Privacy Policy
Privacy Policy
Privacy Policy
How VYAAS collects, uses, stores, shares, and protects information
How VYAAS collects, uses, stores, shares, and protects information
How VYAAS collects, uses, stores, shares, and protects information
ActumAutoma Private Limited | Email: info@vyaas.ai
Registered Office: 5/31 Basement, Vikram Vihar, Lajpat Nagar, New Delhi, Delhi, India
Effective Date: July 6, 2026 | Last Updated: July 6, 2026 | Jurisdiction: Delhi, India
ActumAutoma Private Limited | Email: info@vyaas.ai
Registered Office: 5/31 Basement, Vikram Vihar, Lajpat Nagar, New Delhi, Delhi, India
Effective Date: July 6, 2026 | Last Updated: July 6, 2026 | Jurisdiction: Delhi, India
ActumAutoma Private Limited | Email: info@vyaas.ai
Registered Office: 5/31 Basement, Vikram Vihar, Lajpat Nagar, New Delhi, Delhi, India
Effective Date: July 6, 2026 | Last Updated: July 6, 2026 | Jurisdiction: Delhi, India
1. Who We Are and Scope
1. Who We Are and Scope
1. Who We Are and Scope
ActumAutoma Private Limited operates VYAAS and related Services. This Privacy Policy explains how we process personal data in connection with the Services, our website, support, billing, analytics, safety systems, and related operations.
This Privacy Policy applies to individual consumer users and website visitors. If we later offer a separate business, team, or enterprise service under a written agreement, that service may be governed by additional data-processing terms.
ActumAutoma Private Limited operates VYAAS and related Services. This Privacy Policy explains how we process personal data in connection with the Services, our website, support, billing, analytics, safety systems, and related operations.
This Privacy Policy applies to individual consumer users and website visitors. If we later offer a separate business, team, or enterprise service under a written agreement, that service may be governed by additional data-processing terms.
ActumAutoma Private Limited operates VYAAS and related Services. This Privacy Policy explains how we process personal data in connection with the Services, our website, support, billing, analytics, safety systems, and related operations.
This Privacy Policy applies to individual consumer users and website visitors. If we later offer a separate business, team, or enterprise service under a written agreement, that service may be governed by additional data-processing terms.
2. Information We Collect
2. Information We Collect
2. Information We Collect
We collect information in the following categories, depending on how you use the Services and what you choose to connect or submit.
• Account and profile information, such as name, email address, profile picture, language settings, and login identifiers.
• Identity provider information from Google or Microsoft when you sign in through those services, including the account data they make available to us under your permissions.
• Content you submit, upload, connect, or direct the Services to process, including prompts, instructions, files, documents, images, spreadsheets, browser content, emails, and copied text.
• Workflow data, automation steps, execution history, saved tasks, output files, task status, and error or recovery information.
• Device and technical data, such as device type, operating system, app version, browser type, IP address, language preferences, and diagnostic identifiers.
• Usage data, including feature usage, token consumption, timestamps, session duration, and interaction logs.
• Screenshots, visible interface text, window titles, interface elements, and related screen data when needed to perform your requested action.
• Security and fraud data, including authentication events, abuse signals, crash logs, and system health data.
• Payment and billing information, including purchase details, invoices, tax records, refund status, and payment processor references.
• Cookies and similar technologies used on our website and, where applicable, in our apps.
We collect information in the following categories, depending on how you use the Services and what you choose to connect or submit.
• Account and profile information, such as name, email address, profile picture, language settings, and login identifiers.
• Identity provider information from Google or Microsoft when you sign in through those services, including the account data they make available to us under your permissions.
• Content you submit, upload, connect, or direct the Services to process, including prompts, instructions, files, documents, images, spreadsheets, browser content, emails, and copied text.
• Workflow data, automation steps, execution history, saved tasks, output files, task status, and error or recovery information.
• Device and technical data, such as device type, operating system, app version, browser type, IP address, language preferences, and diagnostic identifiers.
• Usage data, including feature usage, token consumption, timestamps, session duration, and interaction logs.
• Screenshots, visible interface text, window titles, interface elements, and related screen data when needed to perform your requested action.
• Security and fraud data, including authentication events, abuse signals, crash logs, and system health data.
• Payment and billing information, including purchase details, invoices, tax records, refund status, and payment processor references.
