Privacy Policy

This Privacy Policy explains how UPVANTIX PRIVATE LIMITED (“Upvantix”, “we”, “us” or “our”) handles personal data collected through upvantix.io and its business enquiry form (the “Site”).

The Site provides information about Upvantix products and services. It does not currently provide purchases, subscriptions, customer accounts or live product access. Separate privacy terms and written agreements may apply if you become a customer, partner, supplier, applicant or product user.

Depending on how you use the Site, we may collect:

• Business enquiry data: first and last name, work email address, company name, optional phone number, offering interest, enquiry type and message.
• Enquiry and consent records: source page, submission time, the notice and consent version presented with the form, delivery outcome and related correspondence.
• Technical and security data: IP address, browser and device information, request metadata, referring page, diagnostic information and security-verification data.
• Site usage data: pages visited, traffic source and general interaction or performance information made available by our hosting and analytics providers.

Please do not send passwords, access keys, payment-card data, production credentials, special-category data or other sensitive or regulated information through the general enquiry form.

We use personal data to:

• respond to, assess, route and manage business enquiries;
• create or update a business lead and maintain related enquiry history;
• operate, secure, troubleshoot and improve the Site;
• prevent abuse, enforce our terms and protect our systems and rights;
• maintain business, security and compliance records; and
• meet legal obligations and respond to lawful requests.

We process information with your consent where consent is requested, to respond to steps you ask us to take, for legitimate business and security purposes where permitted, and to comply with law. We do not sell personal data or use website enquiries for third-party advertising. We do not use Site data to make decisions producing legal or similarly significant effects solely by automated means.

When you submit the form, Upvantix verifies the request and sends the information through a server-side connector to Zoho CRM. We search for an existing lead using the submitted email address. We may create a new lead or update the matching lead and add the enquiry as related history.

The CRM record may include the form information, source page, submission time, consent version and wording, offering interest and correspondence. Authorised Upvantix personnel use this record to prepare and manage an appropriate business response. Submitting an enquiry does not create a contract or service commitment.

We use the following providers for the Site and enquiry workflow:

• Lovable: hosting, technical services, project analytics and the server-side connector used to deliver enquiries.
• Cloudflare Turnstile: security verification and abuse prevention on the contact form.
• Zoho CRM: business lead and enquiry management. Upvantix’s Zoho account uses the India data centre.
• Google Search Console: search visibility and Site performance reporting.
• Google Tag Manager and Google Analytics 4: tag delivery and aggregated visitor analytics, such as pages viewed, traffic sources and successful enquiry submissions (recorded without names, email, phone or message content).
• Zoho Marketing Automation and Zoho PageSense: marketing analytics, visitor behaviour insights and campaign measurement.

These providers process information according to our configuration, agreements and their applicable privacy terms. Provider infrastructure, support or subprocessors may involve access from or processing in countries outside India. Where applicable law requires a transfer measure, we use the measure appropriate to the processing and provider relationship.

We may also disclose information to professional advisers, insurers, auditors, authorities or transaction counterparties when reasonably necessary and permitted or required by law.

The Site stores a theme preference in your browser’s local storage. The contact page loads Cloudflare Turnstile when security verification is available; Turnstile may use cookies, local storage and browser or network signals to distinguish legitimate requests from abuse. Hosting infrastructure may maintain essential request and security logs.

When you first visit, the Site shows a cookie consent banner with three categories: Essential (always on), Analytics and Marketing. You can accept all, reject non-essential, or manage categories. Your choice, the version shown and the time of choice are stored in your browser for up to 12 months so the banner does not ask again on every visit. You can change or withdraw your choice at any time using the Cookie preferences link in the footer.

Google Tag Manager loads as an essential tag and uses Google Consent Mode. Until you choose, analytics and advertising storage are denied. Google Analytics 4 sets analytics cookies only when you allow the Analytics category. Zoho Marketing Automation and Zoho PageSense run only when you allow the Marketing category.

If you withdraw a category, Consent Mode is updated immediately. When you withdraw Marketing, the page reloads so Zoho scripts stop running on that and later pages. Cookies already set may remain until they expire or you clear them in your browser settings, although doing so can affect Site features.

We keep business enquiry and lead information while the enquiry or business relationship is active and for a reasonable period afterwards so that we can maintain context, honour choices and meet legal, security, accounting or dispute requirements. We review inactive records and delete or de-identify them when the business and legal purposes have ended.

Consent, withdrawal and privacy-request records may be retained for longer where needed to demonstrate and honour the recorded choice. Technical logs and backups follow shorter operational or provider-controlled cycles unless an incident, legal hold or applicable law requires longer retention. Anonymous or aggregated information may be retained where it no longer identifies an individual.

We use organisational and technical measures designed to protect personal data, including server-side form validation, origin checks, rate limiting, anti-abuse verification, restricted credentials and controlled access to business systems. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security.

Subject to applicable law, you may ask us about our handling of your personal data, request access, correction, completion, updating or erasure, withdraw consent, object to or restrict certain processing, or raise a grievance. Withdrawing consent does not affect processing already carried out lawfully and may limit our ability to continue an enquiry.

Email info@upvantix.io and describe your request and the email address used for the enquiry. We may request proportionate information to verify identity and protect against unauthorised access or deletion. We will respond within the period required by applicable law. Where applicable, you may also complain to the competent data-protection authority after using our grievance process.

The Site and enquiry form are intended for people aged 18 or over acting in a business capacity. We do not knowingly request personal data from children. If you believe a child has submitted information, contact us so we can review and delete or otherwise handle it as required by law.

We may update this policy to reflect changes in the Site, our providers, our practices or the law. We will publish the updated effective date and provide additional notice or seek consent where required for a material change.

Privacy questions, requests and grievances can be sent to info@upvantix.io. The responsible role is the CEO of UPVANTIX PRIVATE LIMITED; this role is not presented as a statutory Data Protection Officer.