Privacy Policy
Effective date: August 1, 2026
1. Introduction
Nevethiya Solutions LLP ("VynelixAI", "we", "us"), operating as VynelixAI from Bengaluru, India, respects your privacy. This Privacy Policy explains what personal data we collect, how we use it, and the choices you have across our website, products (Genveth, AI SRE Agent, Agent Studio), and services.
This policy is designed to address requirements under India's Digital Personal Data Protection Act, 2023 (DPDP Act), applicable US state privacy laws including the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), and related US federal expectations for notice, security, and consumer choice. It is not legal advice; for enterprise contracts, the customer DPA/MSA controls.
2. Data Fiduciary / Controller
For personal data collected via this website, Nevethiya Solutions LLP acts as the Data Fiduciary (India) / business (US). Contact: support@vynelixai.com. Postal address: No.131, Third Floor, M.B.N Arcade, 8th Cross, 10 Main, ITI Layout, HSR Layout, Bengaluru, Karnataka 560068, India.
For enterprise product deployments, the customer typically acts as the Data Fiduciary/Controller for end-user data processed in the product; we act as a Data Processor / Service Provider under the applicable agreement.
3. Information We Collect
Information you provide: name, email, phone, company, role, message content when you use contact/demo forms, newsletter signup, or job applications.
Automatically collected: IP address, device/browser type, approximate location derived from IP, pages viewed, and referral URLs via essential logs and — only with consent — analytics/marketing cookies.
Product data: enterprise customer content submitted to operate services (e.g. candidate profiles in Genveth, operational telemetry in AI SRE Agent), governed by the customer agreement.
4. Purpose and Legal Basis / Consent
India (DPDP Act): We process personal data for specified purposes with free, specific, informed, unconditional, and unambiguous consent where required, or under legitimate uses permitted by law (e.g. employment, compliance, security).
United States: We process personal data to provide requested services, operate and secure our website, communicate with you, improve our offerings, and comply with law. Where required by state law, we provide notice at or before collection and honor opt-out rights for sale/sharing of personal information and targeted advertising.
We do not sell personal information for money. If we engage in cross-context behavioral advertising using cookies/pixels, we treat that as “sharing” under CCPA/CPRA and only enable those tags after you opt in via our cookie banner (or as otherwise permitted after you do not opt out, depending on jurisdiction and configuration).
5. How We Use Information
Respond to inquiries and demo requests; provide and improve products and services; send operational or marketing communications (you may opt out); maintain security and prevent fraud/abuse; comply with legal obligations; and analyze aggregated site usage when analytics cookies are consented.
6. Data Sharing and Cross-Border Transfers
We may share data with vetted service providers (hosting, email, security, analytics) under confidentiality and data-processing terms, or when required by law or to protect rights and safety.
Because we serve customers in India, the United States, and Asia, personal data may be processed in India and/or other countries where our providers operate. We apply contractual and technical safeguards appropriate to the transfer, consistent with DPDP Act transfer rules and customer contractual requirements.
7. Security Measures (TLS / Encryption)
We transmit personal data over HTTPS using modern TLS (TLS 1.2+; TLS 1.3 preferred) terminated at our hosting/CDN edge with valid publicly trusted SSL/TLS certificates. We enforce HTTP Strict Transport Security (HSTS) in production.
Additional measures include encryption at rest for databases and object storage where offered by providers, bcrypt password hashing for admin accounts, role-based access control, rate limiting, security headers (CSP, X-Frame-Options, etc.), audit logging for privileged actions, and least-privilege credentials.
8. Data Retention
We retain personal data only as long as necessary for the purposes described, for the duration of a customer relationship, or as required by applicable Indian or US law, after which it is deleted or anonymized. Consent records for cookies/marketing may be retained to demonstrate compliance.
9. Your Rights — India (DPDP Act)
Subject to applicable exceptions, Data Principals may have rights to: access a summary of personal data and processing activities; correct inaccurate data; erase data when consent is withdrawn or purpose is fulfilled; withdraw consent; nominate another person in case of death or incapacity; and seek redress for grievances.
To exercise these rights or raise a grievance, email support@vynelixai.com with the subject “DPDP Request”. We will respond within timelines required by applicable law and rules.
10. Your Rights — United States (CCPA/CPRA and similar)
Depending on your state of residence, you may have rights to know/access, correct, delete, and opt out of sale or sharing of personal information and certain targeted advertising; and to non-discrimination for exercising privacy rights.
California residents: To submit a request, email support@vynelixai.com with “CCPA Request”. You may designate an authorized agent as permitted by law. We will verify requests as required before fulfilling them.
We do not knowingly sell the personal information of consumers under 16 years of age.
11. Children’s Privacy
Our website and enterprise services are not directed to children under 13 (US COPPA) or to children as defined under Indian law for the relevant service. We do not knowingly collect personal data from children. If you believe we have, contact us for deletion.
12. Cookies and Similar Technologies
Essential cookies are required for security and basic site function. Analytics and marketing cookies load only after you make a choice in our cookie consent banner. Details are in our Cookie Policy.
13. Changes
We may update this Privacy Policy to reflect legal, technical, or business changes. The effective date at the top will be revised. Material changes affecting consent may be communicated via the website or email where appropriate.
14. Contact / Grievance
Privacy and data-protection requests: support@vynelixai.com
Postal: No.131, Third Floor, M.B.N Arcade, 8th Cross, 10 Main, ITI Layout, HSR Layout, Bengaluru, Karnataka 560068, India
For India DPDP grievances, use the same contact and mark the subject “Grievance Officer / DPDP”. We will acknowledge and resolve complaints in accordance with applicable rules.