• Cookies and similar technologies used on our website and, where applicable, in our apps.
We collect information in the following categories, depending on how you use the Services and what you choose to connect or submit.
• Account and profile information, such as name, email address, profile picture, language settings, and login identifiers.
• Identity provider information from Google or Microsoft when you sign in through those services, including the account data they make available to us under your permissions.
• Content you submit, upload, connect, or direct the Services to process, including prompts, instructions, files, documents, images, spreadsheets, browser content, emails, and copied text.
• Workflow data, automation steps, execution history, saved tasks, output files, task status, and error or recovery information.
• Device and technical data, such as device type, operating system, app version, browser type, IP address, language preferences, and diagnostic identifiers.
• Usage data, including feature usage, token consumption, timestamps, session duration, and interaction logs.
• Screenshots, visible interface text, window titles, interface elements, and related screen data when needed to perform your requested action.
• Security and fraud data, including authentication events, abuse signals, crash logs, and system health data.
• Payment and billing information, including purchase details, invoices, tax records, refund status, and payment processor references.
• Cookies and similar technologies used on our website and, where applicable, in our apps.
3. How We Use Information
3. How We Use Information
3. How We Use Information
We use information to provide, operate, maintain, support, secure, analyze, and improve the Services.
We use information to authenticate users, process payments, manage credits, prevent fraud and abuse, detect security incidents, troubleshoot problems, communicate with users, and comply with legal obligations.
We may also use content, workflow data, and related signals to train, fine-tune, evaluate, and improve our models and systems by default, unless applicable law requires us to obtain consent, honor a choice you made, or apply a different treatment for a specific service or account type.
We may process data to improve reliability, recovery behavior, interface understanding, safety systems, and automation quality.
We use information to provide, operate, maintain, support, secure, analyze, and improve the Services.
We use information to authenticate users, process payments, manage credits, prevent fraud and abuse, detect security incidents, troubleshoot problems, communicate with users, and comply with legal obligations.
We may also use content, workflow data, and related signals to train, fine-tune, evaluate, and improve our models and systems by default, unless applicable law requires us to obtain consent, honor a choice you made, or apply a different treatment for a specific service or account type.
We may process data to improve reliability, recovery behavior, interface understanding, safety systems, and automation quality.
We use information to provide, operate, maintain, support, secure, analyze, and improve the Services.
We use information to authenticate users, process payments, manage credits, prevent fraud and abuse, detect security incidents, troubleshoot problems, communicate with users, and comply with legal obligations.
We may also use content, workflow data, and related signals to train, fine-tune, evaluate, and improve our models and systems by default, unless applicable law requires us to obtain consent, honor a choice you made, or apply a different treatment for a specific service or account type.
We may process data to improve reliability, recovery behavior, interface understanding, safety systems, and automation quality.
4. Human Review and Automated Processing
4. Human Review and Automated Processing
4. Human Review and Automated Processing
The Services are highly automated, but authorized personnel may review limited data when reasonably necessary for customer support, debugging, fraud prevention, security, legal compliance, or service improvement.
We apply access controls and other safeguards designed to limit who can access user data and when.
The Services are highly automated, but authorized personnel may review limited data when reasonably necessary for customer support, debugging, fraud prevention, security, legal compliance, or service improvement.
We apply access controls and other safeguards designed to limit who can access user data and when.
The Services are highly automated, but authorized personnel may review limited data when reasonably necessary for customer support, debugging, fraud prevention, security, legal compliance, or service improvement.
We apply access controls and other safeguards designed to limit who can access user data and when.
5. Third-Party AI and Service Providers
5. Third-Party AI and Service Providers
5. Third-Party AI and Service Providers
We currently use third-party infrastructure and AI services, including OpenAI, and may use or replace providers over time.
These providers may process information on our behalf to help us deliver the Services, subject to their contracts, security controls, and applicable law.
We may also use payment providers such as Razorpay and PayPal, cloud hosting providers, analytics providers, crash-reporting tools, email providers, and other service providers that help us operate the Services.
If you use the Services, you understand that your data may be transmitted to and processed by these providers as reasonably necessary to perform the requested service.
We currently use third-party infrastructure and AI services, including OpenAI, and may use or replace providers over time.
These providers may process information on our behalf to help us deliver the Services, subject to their contracts, security controls, and applicable law.
