Skip to content
Legal · Privacy Policy

Privacy Policy

Last updated · May 1, 2026

Vexocore IT Services Pvt. Ltd. (“VEXOCORE”, “we”) provides the AI, cybersecurity and engineering layer described at vexocore.io. This page tells you what we collect, why, and how long we keep it.

1. What we collect

Account information you give us (name, email, company), content you submit through forms, usage telemetry (page views, referrers, IPs hashed for rate-limiting), and the contents of support tickets. Customer data processed on our platform is governed by the master services agreement and our DPA.

2. Why we use it

To deliver and improve our services, respond to inquiries, prevent fraud and abuse, comply with legal obligations, and (where you opt in) to send you marketing about VEXOCORE.

3. Lawful bases (DPDPA / GDPR)

Contract performance, legitimate interest in running our business, compliance with the Digital Personal Data Protection Act (DPDPA, 2023), compliance with the Digital Personal Data Protection Act (DPDPA, 2023), and consent for marketing. You may withdraw consent at any time by emailing privacy@vexocore.io.

4. Sharing

With sub-processors listed in our Trust Center, government bodies when legally required, and successors in the event of a merger. We never sell personal data.

5. Retention

Operational logs: 90 days. Marketing data: until you unsubscribe. Customer data: as long as the contract is active, plus 90 days for backup expiry. Audit logs: 12 months. Lead data: 18 months from last activity. Tool scan results: 90 days for free tier, duration of subscription for paid tiers.

6. Sub-processors

We rely on the following sub-processors to deliver our services. Each is bound by a DPA or equivalent data-processing agreement:

  • Supabase — database hosting (auth profiles, audit logs)
  • Cloudflare — CDN, DDoS mitigation, analytics
  • Resend — transactional email delivery
  • Upstash — rate-limiting (Redis)
  • Meilisearch — site search indexing
  • Inngest — background job orchestration
  • Sentry — error monitoring
  • PostHog / Microsoft Clarity — product analytics (consent-gated)
  • Razorpay / Stripe — payment processing

7. Your rights

Access, correction, deletion, portability, objection, and lodging a complaint with a supervisory authority. We respond within 30 days.

Data portability: You can request a machine-readable export of all personal data we hold by visiting your account settings or emailing privacy@vexocore.io.

8. Contact

Email privacy@vexocore.io or write to our Grievance Officer at Bhiwadi, Rajasthan, India.