Privacy Policy

Ventron ("Ventron", "we", "us") operates the website at https://ventron.in. The website is a marketing and company site for our software, SaaS, AI and automation work. The legal entity responsible for your personal data is Ventron, a sole proprietorship of Vineet Sharma, Azad Nagar, Hisar, Haryana, India.

For any privacy question, or to exercise your rights, contact us at ceo@ventron.in. Our designated contact for grievances and data-protection matters is Ventron Grievance Contact (ceo@ventron.in).

This policy covers personal data collected through the https://ventron.in website. It does not govern the software products or custom systems we build for clients — those are covered by the specific agreement, Statement of Work, or Data Processing Addendum for that engagement, where we typically act as a processor on the client's behalf.

Information you give us directly

Our contact page has two forms — a product demo request and a custom project enquiry. When you submit either, we receive the details you choose to enter:

• Both forms: your name, your phone number, any message you write, and — if you opt in — your preference to receive product updates
• Both forms: your business or company name (optional) and your email address (required for a project enquiry, optional for a demo request)
• Product demo request: the product you are interested in, your city, your preferred demo method, and optionally your type of business or approximate number of employees
• Custom project enquiry: the project type, your project description, and optionally an estimated budget range and expected timeline

A copy of each form submission (name, phone, email, the product or project type, and the page it came from — not your message) is also kept in our enquiry log, a Google Sheet, so we can track follow-up.

Submitting a form is the only way you give us personal details — nothing of that kind is collected silently. We ask only for what we need to respond usefully to your inquiry.

Callback request (the “Let’s connect” form)

You can leave your details through the voluntary “Let’s connect” form, or the “Request a callback” link in the footer. It never opens on its own until you have answered the cookie banner and spent about half a minute on the site, and not again for 14 days if you close it. We collect:

• Your full name (required)
• Your mobile number and/or your email address (at least one)
• The product you are interested in (optional)
• The page you were on and the website you came from
• Your agreement to be contacted — the box is never pre-ticked, and we do not store the details without it

We email the submission to our inbox through Web3Forms and store it in our enquiry log (a Google Sheet). It is not linked to any visit statistics: the enquiry log holds no visit ID, and the visit statistics hold no name, phone or email.

Chat assistant

The assistant on this website is a scripted tool that runs in your browser. What you type to it is not sent to us and is not stored — it exists only on the open page and disappears when you close or refresh it. If you choose to leave your details in the assistant's contact form, your name, your phone number or email address, and your requirement are sent to us through Web3Forms, in the same way as the inquiry form above.

Information collected automatically

The website sets no cookies. It keeps a small note of your cookie choice on your device and, only if you accept analytics, a few anonymous visit statistics (see our Cookie Policy). We also use Cloudflare Web Analytics to understand, in aggregate, which pages are visited and how quickly they load. In addition, our hosting and form providers process limited technical data as a normal part of delivering the service securely:

• Cloudflare Web Analytics receives the page you visited, where you arrived from, your approximate country, browser, operating system, device type and page-load timings. Cloudflare states it does not use cookies, local storage or fingerprinting for this service, and we see aggregate statistics only.
• Our hosting provider (Cloudflare Pages) may process your IP address, approximate location, browser/device information and request logs to serve the site and protect it against abuse.
• Our form provider (Web3Forms) may capture technical metadata such as your IP address when you submit the form, for delivery and spam prevention.
• These providers apply their own standard retention periods to such technical logs; we do not control those periods.

Visit statistics (only with your consent)

If you accept analytics in the cookie banner we record anonymous, per-visit statistics, described in full in our Cookie Policy: device, browser, country, pages viewed, how you arrived and which buttons you used. They contain no name, phone, email or IP address and cannot be matched to a person from the sheet. If you do not accept, none of this is recorded.

Information from third parties

We do not buy, rent or enrich your personal data from third-party sources.

We use the personal data described above only to:

• Read, evaluate and respond to your demo request or project inquiry
• Have the follow-up conversation needed to scope potential work
• Keep records of our correspondence and any resulting engagement
• Operate, secure and maintain the website
• Send product updates, only where you have separately opted in
• Call, email or message you about the enquiry or callback you asked for
• Understand — anonymously and only if you have accepted analytics — which pages and products people use, so we can improve the site
• Comply with applicable legal obligations

Under India's Digital Personal Data Protection Act, 2023, we rely on your consent (which you give by submitting the form) and, where relevant, on the legitimate uses permitted by that Act. Where the EU/UK GDPR applies to a particular interaction, our lawful bases are your consent, and our legitimate interest in responding to and managing business inquiries.

We do not sell your personal data, and we do not share it with advertisers. We share it only with the service providers that make the website work, and only as needed:

• Cloudflare, Inc. — website hosting, content delivery, security and aggregate website analytics (processes technical/log data).
• Web3Forms — relays your inquiry from the form to our inbox (processes the submission for delivery only).
• Our email provider, Hostinger — receives and stores the resulting inquiry email at ceo@ventron.in.
• Google LLC — provides the Google Sheet and Apps Script that receive and store callback requests, form copies and (with your consent) anonymous visit statistics. Google processes this on our behalf under its own terms.
• Professional advisers, or authorities, only where required by law or to establish or defend legal claims.