We may also use payment providers such as Razorpay and PayPal, cloud hosting providers, analytics providers, crash-reporting tools, email providers, and other service providers that help us operate the Services.
If you use the Services, you understand that your data may be transmitted to and processed by these providers as reasonably necessary to perform the requested service.
We currently use third-party infrastructure and AI services, including OpenAI, and may use or replace providers over time.
These providers may process information on our behalf to help us deliver the Services, subject to their contracts, security controls, and applicable law.
We may also use payment providers such as Razorpay and PayPal, cloud hosting providers, analytics providers, crash-reporting tools, email providers, and other service providers that help us operate the Services.
If you use the Services, you understand that your data may be transmitted to and processed by these providers as reasonably necessary to perform the requested service.
6. Local Execution Roadmap
6. Local Execution Roadmap
6. Local Execution Roadmap
Today, the Services rely in part on cloud processing. We also maintain a roadmap that may move more processing onto the user device over time.
Future local execution may reduce the amount of information sent to our cloud systems, but we do not promise that all processing will be local at any specific time unless we expressly say so for a specific feature or product tier.
Today, the Services rely in part on cloud processing. We also maintain a roadmap that may move more processing onto the user device over time.
Future local execution may reduce the amount of information sent to our cloud systems, but we do not promise that all processing will be local at any specific time unless we expressly say so for a specific feature or product tier.
Today, the Services rely in part on cloud processing. We also maintain a roadmap that may move more processing onto the user device over time.
Future local execution may reduce the amount of information sent to our cloud systems, but we do not promise that all processing will be local at any specific time unless we expressly say so for a specific feature or product tier.
7. Sharing and Disclosure
7. Sharing and Disclosure
7. Sharing and Disclosure
We do not sell personal information.
We may share information with service providers, payment providers, cloud and AI infrastructure providers, legal advisors, auditors, regulators, courts, law enforcement, and potential acquirers or successors in a corporate transaction, but only as reasonably necessary and subject to appropriate protections where required by law.
We may disclose information if we believe disclosure is reasonably necessary to comply with law, enforce our agreements, protect our rights, investigate fraud or abuse, or protect the safety of users, the public, or the Services.
We do not sell personal information.
We may share information with service providers, payment providers, cloud and AI infrastructure providers, legal advisors, auditors, regulators, courts, law enforcement, and potential acquirers or successors in a corporate transaction, but only as reasonably necessary and subject to appropriate protections where required by law.
We may disclose information if we believe disclosure is reasonably necessary to comply with law, enforce our agreements, protect our rights, investigate fraud or abuse, or protect the safety of users, the public, or the Services.
We do not sell personal information.
We may share information with service providers, payment providers, cloud and AI infrastructure providers, legal advisors, auditors, regulators, courts, law enforcement, and potential acquirers or successors in a corporate transaction, but only as reasonably necessary and subject to appropriate protections where required by law.
We may disclose information if we believe disclosure is reasonably necessary to comply with law, enforce our agreements, protect our rights, investigate fraud or abuse, or protect the safety of users, the public, or the Services.
8. International Transfers
8. International Transfers
8. International Transfers
Because the Services are offered worldwide, your information may be transferred to and processed in countries other than your own, including countries where our providers operate.
Where required by law, we use appropriate safeguards for cross-border transfers, which may include contractual protections and technical and organizational measures.
Because the Services are offered worldwide, your information may be transferred to and processed in countries other than your own, including countries where our providers operate.
Where required by law, we use appropriate safeguards for cross-border transfers, which may include contractual protections and technical and organizational measures.
Because the Services are offered worldwide, your information may be transferred to and processed in countries other than your own, including countries where our providers operate.
Where required by law, we use appropriate safeguards for cross-border transfers, which may include contractual protections and technical and organizational measures.
9. Retention and Deletion
9. Retention and Deletion
9. Retention and Deletion
We retain personal data only as long as reasonably necessary for the purposes described in this Privacy Policy, including service delivery, troubleshooting, security, legal compliance, accounting, dispute resolution, and product improvement where permitted.
When you delete your account or content, we generally retain associated data for up to ninety (90) days, after which we will delete or anonymize it unless a longer period is required or permitted by law, security needs, fraud prevention, or backup recovery practices.
Some information may remain in backups or archival systems for a limited period before being overwritten or removed.
