Privacy noticePrivacy notice

Who we are

Vulnara Technologies is a security and software company in Kulgam, Jammu and Kashmir, India, registered as an MSME with Udyam number UDYAM-JK-11-0024606. In this notice, “we” and “us” mean Vulnara Technologies. For personal data you send us through this website, we decide what happens to it, so under India’s Digital Personal Data Protection Act, 2023 we act as the data fiduciary.

What this covers

This notice covers the website at vulnaratechnologies.com and the messages you send us through it or by email. Our apps will each have their own privacy notice when they are released. Work we do for clients is covered by the agreement we sign with them.

What we collect

When you visit

• We run no analytics, no tracking pixels and no advertising scripts, and the website sets no cookies.
• Fonts, images and scripts are served from our own domain, so browsing the site does not call third-party services. The animated background runs entirely in your browser.
• Like every web host, our hosting provider handles technical data needed to deliver pages and keep the site safe, such as your IP address, browser type, the page requested and the time. We do not use it to identify you.
• If you switch between the dark and light themes, your choice is saved in your browser’s local storage under the name vulnara-theme. It never leaves your device, and clearing your browser data removes it.

When you write to us

• Project enquiry form: your name, email address, company (optional), the practice and service you choose, your project details, timeline, budget range (optional) and your consent.
• Early-access forms: your email address, the product you are interested in and, if you choose to tell us, your platform. The imgosint form also asks for your organisation.
• Email: whatever you put in a message you send to vulnaratechnologies@gmail.com.

Forms are delivered to our inbox by Web3Forms, a form-to-email service. If a form cannot send, it opens your own email app with your answers written out instead, and nothing passes through Web3Forms. Our email is currently hosted by Google (Gmail). Please do not send passwords, keys or other secrets through a form or by email.

Why we use it

• To reply to you, hold a scoping call and prepare a quote.
• To do the work, if you become a client, and to keep the records the law requires, such as invoices.
• To tell you when a product you signed up for is ready to try. Nothing else, and no newsletters you did not ask for.
• To keep the website and our inbox safe from abuse and spam.

We use your data because you gave it to us for that purpose and agreed to it when you sent the form. We never sell or rent it, never use it for advertising, and never make automated decisions about you.

Who can see it

• Whoever at Vulnara handles your enquiry or project.
• The services that deliver and store it for us: Web3Forms for forms, Google for email, and our hosting provider for technical logs. They process it only to provide their service to us. Some of them may store data outside India.
• Authorities, only where Indian law requires us to share it.

Links to other websites, such as public profiles and news articles, follow those websites’ own privacy policies.

How long we keep it

• Enquiries that do not become projects: deleted within 12 months of our last exchange.
• Early-access sign-ups: until we have told you the product is ready, or sooner if you ask us to remove you.
• Client records: for as long as the agreement and Indian tax and accounting law require.

You can ask us to delete your data earlier at any time, unless the law requires us to keep it.

Your rights

Under the Digital Personal Data Protection Act, 2023 you can:

• ask for a summary of the personal data we hold about you and what we do with it;
• ask us to correct, complete, update or erase it;
• withdraw your consent at any time, as easily as you gave it. This does not affect what we did before;
• raise a grievance with us, and if you are not satisfied with our answer, with the Data Protection Board of India;
• nominate someone to exercise these rights for you if you are unable to.

To use any of these rights, email vulnaratechnologies@gmail.com with the subject “Privacy request”. We reply as soon as we can, and within 30 days at the latest.

Children

This website is meant for businesses and adults. We do not knowingly collect personal data from anyone under 18. If you think a child has sent us their details, tell us and we will delete them.

Security

The website is served over HTTPS with a strict Content Security Policy, and it has no server-side database of visitors. We keep what we receive to the minimum and protect it as we would ask our clients to. If you find a security problem with this website, please follow our responsible disclosure policy.

Changes

If we change how we handle personal data, we update this page and the date at the top and bottom. If a change is significant, we say so at the top of the page.

Contact

Questions and grievances go to Muneeb Amin Bhat, founder and principal security researcher, at vulnaratechnologies@gmail.com. Vulnara Technologies, Kulgam, Jammu and Kashmir, India.