VAYA LABS

Privacy Policy

Last updated: 2026-09-15 · Effective for vayalabs.in and related services

This is a lite-form policy for an early-stage sole proprietorship, written in plain language and aligned with the Digital Personal Data Protection Act (DPDPA), 2023. It will be expanded (dedicated grievance officer, DPO contact) once Vaya Labs is formally registered. This is not a substitute for legal review.

1. Who we are

Vaya Labs ("we", "us") provides Notion systems, data reporting, automation, and related services to clients in India and abroad, reachable at [email protected].

2. What we collect

Contact details you submit via our inquiry, feedback, or contact forms — name, email, phone (optional), company name
Project details you share with us — service needed, budget range, timeline, project description
Billing details necessary to issue estimates/invoices — name, billing address, payment reference
Basic website analytics (page views, general location by country) if enabled by our hosting provider

3. Why we collect it

To respond to your inquiry and prepare an estimate or proposal
To deliver contracted services and communicate about ongoing work
To issue invoices and maintain records required for tax compliance
To improve our services, only where you've given feedback voluntarily

We do not sell your personal data, and we do not use it for purposes beyond what's stated here without asking you first.

4. Consent

By submitting a form on this site, you consent to us processing the information you provide for the specific purpose stated on that form. You may withdraw consent at any time by emailing [email protected] — this may affect our ability to continue an active engagement.

5. Who we share it with

We use a small number of service providers to run our business, who process data on our behalf under their own security practices:

Notion (client and project records)
Make.com (workflow automation between our forms, email, and records)
Our email and hosting providers

We do not share your data with anyone else without your consent, except where required by law.

6. How long we keep it

We retain client and billing records for as long as needed to deliver services and meet tax/accounting record-keeping obligations under Indian law, typically up to 8 years for financial records. Inquiry data from leads that don't convert is deleted or anonymized within 12 months.

7. Your rights

Under the DPDPA, you have the right to:

Ask what personal data we hold about you
Ask us to correct inaccurate data
Ask us to erase your data, subject to our legal record-keeping obligations
Withdraw consent, and raise a grievance if you're unhappy with how we've handled your data

To exercise any of these, email [email protected]. We'll respond within a reasonable time.

8. Security

We take reasonable technical and organizational measures to protect your data, including limiting access to those who need it to deliver your project.

9. Changes to this policy

We may update this policy as our business grows or as DPDPA rules are further clarified by the government. Material changes will be posted here with an updated date.