Privacy Policy & Data Protection Framework

This Privacy Policy sets forth the privacy practices and personal data handling protocols of Vellion Group ("Vellion Group", "the Studio", "we", "us", or "our"), an independent production-grade software and AI automation studio operated by Jay Agarwal (GSTIN: 09EPCPA9623C1Z5), headquartered in Shyam Nagar, Agra, Uttar Pradesh 282001, India.

This policy governs all digital interactions across our official website (https://velliongroup.in), including all subdirectories, service landing pages, portfolio case studies, and engineering blogs. It equally applies to communications via official email, WhatsApp, telephone, video consultations, and contractual software development engagements.

Depending on the nature of your interaction with our studio, we collect three distinct categories of information:

Invoicing & Statutory Financial Data

For commercial contracts, we collect legal billing information required under Indian Tax Law, including your registered business name, billing address, PAN (Permanent Account Number), and State GSTIN (Goods & Services Tax Identification Number) for issuing compliant tax invoices.

We process personal and business data strictly within the lawful bases defined under the Digital Personal Data Protection Act, 2023 (DPDP Act) and global standards:

• Contractual Performance & Pre-Contractual Inquiry: Evaluating project requirements, issuing technical proposals and quotes, executing software development milestones, and providing technical support.
• Direct Engineering Communication: Communicating project status, conducting code reviews, scheduling technical walkthroughs via Google Meet or WhatsApp, and delivering milestone deliverables.
• Legal & Tax Compliance: Maintaining accounting ledgers, issuing GST-compliant tax invoices, and complying with statutory audit mandates under Indian law.
• Legitimate Technical Interests: Monitoring website performance, preventing malicious automated spam or brute-force form attacks, and optimizing site usability and layout.
• Explicit Consent: Triggered when you opt in to direct communications or cookies for targeted advertising attribution (e.g. Google Ads conversion tracking).

As a specialized software studio building AI automation pipelines, mobile applications (Android, iOS & cross-platform), and custom Shopify themes, we recognize that our clients entrust us with sensitive proprietary assets, database schemas, and intellectual property.

Clients requiring formal legal guarantees prior to sharing technical documentation are encouraged to request our bilateral Non-Disclosure Agreement (NDA) by emailing [email protected].

To maintain a secure, high-availability website and deliver enterprise-grade services, we utilize vetted third-party service providers ("Sub-processors") who adhere to stringent privacy and cybersecurity standards:

Cookies are small text files placed on your device to ensure website functionality, measure engagement, and save your visual preferences. We also utilize modern HTML5 localStorage.

How to Control or Disable Cookies

You have the right to accept or decline cookies at any time. You can configure your browser settings (Chrome, Firefox, Safari, Edge) to block cookies, clear stored session data, or notify you when a cookie is placed. Note that disabling essential web storage may cause interface preferences (such as Dark Mode) to reset on page reload.

Vellion Group maintains robust administrative, physical, and technical safeguards engineered to prevent unauthorized access, accidental destruction, disclosure, or alteration of personal data:

• Network Encryption: All web traffic and API endpoints are encrypted in transit using 256-bit Transport Layer Security (TLS 1.3 / HTTPS) with strict HSTS headers.
• Engineering Oversight: As an agile production-grade software and AI automation studio, client project data is never passed to junior third-party sub-agencies. Our lead engineers directly audit and administer all development repositories and deployment pipelines.
• Encrypted Secret Storage: Any temporary production access tokens or database keys are stored in encrypted password vaults with biometric multi-factor authentication (MFA).
• Email Security: Official email domains (@velliongroup.in) are guarded with rigorous SPF (Sender Policy Framework), DKIM (DomainKeys Identified Mail), and DMARC (Domain-based Message Authentication) policies to prevent email spoofing and phishing.

We retain personal information only for as long as necessary to fulfill the specific purposes outlined in this policy:

• General Inquiries & Consultations: Lead information, project inquiries, and scope emails that do not convert into active contracts are archived for up to 24 months to facilitate future follow-up, after which they are securely deleted.
• Active Client Project Artifacts: Communications, architectural documentation, and build logs are preserved throughout the active engagement and for a 12-month maintenance warranty period.
• Tax & Accounting Records: Invoices, transaction records, PAN/GST receipts, and contractual records must be retained for a minimum of 6 to 8 years pursuant to Indian Goods and Services Tax (GST) Acts and the Income Tax Act, 1961.

Under the Digital Personal Data Protection Act, 2023 (DPDP Act) of India and applicable international privacy frameworks, you have clear statutory rights as a "Data Principal":

To exercise any of these rights, submit a written request to [email protected]. We will verify your identity and fulfill valid statutory requests within 30 days at zero administrative fee.

In accordance with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and Section 12 of the DPDP Act, 2023, the name and contact details of the designated Grievance Officer are published below:

We may revise this Privacy Policy periodically to reflect enhancements in our technical stack, changes in applicable data protection legislation, or additions to our service portfolio. When modifications are published, the "Effective Date" at the head of this document will be updated.

We encourage visitors and clients to review this page regularly. Continued engagement with Vellion Group services following the publication of revisions constitutes acceptance of the amended terms.