Privacy Policy

This Privacy Policy describes how Velquora (“we”, “our”) collects, uses, stores and protects personal data when you use our website, request an audit, create an account, or purchase our services. We act as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 (India).

• Contact details — name, email address, phone number (audit/lead form, account signup, checkout).
• Business details — business name, business type, website (audit form and checkout).
• Account data — email and a password (stored as a one-way hash, never in plain text).
• Transaction data — plan, amount, payment status and invoice number for orders you place.
• Technical data — IP address and browser user-agent, used for security, rate-limiting and fraud prevention.

• To respond to your audit request and contact you about it.
• To create and manage your account and deliver the services you purchase.
• To process payments (via our payment processor, Cashfree).
• To keep our systems secure — prevent fraud, abuse and unauthorised access.
• To comply with legal obligations.

We process your personal data on the basis of the consent you give at the point of collection (ticking the consent box), and for the performance of the services you request.

Where we rely on your consent, you may withdraw it at any time by writing to privacy@velquora.agency. Withdrawing consent does not affect the lawfulness of processing before withdrawal, but it may mean we can no longer provide certain services (for example, contacting you about your request).

We do not sell your personal data. We share it only with:

• Payment processors (Cashfree) to complete your transaction.
• Email providers to deliver verification codes and receipts.
• Hosting/infrastructure providers that store our data (Supabase).

We keep personal data only as long as needed for the purpose it was collected and to meet legal and accounting obligations. Account data is kept while your account is active; lead/audit data is kept for the duration of our engagement with you, after which it is deleted or anonymised.

Under the DPDP Act you may request, free of charge:

• Access to the personal data we hold about you.
• Correction or completion of inaccurate/incomplete data.
• Erasure of your data (subject to any legal retention we must follow).
• A summary of the data shared and the parties it was shared with.
• Withdrawal of consent and grievance redressal.

To exercise any of these, email privacy@velquora.agency. We will respond within the time frames required by law.

For any concern about how we handle your personal data, contact our Grievance Officer:

Velquora Grievance Officer
Email: privacy@velquora.agency
Phone: +91 98765 43210

We use reasonable technical and organisational safeguards — encryption in transit (HTTPS), hashing of passwords, encrypted storage of secrets, access controls, audit logging and rate limiting — to protect your personal data from unauthorised access, loss or misuse. In the event of a personal data breach that is likely to affect you, we will notify you and the Data Protection Board as required by law.

Our services are intended for businesses and are not directed at children. We do not knowingly collect personal data from minors without verifiable parental consent.

We may update this policy from time to time. The “Last updated” date above reflects the latest revision. Material changes will be communicated on this page.