Privacy Notice

1. Contact and Grievance Officer

Grievance Officer: VertexSprint, India — admin@vertexsprint.com, or WhatsApp / Call: +91 91851 60993. This person can answer any question about how we process your personal data.

2. What we collect, why, and for how long

We only ask for what we need. We don't sell your data, don't use it for advertising, and don't add you to any mailing list unless you tick the optional product-updates box. The Contact page form stores nothing — it only opens WhatsApp with your message filled in. This website sets no advertising or tracking cookies.

3. Withdrawing consent

You can withdraw consent at any time, and it is as easy as giving it: use the withdraw consent form (one form, no account needed), message us “withdraw consent” on WhatsApp, or email admin@vertexsprint.com. To stop only product updates, choose “Stop product updates only”. After you withdraw, we stop contacting you about the request and erase your details within a reasonable time, except the consent record described above. Withdrawal does not affect what we lawfully did before it.

4. Your rights

• Access — a summary of your personal data, what we do with it, and who we shared it with (section 11).
• Correction and erasure — correct, complete, update or erase your data (section 12).
• Grievance — a complaint about how we handled your data or a rights request (section 13).
• Nomination — name a person who can use these rights if you die or cannot act yourself (section 14).

Use our data rights page or email admin@vertexsprint.com. To find your data we need the email address or WhatsApp number you used with us. We may ask you to confirm the request from that email or number first. We respond within 30 days — well within the 90-day maximum the DPDP Rules allow for grievances.

5. Complaining to the Data Protection Board

If you are not satisfied after using our grievance process (the Act asks you to try this first), you can complain to the Data Protection Board of India. The Board works as a digital office; check its official pages for how to file a complaint online.

6. Who processes your data, and where

• Hostinger — hosts this website and our automation server, which stores form submissions. Our servers are in Mumbai, India.
• Our email provider (Hostinger email) — a copy of each form submission is emailed to our team inbox.
• WhatsApp (Meta) — if we message you on WhatsApp, Meta processes those messages under its own terms.

Website form data is not sent to any AI service. Some of these providers may process data outside India. The DPDP Act allows this unless the Government restricts transfers to a particular country; we follow any such restriction. Only the VertexSprint team can see your submissions. We may disclose data where the law requires it.

7. How we protect it

• Encrypted connections (HTTPS) for the website and forms.
• Access limited to our team through password-protected admin tools with hashed passwords, lockout after repeated wrong attempts, and an audit log of who viewed what.
• IP addresses stored only as one-way hashes; spam filtering and rate limits on forms.
• Logs kept for at least one year so misuse can be detected and investigated.

If a personal data breach affects you, we will tell you without delay — what happened, the likely impact, what we are doing and what you can do — and we will report it to the Data Protection Board as the DPDP Rules require, including a detailed report within 72 hours.

8. Children

Our website and services are for adults running businesses. The Get set up form asks you to confirm you are 18 or older, and we don't knowingly collect personal data of anyone under 18. If we learn that we have, without verifiable consent from a parent or lawful guardian, we will erase it.

9. Consent Managers

The DPDP Act lets you give, review and withdraw consent through a Consent Manager registered with the Data Protection Board. When registered Consent Managers become available, we will look at supporting them. Until then, use the options in section 3.

10. SprintChat, ReviewPilot and Leave Management

When a business uses our products, that business decides how its customers' or staff's data is used — it is the Data Fiduciary, and we process the data on its behalf as its Data Processor. For example, if you messaged a clinic that uses SprintChat, the clinic controls those chats. You can contact that business directly, or send your request through our data rights page and we will pass it on and help the business respond. Each product has its own policy:

• SprintChat privacy policy
• Data deletion
• ReviewPilot privacy policy
• Leave Management privacy policy

11. Changes to this notice

When we change this notice we update the version and date at the top. If a change affects what you agreed to, we will ask for your consent again.