receives and stores the resulting inquiry email at [email protected].
• Professional advisers, or authorities, only where required by law or to establish or defend legal claims.

We do not add any other third-party processors without updating this policy first.

Our hosting and form providers operate global infrastructure, so your data may be processed on servers outside India, including in other jurisdictions. We do not claim your data is stored exclusively in India. Where transfers are subject to the GDPR or other law, we rely on the safeguards and mechanisms offered by those providers.

We keep inquiry data only for as long as needed to handle your inquiry and any engagement that follows, and to meet our legal, accounting and dispute-resolution needs. When it is no longer needed, we delete or anonymise it.

For inquiries that do not become engagements, we retain the inquiry and related correspondence for up to 24 months from our last contact with you, after which it is deleted or anonymised. Where an engagement results, we retain records for its duration and for the period afterwards required to meet our legal, accounting and dispute-resolution needs.

We apply reasonable technical and organisational safeguards appropriate to a static website: encryption in transit (HTTPS/TLS), strict security response headers and content-security-policy, no secrets in front-end code, and limited access to the inbox that receives inquiries.

No method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. If we become aware of a personal-data breach that is likely to result in risk to you, we will act in accordance with applicable law.

Under the DPDP Act, 2023, as a Data Principal you may, subject to the Act and its rules as they come into force:

• Access a summary of the personal data we process about you and how we process it
• Request correction, completion or updating of your personal data
• Request erasure of your personal data where it is no longer required
• Withdraw consent you previously gave (this does not affect processing already carried out)
• Nominate another individual to exercise your rights in the event of death or incapacity
• Raise a grievance with us and, if unresolved, with the Data Protection Board of India

If the GDPR applies to you, you may in addition have rights to restrict or object to certain processing and to data portability. We will not incorrectly claim that every right applies to every user — the rights available depend on the law that applies to you.

To exercise any right, email [email protected] with enough detail for us to identify your records. We may ask you to verify your identity before we act, so that we do not disclose your data to anyone else.

If you have a grievance about how we handle your personal data, please contact us at [email protected] (attention: Ventron Grievance Contact ([email protected])). We will acknowledge your grievance within three (3) working days of receiving it, and will work to resolve it without undue delay and within the timelines prescribed under the Digital Personal Data Protection Act, 2023 and its Rules as they come into force.

If you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India, in the manner and within the timelines provided under that Act and its Rules.

Data-protection officer

Ventron is not currently a Significant Data Fiduciary, and is therefore not required to appoint a Data Protection Officer under the DPDP Act. We have instead designated the grievance contact above to answer questions and handle requests about your personal data. If Ventron is later notified as a Significant Data Fiduciary, we will appoint a Data Protection Officer based in India and update this policy with their details.

Ventron is based in India and does not currently target its website or services at individuals in the European Economic Area or the United Kingdom. The EU and UK GDPR apply only where we intentionally offer goods or services to, or monitor the behaviour of, individuals located there.

Where the GDPR does apply to a particular interaction, our lawful bases are your consent and our legitimate interest in responding to and managing business inquiries; you additionally have the rights to restrict or object to certain processing and to data portability, and the right to lodge a complaint with your local supervisory authority. If you believe your personal data is processed by us within the scope of the GDPR, contact us at [email protected] and we will handle your request accordingly.

The website is intended for businesses and professionals, and is not directed at children. We do not knowingly collect personal data from children. Under the DPDP Act, processing a child's data requires verifiable parental consent and additional safeguards; if any future Ventron product is intended for use by children, it will undergo a separate legal and product compliance review before launch.

We may update this policy as our practices or the law change. When we make material changes we will update the effective and last-updated dates at the top of this page, and where appropriate take additional steps to notify you.

Questions, requests or complaints about privacy: [email protected]. Formal grievance/data-protection contact: Ventron Grievance Contact ([email protected]). Registered entity: Ventron, Azad Nagar, Hisar, Haryana, India.