Vanvora

Legal

Privacy policy

Last updated 17 September 2026

This page is pending review by a qualified professional, and it may change as a result. It is not legal advice.

Who we are

Vanvora (“we”) decides why and how the personal data described here is used, which makes us its data fiduciary under India's Digital Personal Data Protection Act, 2023 (the DPDP Act). Our registered office is DPT 808B, F-79/80, 8th Floor, DLF Prime Tower, Okhla Industrial Area Phase 1, New Delhi, Delhi 110020, India. This policy covers this website and the enquiries, chats and bookings that start on it.

What we collect

When you submit a form on this site (a contact enquiry, a quote request, one of our free tools, or the details the chat asks for) we collect the details you provide, such as your name, email, company, phone number and message. We also record basic attribution data (how you reached us) and your IP address for spam prevention.

The website chat

Vany, the chat on this site, is an assistant rather than a person. After your first question it asks for your first name and email, and offers to take a WhatsApp or phone number if you would like a call back. Continuing starts the conversation, which creates an enquiry in the same way as our contact form. We then keep the conversation, including that first question: your messages, the assistant's replies, which of our written answers it matched, and whether you marked a reply as helpful. If you send us a business problem through the chat, we keep that as well.

The assistant does not use an outside AI service. It runs in our own application and matches your question against answers our team has written, so what you type is not sent to an AI provider or used to train one. People on our team read conversations, to reply to you and to improve the answers when the assistant could not help.

Conversation transcripts are deleted automatically 365 days after the conversation was last active. Your contact details and any business problem you sent are kept with your enquiry like any other, and you can ask us to delete them at any time. Please do not share passwords, card numbers or other sensitive details in the chat.

Booking a call

If you book a call through the calendar on our contact page, the booking is handled by Cal.com, which receives the name, email and any note you enter, and sends the calendar invitation. The calendar runs in a frame served by Cal.com, under Cal.com's privacy policy. If you arrive at the calendar from one of our tools or the contact form, we prefill the booking note with a short summary of what you entered there, which you can edit or delete before booking.

When a call is booked, rescheduled or cancelled, Cal.com tells our systems, and we record the booking (your name, email, the time and your note) against your enquiry so the person you speak to has the context.

Emails and WhatsApp

When you send an enquiry, a quote request or a message from our home page, we email you once to confirm we received it, with a link to book a call. When you ask one of our free tools to email you its result, we send you its headline figures. We send at most three of these automatic emails to an address a day, never the same one twice, they never repeat what you typed, and there is no newsletter or follow-up sequence behind them. Everything else you receive is a reply from a person.

If you message us on WhatsApp, the conversation runs on WhatsApp (Meta) under WhatsApp's privacy policy, and we keep what you send us with your enquiry.

Analytics and cookies

We measure how the site is used so we can fix pages that do not help. Depending on configuration we use up to three services:

  • Google Analytics 4, for which pages people visit, where they arrive from, and whether they reach a form or a booking. Advertising features and advertising cookies are always off.
  • Microsoft Clarity, which records anonymised clicks, scrolling and page interactions so we can see where people get stuck. Text typed into form fields is masked and not captured.
  • Plausible, a cookieless page counter that stores nothing on your device.

Google Analytics and Clarity can set cookies, so we ask first. Visitors in the European Economic Area, the UK and Switzerland are not measured with cookies unless they choose Allow. Elsewhere, measurement is on by default and you can switch it off with Decline. You can change your choice at any time with the Cookie settings link in the footer. We do not sell this data or use it for advertising.

Why we use it, and your consent

We use your information only to respond to your enquiry, prepare quotes, provide the services you ask for, and keep this site free of spam. We rely on the consent you give when you tick the box on a form or continue in the chat. You can withdraw it at any time by emailing us, which is as easy as giving it. Withdrawing stops further use but does not undo what was done before. We do not sell your data, and we do not send marketing you did not ask for.

Who handles it for us

A small number of service providers run this site and our systems. They process data on our behalf and only for these purposes:

  • Vercel, which hosts this website.
  • Microsoft Azure (West Europe region), which runs our application and sends email through Azure Communication Services.
  • Supabase, which hosts our database.
  • Cal.com, for call bookings.
  • Google Analytics and Microsoft Clarity, when measurement is on (see above).
  • WhatsApp (Meta), when you message us there.

Some of these providers store data outside India. We use them under their contractual safeguards, and we do not transfer data to any country the Government of India has restricted.

How long we keep it

  • Enquiries that do not become a project: 12 months after our last contact with you, then deleted.
  • Chat transcripts: deleted automatically 365 days after they were last active.
  • If you become a client, the records of our work together are kept while the engagement lasts and then for as long as tax and accounting law requires.

You can ask us to delete your data sooner, subject to those legal obligations.

How we protect it

Your data is stored with least-privilege access and encrypted in transit. If a breach affected your personal data, we would tell you and the Data Protection Board of India, as the law requires.

Your rights

Under the DPDP Act you can:

  • ask what personal data we hold about you and how we use it;
  • ask us to correct, complete, update or erase it;
  • withdraw your consent;
  • raise a grievance with us and get a response;
  • nominate someone to use these rights for you if you die or become unable to.

To make a request, email hello@vanvora.com. We may need to confirm it is you before acting on a request.

Grievances

Questions or complaints about how we handle your data go to Ayush Jain, Founder, at hello@vanvora.com. If you are not satisfied with our response, you can complain to the Data Protection Board of India.

Children

This site and our services are for businesses. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us their details, tell us and we will delete them.

Contact

Questions about this policy? Reach us at hello@vanvora.com.

Happy with how we handle your data?

Then the next step is a conversation. Forty-five minutes on how your operation actually runs, and a written summary of what we would fix first.

WhatsAppBook an audit