We retain personal data only as long as reasonably necessary for the purposes described in this Privacy Policy, including service delivery, troubleshooting, security, legal compliance, accounting, dispute resolution, and product improvement where permitted.
When you delete your account or content, we generally retain associated data for up to ninety (90) days, after which we will delete or anonymize it unless a longer period is required or permitted by law, security needs, fraud prevention, or backup recovery practices.
Some information may remain in backups or archival systems for a limited period before being overwritten or removed.
We retain personal data only as long as reasonably necessary for the purposes described in this Privacy Policy, including service delivery, troubleshooting, security, legal compliance, accounting, dispute resolution, and product improvement where permitted.
When you delete your account or content, we generally retain associated data for up to ninety (90) days, after which we will delete or anonymize it unless a longer period is required or permitted by law, security needs, fraud prevention, or backup recovery practices.
Some information may remain in backups or archival systems for a limited period before being overwritten or removed.
10. Your Rights and Choices
10. Your Rights and Choices
10. Your Rights and Choices
Depending on your jurisdiction, you may have rights to access, correct, delete, export, object to certain processing, restrict certain processing, and withdraw consent where processing is based on consent.
You may also be able to manage cookies through your browser or device settings and through any preferences we make available.
To exercise rights, contact us at info@vyaas.ai. We may need to verify your identity before responding.
Depending on your jurisdiction, you may have rights to access, correct, delete, export, object to certain processing, restrict certain processing, and withdraw consent where processing is based on consent.
You may also be able to manage cookies through your browser or device settings and through any preferences we make available.
To exercise rights, contact us at info@vyaas.ai. We may need to verify your identity before responding.
Depending on your jurisdiction, you may have rights to access, correct, delete, export, object to certain processing, restrict certain processing, and withdraw consent where processing is based on consent.
You may also be able to manage cookies through your browser or device settings and through any preferences we make available.
To exercise rights, contact us at info@vyaas.ai. We may need to verify your identity before responding.
11. India-Specific Notice
11. India-Specific Notice
11. India-Specific Notice
This Privacy Policy is intended to align with the Digital Personal Data Protection Act, 2023, and related rules and guidance applicable in India, including principles of notice, lawful processing, purpose limitation, data minimization, accuracy, storage limitation, and security safeguards.
Where required, we will provide grievance handling and respond in a reasonable period through the contact details stated in this Policy.
This Privacy Policy is intended to align with the Digital Personal Data Protection Act, 2023, and related rules and guidance applicable in India, including principles of notice, lawful processing, purpose limitation, data minimization, accuracy, storage limitation, and security safeguards.
Where required, we will provide grievance handling and respond in a reasonable period through the contact details stated in this Policy.
This Privacy Policy is intended to align with the Digital Personal Data Protection Act, 2023, and related rules and guidance applicable in India, including principles of notice, lawful processing, purpose limitation, data minimization, accuracy, storage limitation, and security safeguards.
Where required, we will provide grievance handling and respond in a reasonable period through the contact details stated in this Policy.
12. EU and UK Notice
12. EU and UK Notice
12. EU and UK Notice
For users in the EU/EEA and UK, the Services are designed to follow core GDPR principles such as lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality, and accountability.
Where applicable, our legal bases may include consent, performance of a contract, compliance with legal obligations, and legitimate interests that do not override your rights and interests.
You may also have the right to complain to your local supervisory authority.
For users in the EU/EEA and UK, the Services are designed to follow core GDPR principles such as lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality, and accountability.
Where applicable, our legal bases may include consent, performance of a contract, compliance with legal obligations, and legitimate interests that do not override your rights and interests.
You may also have the right to complain to your local supervisory authority.
For users in the EU/EEA and UK, the Services are designed to follow core GDPR principles such as lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality, and accountability.
Where applicable, our legal bases may include consent, performance of a contract, compliance with legal obligations, and legitimate interests that do not override your rights and interests.
You may also have the right to complain to your local supervisory authority.
13. U.S. State Privacy Notice
13. U.S. State Privacy Notice
13. U.S. State Privacy Notice
For users in certain U.S. states, you may have rights to know, access, delete, correct, and to opt out of certain sharing or targeted advertising if and when those activities apply.
We do not knowingly sell personal information.
For users in certain U.S. states, you may have rights to know, access, delete, correct, and to opt out of certain sharing or targeted advertising if and when those activities apply.
We do not knowingly sell personal information.
