Privacy Policy

This Policy covers personal data collected through vegasky.in and any other websites we operate, through our software platforms (including Vegasky NetVision, Vegasky NexusERP, Vegasky ServiceOne and Vegasky FinCorp) where Vegasky is the data controller, and through your other interactions with us, such as email, telephone, WhatsApp, social media, events and webinars.

It does not cover websites or services run by third parties that we link to, or that link to us. Their privacy practices are their own, and we encourage you to read their policies.

Where a customer organisation uses our platforms to process data about its own employees, users or customers, that processing is governed by our agreement with the customer. In those cases the customer is the controller and we act on its instructions.

We may revise this Policy from time to time as our services, technology or legal obligations change. The revised version will be published on this page with an updated date. Material changes will be highlighted on the site or communicated to affected customers directly.

We collect personal data when you:

• Browse our websites, through cookies, server logs and similar technologies
• Submit a form, such as a contact enquiry or a demo request
• Use, evaluate or receive support for one of our platforms
• Correspond with us by email, telephone, WhatsApp or social media
• Register for or attend an event, webinar or training we host or sponsor
• Apply for a role with us

The data we hold depends on how you interact with us.

Information you give us:

• Identity and contact details, such as your name, organisation, job title, work email address, telephone number and postal address
• The content of your enquiries, demo requests, support tickets and other correspondence, including any attachments you choose to share
• Billing and invoicing details needed to fulfil a contract
• Information you include in a job application, such as your CV and work history
• Responses to surveys, feedback forms or event registrations

Information collected automatically:

• Technical data such as IP address, device type, operating system, browser type and language, and screen size
• Usage data such as the pages you visit, the links you click, the referring site, and the date and time of each visit
• Diagnostic data such as error reports and performance logs from our websites and platforms

Information from other sources:

• Business contact details provided by your employer when it engages our services on your behalf
• Contact details shared by partners, resellers or event co-hosts, where permitted
• Publicly available professional information, for example from a company website or professional networking profile

We use personal data only for the purposes described below. Where the law requires it, we ask for your consent. Otherwise we rely on the performance of a contract, our legitimate business interests or a legal obligation as the basis for processing.

• Delivering our services: to set up, operate, secure, support and improve the platforms and services you or your organisation have engaged us to provide, and to send service notices such as maintenance windows, security alerts and billing information. These messages are part of the service and cannot be opted out of while the service is active.
• Responding to you: to answer enquiries, arrange demonstrations, prepare proposals and follow up on requests you make.
• Marketing: to tell you about products, features, events and insights we believe are relevant to your role. You can opt out at any time using the link in any marketing email or by contacting us.
• Improving our websites and platforms: to understand how they are used, fix problems and develop new capabilities. Wherever possible we do this with aggregated or anonymised data.
• Security and fraud prevention: to protect our systems, our customers and the public, to detect and investigate misuse, and to enforce our terms.
• Legal compliance: to meet our obligations under applicable law, respond to lawful requests from authorities, and establish or defend legal claims.
• Recruitment: to assess applications and communicate with candidates.

We do not sell or rent personal data. We share it only in the following circumstances:

• Group companies: with affiliates under common ownership, who are bound by this Policy.
• Service providers: with vendors who perform functions on our behalf, such as cloud hosting, email delivery, customer relationship management, analytics, payment processing and customer support. They may access only the data needed for their task and are contractually required to protect it and to use it solely for our purposes.
• Business partners: with partners involved in a specific engagement or event, for example a co-hosted webinar or a joint implementation. We tell you when this applies and you may opt out.
• Social media and embedded features: when you interact with social media buttons or embedded content on our sites, the relevant provider may collect data under its own policy.
• Legal and safety reasons: where disclosure is required by law, regulation or legal process, or is necessary to protect the rights, property or safety of Vegasky, our customers or the public.
• Business transfers: as part of a merger, acquisition, financing, reorganisation or sale of assets, in which case the recipient will be required to honour this Policy.

Our websites use essential cookies needed for the site to work, and may use analytics cookies to understand traffic and improve content. You can control cookies through your browser settings. Blocking essential cookies may affect how the site functions. If we introduce advertising or additional tracking technologies, we will update this Policy and provide appropriate controls.

We keep personal data for as long as needed to fulfil the purposes described in this Policy: for the duration of your relationship with us, and afterwards for the period required to meet legal, accounting, audit or contractual obligations and to resolve disputes.

When a customer engagement ends, service data is returned or deleted in line with the customer agreement, allowing for a reasonable period for backups to expire. Data that is no longer needed is securely deleted or anonymised.

We apply organisational, technical and physical safeguards appropriate to the sensitivity of the data we hold, including access controls, encryption in transit and at rest, logging and monitoring, and staff training. Our own platforms are built on the same secure-by-design principles we apply for customers.

No method of transmission or storage is completely secure. If we become aware of a breach affecting your personal data, we will notify you and the relevant authorities as required by law.

Where payments are made online, card details are collected and processed directly by our payment service provider. Vegasky does not receive or store full card numbers. Bank transfer details provided for invoicing are used only to process and reconcile payments.

We are based in India and store data primarily on infrastructure located in India. Some service providers may process data in other countries. Where that happens, we ensure appropriate contractual and technical safeguards are in place.

Our websites and services are intended for business use and are not directed at anyone under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

Subject to applicable law, including India's Digital Personal Data Protection Act, 2023, you may:

• Request access to the personal data we hold about you
• Ask us to correct inaccurate or incomplete data
• Ask us to delete data we no longer need to retain
• Withdraw consent where processing is based on consent
• Opt out of marketing communications at any time
• Nominate a person to exercise these rights on your behalf where the law provides for it

To exercise any of these rights, contact us using the details below. We may need to verify your identity before acting on a request. If you are not satisfied with our response, you may raise the matter with the Data Protection Board of India or the supervisory authority in your jurisdiction.