Privacy Policy
Last Updated: June 24, 2026
Vaxi ("we", "us", or "our") values your privacy and is committed to protecting your personal data. This Privacy Policy details how we collect, store, share, use, and process your information when you visit or interact with the Vaxi platform at vaxiai.app, or use our automated web creation services.
We operate in compliance with the **Information Technology Act 2000** (India) and the **Digital Personal Data Protection Act 2023 (DPDP Act)** (India).
1. Data We Collect
We collect the following categories of data:
- Identity & Contact Details: Name, professional email address, phone number, and support message history when you sign up for our waitlist or contact support.
- Prompt & Input Metadata: Prompts, brand names, media files, and descriptions you submit to generate your layouts.
- Billing & Transaction Information: Subscription details, invoice metrics, and transaction status tokens. (Note: We do not directly collect or store full credit card/UPI digits; all financial processing is securely routed through certified aggregators like Razorpay or Stripe).
- Technical & Usage Metrics: IP addresses, browser specifications, page navigation timestamps, device models, and system log values.
- Cookie Analytics: Information stored locally on your device to optimize UI settings, track waitlist status, and capture anonymized search/traffic behaviors.
2. Purposes of Data Processing
We process your personal data under legal bases (such as consent or contractual performance) to:
- Manage waitlist entries and coordinate priority early invitations.
- Configure, generate, and host your customized landing page templates.
- Send product update notifications, security alerts, and support details.
- Prevent fraudulent actions, malicious attacks, or Terms violations.
- Comply with financial reporting and statutory taxation rules.
3. Data Sharing and Third-Party Disclosures
We do not sell, rent, or trade your personal information. We disclose data only to trusted service partners under structural confidentiality agreements:
- Infrastructure Hosting: Vercel or other cloud infrastructure nodes hosting our platform and generated pages.
- Payment Processors: Razorpay or Stripe to process subscription payouts.
- Analytics Connectors: Google Analytics or equivalent nodes to monitor traffic layouts.
- Legal Mandates: Authorized government bodies if required by statutory directives.
4. Your Rights Under the DPDP Act 2023
As a data principal in India, you hold specific rights under the DPDP Act:
- Right to Access: You can request a summary of the personal data we process and the third parties with whom it has been shared.
- Right to Correction & Erasure: You can request corrections to inaccurate personal records or request the deletion of your account credentials.
- Right to Portability: You can request to download your media inputs and generated configuration records.
- Right to Withdraw Consent: You can revoke your data processing permissions at any time (which may restrict access to the Service).
To exercise these rights, email us at aadvikswaraj@gmail.com.
5. Cookies Policy
We use essential and analytics cookies to store UI states, verify login sessions, and track waitlist entries. You can configure your browser to block or refuse cookies. However, please note that blocking essential cookies may disrupt access to edit dashboards.
6. Data Security
We enforce robust technical security layers, including TLS/HTTPS transport encryption, firewalls, and strict database access controls. We store user records in secure database nodes with automatic backup configurations.
7. Grievance Redressal and Officer
For any queries, privacy concerns, or security complaints, you may contact our designated Grievance Officer, who is mandated to acknowledge your complaint within 24 hours and resolve it within 15 days as per the DPDP Act guidelines:
Officer Name: Aadvik Swaraj
Designation: DPDP Compliance Head & Grievance Officer
Email: aadvikswaraj@gmail.com