We do not add any other third-party processors without updating this policy first.

Our hosting and form providers operate global infrastructure, so your data may be processed on servers outside India, including in other jurisdictions. We do not claim your data is stored exclusively in India. Where transfers are subject to the GDPR or other law, we rely on the safeguards and mechanisms offered by those providers.

Google's infrastructure is global, so enquiry-log and visit-statistics data may be stored and processed outside India. We do not claim it is held exclusively in India.

We keep inquiry data only for as long as needed to handle your inquiry and any engagement that follows, and to meet our legal, accounting and dispute-resolution needs. When it is no longer needed, we delete or anonymise it.

For inquiries that do not become engagements, we retain the inquiry and related correspondence for up to 24 months from our last contact with you, after which it is deleted or anonymised. Where an engagement results, we retain records for its duration and for the period afterwards required to meet our legal, accounting and dispute-resolution needs.

Anonymous visit statistics are deleted after 12 months. Callback requests and form copies in the enquiry log are deleted after 24 months unless they have become a customer relationship, in which case the record is kept for the period set out above. Deletion runs automatically every day.

We apply reasonable technical and organisational safeguards appropriate to a static website: encryption in transit (HTTPS/TLS), strict security response headers and content-security-policy, no secrets in front-end code, and limited access to the inbox that receives inquiries.

The enquiry log is restricted to named Ventron accounts, and the website's code contains no credentials. The script that receives submissions validates and size-limits every request, rate-limits abuse, and writes values as plain text so a hostile submission cannot run as a spreadsheet formula.

No method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. If we become aware of a personal-data breach that is likely to result in risk to you, we will act in accordance with applicable law.

Under the DPDP Act, 2023, as a Data Principal you may, subject to the Act and its rules as they come into force:

• Access a summary of the personal data we process about you and how we process it
• Request correction, completion or updating of your personal data
• Request erasure of your personal data where it is no longer required
• Withdraw consent you previously gave (this does not affect processing already carried out)
• Nominate another individual to exercise your rights in the event of death or incapacity
• Raise a grievance with us and, if unresolved, with the Data Protection Board of India

If the GDPR applies to you, you may in addition have rights to restrict or object to certain processing and to data portability. We will not incorrectly claim that every right applies to every user — the rights available depend on the law that applies to you.

To exercise any right, email ceo@ventron.in with enough detail for us to identify your records. We may ask you to verify your identity before we act, so that we do not disclose your data to anyone else.

To see, correct or delete what the enquiry log holds about you, email ceo@ventron.in from, or quoting, the phone number or email address you gave; we will find the matching rows, send you a copy or delete them, and confirm. To withdraw consent for analytics, use “Cookie preferences” in the footer. Because visit statistics are anonymous we cannot pick out one person's row from a name, so withdrawing consent in the browser you used deletes the row for that visit, and older anonymous rows expire on their own after 12 months.

If you have a grievance about how we handle your personal data, please contact us at ceo@ventron.in (attention: Ventron Grievance Contact (ceo@ventron.in)). We will acknowledge your grievance within three (3) working days of receiving it, and will work to resolve it without undue delay and within the timelines prescribed under the Digital Personal Data Protection Act, 2023 and its Rules as they come into force.

If you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India, in the manner and within the timelines provided under that Act and its Rules.

Data-protection officer

Ventron is not currently a Significant Data Fiduciary, and is therefore not required to appoint a Data Protection Officer under the DPDP Act. We have instead designated the grievance contact above to answer questions and handle requests about your personal data. If Ventron is later notified as a Significant Data Fiduciary, we will appoint a Data Protection Officer based in India and update this policy with their details.

Ventron is based in India and does not currently target its website or services at individuals in the European Economic Area or the United Kingdom. The EU and UK GDPR apply only where we intentionally offer goods or services to, or monitor the behaviour of, individuals located there.

Where the GDPR does apply to a particular interaction, our lawful bases are your consent and our legitimate interest in responding to and managing business inquiries; you additionally have the rights to restrict or object to certain processing and to data portability, and the right to lodge a complaint with your local supervisory authority. If you believe your personal data is processed by us within the scope of the GDPR, contact us at ceo@ventron.in and we will handle your request accordingly.

The website is intended for businesses and professionals, and is not directed at children. We do not knowingly collect personal data from children. Under the DPDP Act, processing a child's data requires verifiable parental consent and additional safeguards; if any future Ventron product is intended for use by children, it will undergo a separate legal and product compliance review before launch.

We may update this policy as our practices or the law change. When we make material changes we will update the effective and last-updated dates at the top of this page, and where appropriate take additional steps to notify you.

Questions, requests or complaints about privacy: ceo@ventron.in. Formal grievance/data-protection contact: Ventron Grievance Contact (ceo@ventron.in). Registered entity: Ventron, a sole proprietorship of Vineet Sharma, Azad Nagar, Hisar, Haryana, India.