For users in certain U.S. states, you may have rights to know, access, delete, correct, and to opt out of certain sharing or targeted advertising if and when those activities apply.
We do not knowingly sell personal information.
14. Children’s Privacy
14. Children’s Privacy
14. Children’s Privacy
The Services are not intended for children below the minimum age required by applicable law to consent to the processing of personal data, or under 13, whichever is higher.
Where local law requires parental consent for minors, use by a minor is permitted only where that consent is obtained and the use is otherwise lawful.
If we learn that a child’s personal data was collected in violation of this Policy, we will take reasonable steps to delete it.
The Services are not intended for children below the minimum age required by applicable law to consent to the processing of personal data, or under 13, whichever is higher.
Where local law requires parental consent for minors, use by a minor is permitted only where that consent is obtained and the use is otherwise lawful.
If we learn that a child’s personal data was collected in violation of this Policy, we will take reasonable steps to delete it.
The Services are not intended for children below the minimum age required by applicable law to consent to the processing of personal data, or under 13, whichever is higher.
Where local law requires parental consent for minors, use by a minor is permitted only where that consent is obtained and the use is otherwise lawful.
If we learn that a child’s personal data was collected in violation of this Policy, we will take reasonable steps to delete it.
15. Security
15. Security
15. Security
We use administrative, technical, and physical safeguards designed to protect personal data, including encryption in transit, access controls, monitoring, least-privilege access, and secure development practices.
No system is completely secure, and we cannot guarantee absolute security.
We use administrative, technical, and physical safeguards designed to protect personal data, including encryption in transit, access controls, monitoring, least-privilege access, and secure development practices.
No system is completely secure, and we cannot guarantee absolute security.
We use administrative, technical, and physical safeguards designed to protect personal data, including encryption in transit, access controls, monitoring, least-privilege access, and secure development practices.
No system is completely secure, and we cannot guarantee absolute security.
16. Cookies and Similar Technologies
16. Cookies and Similar Technologies
16. Cookies and Similar Technologies
Our website and related online properties may use cookies, local storage, pixels, and similar technologies for essential functionality, security, analytics, preferences, and performance measurement.
You can usually block or delete cookies through your browser settings, but some features may not work correctly if you do.
Our website and related online properties may use cookies, local storage, pixels, and similar technologies for essential functionality, security, analytics, preferences, and performance measurement.
You can usually block or delete cookies through your browser settings, but some features may not work correctly if you do.
Our website and related online properties may use cookies, local storage, pixels, and similar technologies for essential functionality, security, analytics, preferences, and performance measurement.
You can usually block or delete cookies through your browser settings, but some features may not work correctly if you do.
17. Changes to This Policy
17. Changes to This Policy
17. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will post the updated version with a new effective date and may provide additional notice where required by law.
Your continued use of the Services after an updated policy becomes effective constitutes acceptance to the extent permitted by law.
We may update this Privacy Policy from time to time. If we make material changes, we will post the updated version with a new effective date and may provide additional notice where required by law.
Your continued use of the Services after an updated policy becomes effective constitutes acceptance to the extent permitted by law.
We may update this Privacy Policy from time to time. If we make material changes, we will post the updated version with a new effective date and may provide additional notice where required by law.
Your continued use of the Services after an updated policy becomes effective constitutes acceptance to the extent permitted by law.
18. Contact and Grievance
18. Contact and Grievance
18. Contact and Grievance
ActumAutoma Private Limited
Brand: VYAAS
Email: info@vyaas.ai
Address: 5/31 Basement, Vikram Vihar, Lajpat Nagar, New Delhi, Delhi, India
Please use the subject line 'Privacy Request' for access, deletion, correction, objection, or other privacy rights requests.
ActumAutoma Private Limited
Brand: VYAAS
Email: info@vyaas.ai
Address: 5/31 Basement, Vikram Vihar, Lajpat Nagar, New Delhi, Delhi, India
Please use the subject line 'Privacy Request' for access, deletion, correction, objection, or other privacy rights requests.
ActumAutoma Private Limited
Brand: VYAAS
Email: info@vyaas.ai
Address: 5/31 Basement, Vikram Vihar, Lajpat Nagar, New Delhi, Delhi, India
Please use the subject line 'Privacy Request' for access, deletion, correction, objection, or other privacy rights requests.
Designed by SHL Media
