Privacy Policy

Vysync Technologies Pvt. Ltd. ("Vysync", "we", "us", or "our") is committed to protecting the privacy, confidentiality, and integrity of data entrusted to us by visitors, clients, software platform users, and partners.

This Privacy Policy governs the collection, processing, transfer, storage, and retention of personal data obtained through vysync.com, our subdomains (including hrms.vysync.com and crm.vysync.com), client web portals, API interfaces, and direct consulting engagements.

By interacting with our services or executing a Statement of Work (SOW) with Vysync, you acknowledge and accept the data practices described in this document.

We collect information strictly necessary to provide reliable software engineering services, deploy production-grade software platforms, and maintain enterprise customer relations:

• Directly Provided Information: Full name, business email address (e.g., sales@vysync.com inquiries), phone number, company name, project specifications, and requirements submitted via contact or proposal forms.
• Client Enterprise Telemetry: When deploying platforms like Vysync HRMS or Vysync CRM, client-provisioned tenant data, authorized user roles, and operational metadata are processed in isolated multi-tenant or single-tenant sandboxes.
• Technical & Usage Telemetry: IP addresses, browser user-agent signatures, referring URLs, operating system metadata, and page interaction timestamps gathered to maintain application performance, prevent malicious scraping, and diagnose errors.
• Cookies & Session Data: Essential cookies for authentication sessions, CSRF token validation, and user interface preferences. We do not engage in cross-site tracking or commercial data brokerage.

All collected data is processed under legitimate business interests, contractual necessity, or explicit user consent. We never sell, rent, or monetize your personal or company data.

• Service Delivery: Scoping, designing, developing, testing, deploying, and maintaining enterprise web applications, mobile apps, and AI solutions.
• Communication & Support: Responding to requests for proposals (RFPs), delivering project progress demos, sending service notifications, and providing technical support.
• Security & Auditing: Detecting denial-of-service attempts, preventing unauthorized API access, investigating anomalies, and verifying compliance with contractual SLAs.
• Statutory Obligations: Complying with applicable laws, corporate audits, tax regulations, and lawful orders from judicial authorities.

Vysync implements bank-grade administrative, technical, and physical safeguards to prevent unauthorized access, alteration, disclosure, or destruction of sensitive information:

• Encryption: All data in transit is encrypted using modern TLS 1.3 cryptographic suites. Data at rest is encrypted using AES-256 with managed KMS rotation.
• Zero Trust Access: Access to production servers, databases, and client code repositories is strictly restricted to vetted engineers via multi-factor authentication (MFA) and least-privilege role-based access controls (RBAC).
• Network Isolation: Production workloads reside in isolated Virtual Private Clouds (VPCs) with strict security groups, web application firewalls (WAF), and automated DDoS mitigation.
• Retention Limits: We retain personal information only for as long as necessary to fulfill the purpose for which it was gathered, or to comply with statutory accounting requirements.

We do not share your personal information with third parties except under the following controlled conditions:

• Infrastructure Sub-processors: Enterprise cloud providers (e.g., AWS, Google Cloud Platform) hosting encrypted workloads under signed Data Processing Agreements (DPAs).
• Transactional Services: Certified email delivery gateways and DNS/CDN services configured with strict confidentiality commitments.
• Legal Compliance: Disclosures required by law, subpoena, or urgent prevention of imminent physical or cybersecurity harm.

Depending on your jurisdiction, you hold substantial statutory rights regarding your personal information:

• Right of Access: Request copies of any personal records Vysync holds regarding you or your organization.
• Right to Rectification: Correct inaccurate or incomplete profile or corporate details.
• Right to Erasure ('Right to be Forgotten'): Request deletion of your personal records, subject to legal and statutory recordkeeping mandates.
• Right to Restrict or Object: Restrict processing of your data or opt out of non-essential communications at any time.
• Right to Data Portability: Obtain your structured data in a commonly readable machine format (JSON / CSV).

For any questions, rights requests, or data protection inquiries, you may reach our compliance and legal team directly: