1. USER INFORMATION

Depending on the service, we may collect information such as name, email address, phone number, organisation or business information, billing and transaction details, account credentials, service configuration, project requirements, support communications and other information that you voluntarily provide.

For API products, we may process API account identifiers, API keys or tokens, request metadata, usage counts, rate-limit information, logs, timestamps, IP addresses, endpoint usage and technical information needed to authenticate, secure, meter and operate the API service. We do not require you to submit personal information to an API unless it is necessary for the feature you are using.

For software licences and digital products, we may collect licence identifiers, activation information, device or installation information, purchase details, subscription status and usage information required to issue, validate, manage or support the licence.

For development projects, we may receive project briefs, website or application requirements, source material, credentials or configuration information that the customer intentionally provides to us. Customers should not provide information that is unnecessary for the project.

For VAPT / security assessment engagements, we may receive authorised target details, domains, IP addresses, application endpoints, technical architecture information, vulnerability findings, evidence, logs and other security-related information required to perform and report the assessment.

2. USING OUR SERVICES

We may use information to create and manage accounts, provision software licences, activate subscriptions, deliver APIs and digital products, perform development projects, conduct authorised VAPT assessments, provide hosting and dashboard services, process payments, provide support, prevent abuse and fraud, maintain security, improve our products and comply with applicable law.

We may use technical and usage information to measure API consumption, monitor service health, enforce rate limits, diagnose errors, protect infrastructure and improve performance. API payloads may be processed only as reasonably necessary to provide the requested API functionality, maintain security, investigate abuse or comply with legal obligations.

For project and VAPT services, access to customer materials should be limited to personnel or service providers who need that access to perform the contracted work. Customers are responsible for ensuring that they have the necessary rights and authorisations for data, systems, domains, applications and assets provided to Vismrit Tech.

3. COOKIES

Vismrit Tech may use cookies and similar technologies on websites and dashboards to maintain sessions, remember preferences, support authentication, improve performance, understand traffic and help protect accounts and infrastructure.

Our servers may automatically receive technical information such as IP address, browser and device details, operating system, referring page, timestamps and request information. API and dashboard systems may also record security and operational logs for authentication, rate limiting, troubleshooting, billing and abuse prevention.

4. LINKS TO OTHER SITES

Our websites, dashboards, documentation and services may contain links to third-party websites, payment providers, software platforms, cloud providers or other external services. Those third parties operate under their own terms and privacy policies. Vismrit Tech is not responsible for the privacy, security, content or availability of third-party websites or services.

5. INFORMATION SHARING

Vismrit Tech does not sell personal information merely because a user or customer has provided it to us. We may share information where reasonably necessary to operate the business and deliver the service you requested.

• With payment processors, hosting or infrastructure providers, email providers, analytics or monitoring providers, and other service providers that process information on our behalf.
• With personnel or authorised contractors working on a customer's project, API, licence, hosting service or VAPT engagement where access is necessary to provide the service.
• When required by applicable law, regulation, legal process, court order or valid governmental request.
• To detect, prevent or investigate fraud, abuse, attacks, security incidents or violations of our Terms.
• In connection with a merger, acquisition, restructuring, financing or transfer of business assets, subject to appropriate confidentiality and legal safeguards.

VAPT findings and other security assessment information are treated as confidential service information and are not publicly disclosed by Vismrit Tech unless authorised by the customer or required by law.

6. INFORMATION SECURITY

We use reasonable technical and organisational measures designed to protect information against unauthorised access, alteration, disclosure, loss or destruction. These measures may include access controls, authentication, encryption where appropriate, monitoring, logging, secure backups and restricted administrative access.

Security controls and retention may differ by service. API keys, account credentials, hosting credentials, project files and VAPT information should be treated as confidential. Customers should use strong credentials, enable available security controls and notify Vismrit Tech promptly if they suspect an account or credential has been compromised.

No method of transmission or electronic storage is completely secure. Accordingly, Vismrit Tech cannot guarantee absolute security, but we will take reasonable measures appropriate to the nature of the service and the information involved.

7. OTHER

• Grievance Redressal

  Privacy-related complaints, abuse reports or concerns may be sent to [email protected]. Please include enough information for us to understand and investigate the issue.

• Your Rights

  Subject to applicable law, you may have rights to request access to, correction of, updating of, or deletion of personal information held by us, and may have rights to object to or restrict certain processing. Requests may be sent to [email protected]. We may need to verify requests and may retain information where required by law, contract, security requirements or legitimate business purposes.