Skip to content
Vivanet

Privacy policy.

How we collect, use, and protect your data. Written to be read, not scrolled past.

Last updated: 25 October 2026

Who we are

Vivanet is a technology capability company headquartered in Pune, India. This policy covers vivanet.in and any service we deliver through it. When we say “we” or “us”, we mean Vivanet. When we say “you”, we mean the person reading this page or interacting with us.

Using the site or submitting a form means you accept this policy. If any part of it is a dealbreaker, don't submit personal data, and get in touch via the contact details at the bottom so we can discuss alternatives.

What we collect

Information you give us

When you fill in the contact form, email us, or engage with us professionally, we may collect:

  • Name and work email
  • Company name and your role
  • Phone number, if you provide one
  • A description of what you're trying to build, and anything you choose to include in the message field
  • For candidates: CV content, work history, and anything shared during interviews

Information collected automatically

When you visit the site, the following is captured by our analytics providers (see the Third parties section):

  • IP address, approximate location, and device type
  • Browser and operating system
  • Pages visited, time on page, scroll depth, click paths
  • Referring URL (where you arrived from)
  • Cookies and similar identifiers

How we use it

We use what we collect to:

  • Reply to the enquiry you sent us
  • Scope and deliver work we've been engaged for, including client contracts and recruitment
  • Understand how the site is used so we can improve it
  • Detect abuse, spam, and fraudulent form submissions
  • Meet legal obligations under Indian law and the laws of jurisdictions where we operate

We don't send marketing emails from form submissions. If we ever start a newsletter, it will be a separate, explicit opt-in.

Legal basis for processing

Under GDPR (for visitors from the EEA / UK) and India's Digital Personal Data Protection Act 2023 (DPDPA), we process personal data on one of these grounds:

  • Consent — when you submit a form or accept cookies
  • Contract — when we're delivering a signed engagement
  • Legal obligation— tax, employment, and regulatory requirements
  • Legitimate interest — running the website, measuring its reach, and preventing abuse. We balance this against your privacy rights and will stop on request where the balance tips.

Third parties we use

We don't sell your data. The following vendors process limited data on our behalf, each under their own privacy terms:

  • Google Analytics 4 — pageview analytics, pseudonymous visitor IDs
  • Google Ads — conversion attribution if you arrived from one of our ads
  • Microsoft Clarity — session replay and heatmaps to understand UX friction
  • Web3Forms — contact-form delivery to our inbox
  • hCaptcha — bot protection on the contact form
  • AWS S3 & CloudFront — hosting and global content delivery

Beyond this list, we may share data with professional advisors (lawyers, accountants) or in a merger / acquisition — and where legally compelled by a lawful request from an authority.

Cookies

We use three categories of cookies and similar technologies:

  • Essential — needed for the site to work (e.g. consent state). These load without asking.
  • Analytics — Google Analytics and Microsoft Clarity. Loaded to help us improve the site.
  • Advertising — Google Ads conversion tracking.

You can clear or block cookies through your browser settings. Disabling analytics cookies won't break the site; it will just make it harder for us to see what's working.

Data security

We take reasonable organisational and technical measures to protect personal data from loss, misuse, and unauthorised access:

  • TLS 1.2+ for every page served from vivanet.in
  • Access to personal data is role-restricted
  • Credentials and API keys live in a secrets manager, never in source control
  • Vendors we rely on are chosen in part on their security posture
  • We review access and tooling periodically and after incidents

No system is immune. If we identify a breach that materially affects you, we'll notify you and the relevant authority within the window the applicable law requires.

How long we keep it

Enquiry data is retained for as long as is useful for the conversation, and then for a reasonable period after — typically up to 36 months — so we can pick up where we left off. Contract-related data is kept for the duration of the engagement plus the retention periods required by tax, employment, and accounting law. Analytics data is retained per Google's and Microsoft's default policies (currently 14 months for GA4 and 13 months for Clarity).

Candidate data is kept for 24 months unless you ask us to remove it sooner.

Your rights

Under GDPR, DPDPA, and most comparable privacy laws, you can exercise the following rights with us:

  • Access — get a copy of the data we hold about you
  • Correction — fix anything that's wrong or incomplete
  • Erasure — ask us to delete it (subject to legal retention)
  • Restriction — ask us to pause processing while a question is resolved
  • Portability — receive your data in a machine-readable format
  • Objection — opt out of processing done on legitimate-interest grounds
  • Withdraw consent — where consent was the basis for processing
  • Complain — to your local data-protection authority if you feel we haven't handled it well

Email the contact below and we'll respond within 30 days, earlier where law requires.

International transfers

We operate from India with engagements across the US, UAE, and Japan. Data you give us may be processed in any of these jurisdictions. Where data moves out of the EEA, we rely on Standard Contractual Clauses or equivalent safeguards as required by GDPR.

Children

The site and services aren't intended for anyone under 18. We don't knowingly collect data from children. If you believe we have, tell us and we'll delete it.

Changes to this policy

We may update this policy as our practices or the law change. Material changes get a revised “Last updated” date and, where appropriate, direct notice. Check back here if you're relying on specifics.

Contact

Privacy questions, data requests, or anything else you want to raise: