Privacy Policy

Vartyx (“Vartyx”, “we”, “our”, or “us”) is a product engineering studio headquartered in Jaipur, Rajasthan, India. We provide custom software, AI, fintech, SaaS, mobile, cloud and design services to enterprise clients worldwide.

This Privacy Policy describes how we handle personal information collected through our website (vartyx.com), our sales process, and the products we build and operate on behalf of clients.

We collect only what we need to deliver our services and operate our business. Specifically:

• Identity & contact data — your name, email, phone number, company, role and country, provided via our contact forms or during sales conversations.
• Project data — any briefs, designs, requirements, source code, datasets or credentials you share with us in the course of an engagement.
• Usage data — anonymized analytics about how visitors move through vartyx.com (pages viewed, referrer, device class, approximate region).
• Communications — emails, WhatsApp messages, call recordings (where you’ve consented), proposals and contracts exchanged between you and our team.

We do not collect government IDs, payment card data, or sensitive personal categories (health, biometrics, race, religion) through our website.

We use personal information to:

• Respond to inquiries, draft proposals, and deliver the services you’ve engaged us for.
• Operate and improve our website, including analyzing usage trends and debugging.
• Send transactional emails — proposals, contracts, invoices, status reports — to active clients and prospects.
• Comply with legal, tax, accounting and contractual obligations.
• Protect Vartyx, our clients, and our website from fraud, abuse and security incidents.

We do not sell, rent, or monetize your personal information, and we don’t send promotional email to addresses we haven’t been given permission to contact.

Vartyx shares personal information only in narrow, clearly-scoped circumstances:

• Service providers — cloud hosting, email delivery, analytics and accounting partners (e.g. AWS, Vercel, Google Workspace) who are contractually bound to protect your data and use it only for the purposes we specify.
• Clients — when we’re a sub-processor inside a product you operate, we follow your data-processing instructions and DPA.
• Legal compliance — when required by law, court order, or a credible safety / fraud-prevention need.
• Business transfers — in the event of a merger, acquisition or asset sale, with notice to affected individuals.

We never sell personal data, and we don’t share it with advertising networks or data brokers.

Our website uses a minimal set of cookies for session persistence, security, and aggregate analytics. We don’t use third-party tracking pixels for advertising. You can disable cookies in your browser settings — the site will continue to function, though some preferences won’t persist.

Where applicable (e.g. visitors from the EU/UK), we honor Global Privacy Control and Do-Not-Track signals.

We retain personal information only as long as we need it for the purpose it was collected, plus any period required by law or by a binding client contract.

• Sales inquiries are retained for up to 24 months.
• Active client records and project data are kept for the duration of the engagement plus 7 years (tax and audit requirements).
• Anonymized analytics are retained for up to 26 months.
• Source code repositories are handed back at the end of an engagement and our copies are purged within 90 days unless contractually instructed otherwise.

Depending on where you live, you have the right to access, correct, port, restrict or delete the personal data we hold about you, and to object to specific processing. To exercise any of these rights, email info@vartyx.com from the address we have on file. We respond within 30 days.

You can also withdraw consent to marketing communications at any time by replying STOP, clicking unsubscribe, or letting us know on WhatsApp.

Vartyx operates globally. Personal data may be processed in India, the United States, the EU, the UK and other regions where our service providers operate. Where we transfer data across borders, we rely on Standard Contractual Clauses, adequacy decisions, or your explicit consent — whichever applies.

We treat security as a first-class engineering practice. Our controls include:

• Encryption in transit (TLS 1.2+) and at rest (AES-256).
• Single sign-on, hardware MFA and least-privilege access across internal systems.
• Quarterly access reviews, annual penetration tests and continuous vulnerability scanning.
• An incident-response runbook with named owners and target notification SLAs.

No system is ever 100% secure, but we work to keep ours close. If you believe you’ve discovered a vulnerability, report it to info@vartyx.com.

Our website and services are not directed to children under 16, and we don’t knowingly collect personal information from them. If you believe a child has provided us with personal data, please contact us and we’ll delete it.

We update this Privacy Policy as our practices evolve. When we make material changes, we’ll notify active clients by email and update the “Last updated” date at the top of this page. Continued use of our site after a change constitutes acceptance.

• Email: info@vartyx.com
• WhatsApp / Phone: +91 92160 70161
• Address: Jaipur, Rajasthan, India