Privacy Policy

Scope and current availability

VANDORIO GLOBAL TECH PRIVATE LIMITED operates the Vandorio public information website. This policy covers visits to that website and enquiries or privacy requests sent directly to Vandorio. Our company details and privacy contact appear below.

The current website presents company information and products in development. Website enquiry collection, online deletion submissions, Vandorio’s own optional website analytics, optional browser diagnostics and external AI features are disabled. Google Analytics runs only if you accept it in Cookie settings, as described below. The product waitlist and merchant service described on this website are not currently available through it. Product descriptions do not mean that a product is available.

This policy does not authorise future product processing. Private Celestrio accounts, learning, assessments, recordings and payments are separate from this public website and require their own notices. Before a product or review environment begins handling personal information, the applicable notice must describe its actual processing.

Information and purposes

When you visit the website, hosting and security services can receive technical connection information such as your IP address, browser details, requested page and request time to deliver the website, maintain security and investigate faults or abuse. These technical records are distinct from optional visitor analytics.

If you email or otherwise contact Vandorio, we receive the contact details, message and any attachments you provide. We use that information to respond to your enquiry, handle the matter you raise and meet applicable legal obligations. Contacting us is not permission for unrelated marketing.

Please send only information needed for your enquiry or request. Do not send passwords, access tokens, payment-card information, identity documents or unrelated sensitive information. If verification is needed, we will explain what is necessary and the appropriate route. A request about one person is not permission to reveal another person’s information.

The guided website-answer API remains in the deployed source even though its chat interface is not displayed. Requests that pass its initial availability and security checks can create salted network-address identifiers and request-limit records in the connected Neon PostgreSQL service, including requests later rejected during message validation. Valid questions are processed to return pre-written answers without calling an external AI service. The question is not stored in the application’s database by that handler.

Cookies and browser preferences

Necessary browser storage supports the website and remembers privacy preferences. The website privacy-choice cookie is configured to last 180 days. You can manage cookies through your browser and reopen Cookie settings on the website. Removing necessary storage may reset your preferences.

Vandorio’s own optional website analytics and optional browser diagnostics are disabled in the current release. No consent to optional tracking is implied by visiting the website, contacting us or accepting website terms. Any further optional tracking requires updated information and the applicable separate choice.

Google Analytics

If you accept “Google Analytics” in Cookie settings, we use Google Analytics 4, provided by Google LLC, to understand how visitors use our public pages and how they arrive. Google Analytics does not start unless you accept it, and it stays off while your browser sends a Global Privacy Control signal.

When it runs, Google sets cookies named _ga and _ga_<id> on your browser, which last up to two years unless removed, and receives your network address, browser and device details, the page you view without its query string, and the referring site. Google processes this information on its servers, which may be outside India.

We have turned off Google signals and advertising features and do not link Google Analytics to advertising accounts. Google Analytics keeps this event data for two months. Google describes its own handling at policies.google.com/privacy.

You can withdraw at any time through Cookie settings. Withdrawing stops future collection and removes the Google Analytics cookies from this browser. It does not delete data Google has already received, which expires under the retention period above.

Hosting, other recipients and location

Vercel hosts this website, and Cloudflare manages the domain’s authoritative DNS. Google Workspace is configured for the company’s email. If you accept Google Analytics, Google receives the information described above. These providers process information needed for their respective delivery, security, measurement and correspondence functions. Information may also be shared with authorised people handling your enquiry or request, or with a recipient where applicable law requires it.

The current website deployment identifies its function region as Washington, D.C., United States. Website delivery also uses Vercel’s network. Information may therefore be processed outside India. This does not describe every provider’s storage or backup location. Questions about providers or processing locations can be sent to the privacy contact below.

Vandorio does not sell personal information. Information may need to be disclosed where applicable law requires it. Any such request must be assessed against its authority, purpose and scope.

Security

The public website uses HTTPS to encrypt its connection with your browser and sends browser security headers to restrict framing and content-type sniffing. No online service can guarantee absolute security. Security concerns can be sent to security@vandorio.com without passwords, access tokens or unrelated personal information.

Access to correspondence and administrative systems must be limited to authorised people for the relevant purpose. Information and technical records must be protected according to applicable security and retention requirements.

Retention and deletion

The retention criteria for direct correspondence are whether the enquiry or request remains unresolved, whether the information is needed for an ongoing relationship, and whether an applicable legal obligation or documented claim requires it. Request information is used for verification, handling and the necessary record of the outcome. Retention must be limited to those purposes and obligations.

Website technical records have separate security and provider retention requirements. The application’s request-limit records are eligible for cleanup once their recorded limit-window start is more than two days old; eligibility does not prove that cleanup has run. Applicable legal retention duties take priority. A deletion request does not itself remove all provider logs or recovery copies.

Deletion requires assessment of the information concerned, proportionate identity or authority verification and any lawful reason for retention. We will explain the relevant limitation or remaining step when responding. Copies independently held by your email provider, other recipients or another service are outside a request to Vandorio.

Privacy requests and grievances

Darren Joy Vipparty is the contact for privacy requests and grievances. Email legal@vandorio.com with the relevant contact channel, the information concerned and what you want us to do. You do not need an account or online form.

You can ask about access, correction, deletion or withdrawal of consent where applicable. We may need proportionate verification before disclosing or changing information. These requests are assessed under applicable law; this policy does not limit any mandatory rights or deadlines.

Where the Information Technology (Reasonable security practices and procedures and sensitive personal data or information) Rules, 2011 apply, information-processing grievances must be addressed expeditiously and within one month of receipt. Any shorter applicable legal deadline takes priority. Verification does not restart a deadline that runs from receipt. This grievance period is not a promise that every deletion request will be completed within one month.

Updates and product launches

This policy will be updated as products launch or our data handling changes, including changes to existing purposes, recipients, retention or website features. Before enabling new processing or a material change, we will publish the relevant information and obtain any consent or other authorisation required by applicable law. A new policy does not authorise unrelated use of information already collected or remove rights and obligations that already apply.