Privacy Policy

Last updated: 27 October 2026

This Privacy Policy describes how VGCB IT Solutions Private Limited (CIN U62013TS2025PTC192906, registered office Innov 8 Vasavi Gachibowli Vasavis Shalom Sky City, 7th floor, Tower-1, Unit No -701 to 710, S.Y N,O- 17, Gachibowli Villgae, Kondapur Serilingamapally Mandal, Rangareddy District, Gachibowli, K.V.Rangareddy, Seri Lingampally, Telangana, India, 500032) ("Humerly," "we," "us," or "our") collects, uses, stores, and protects your personal data when you use our website (humerly.com), audit tool (audit.humerly.com), customer dashboard (app.humerly.com), and related services (collectively, the "Services").

We are committed to protecting your privacy in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA) and the DPDP Rules, 2025, as notified by the Government of India.

1. Data We Collect

We collect the following categories of personal data:

• Account Information: Name, email address, and password (hashed, never stored in plain text) when you register on our dashboard.
• Domain Information: Domain names you submit for audit or monitoring, and associated DNS records (SPF, DKIM, DMARC, MTA-STS configurations).
• Usage Data: Pages visited, features used, timestamps of activity, IP address, browser type, and device information.
• Payment Data: Processed by our payment partner (Razorpay). We do not store credit card numbers, bank account details, or UPI IDs on our servers.
• Communication Data: Messages sent to us via email or WhatsApp for support purposes.
• Waitlist Information: Your email address, when you ask to join the sending waitlist on our website or dashboard.
• Warmup Contacts: the name and email address of each person on a fixed list of external contacts that receives part of the warmup mail sent from our own mailboxes (see Section 1 of our Terms of Service). Email support@humerly.com to be taken off the list.

2. Free Tools

When you paste an email header into the header analyzer or upload a DMARC report to the DMARC analyzer, we process it to show you the result. We do not store the header, the report, or the addresses, subjects and IP addresses inside them. For the header analyzer we keep only the SPF, DKIM and DMARC results, the hop count, whether TLS was used and the time of the analysis. To prevent abuse we hold your IP address in a rate limiter for about one hour after your last request. As with any page on our site, our server logs also record your IP address (see Usage Data in Section 1).

3. How We Use Your Data

We use your personal data for the following purposes:

• To provide, operate, and improve our Services
• To create and manage your account
• To run the audits and domain monitoring you request
• To show audit results, monitoring results and alerts in your dashboard
• To send you service-related communications (account confirmations, alerts and reports)
• To respond to your support requests
• To prevent fraud, abuse, and unauthorized access
• To comply with legal obligations
• To tell you when sending opens, if you joined the sending waitlist
• To send warmup mail from our own mailboxes to the people on that list

4. Legal Basis for Processing

Under the DPDPA, we process your personal data based on:

• Consent: You provide consent when you register for an account, submit a domain for audit, or join the sending waitlist. You may withdraw consent at any time (see Section 8).
• Legitimate Use: Processing necessary for the performance of the service you have requested.
• Legal Obligation: Processing required to comply with applicable Indian laws, including tax and accounting requirements.

5. Data Storage and Security

Your data is stored on servers located in India (E2E Networks, Delhi datacenter). We implement the following security measures:

• Passwords are hashed using bcrypt (never stored in plain text)
• API authentication via JSON Web Tokens (JWT) with defined expiry
• HTTPS encryption for all data in transit
• Database access restricted to localhost (not exposed to the internet)
• Daily automated backups of all databases
• Regular security monitoring and system health checks

6. Data Sharing

We do not sell, rent, or trade your personal data. We may share data with:

• Payment Processor: Razorpay, for processing payments (subject to their privacy policy)
• Cloudflare: delivers and protects our website and provides our web analytics. Cloudflare receives your IP address and browser details when you visit our pages, and may process them outside India. It is also used for domain verification and DNS record checks, which use publicly available DNS data.
• Legal Authorities: When required by law, court order, or government request

We do not share your data with advertising networks, data brokers, or any third parties for marketing purposes.

7. Data Retention

• Account Data: Retained as long as your account is active. Deleted within 90 days of account closure.
• Audit Data: Domain audit results are retained for 12 months for historical comparison.
• Payment Records: Retained for 8 years as required by Indian tax law.
• Support Communications: Retained for 12 months after resolution.
• Waitlist Data: Deleted after we email you that sending is open, or 12 months after you join, whichever comes first. You can ask us to delete it sooner.

8. Your Rights (Data Principal Rights under DPDPA)

You have the following rights regarding your personal data:

• Right to Access: Request a summary of your personal data and how it is being processed.
• Right to Correction: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data (subject to legal retention requirements).
• Right to Withdraw Consent: Withdraw your consent at any time. Note that withdrawal may affect our ability to provide Services to you.
• Right to Grievance Redressal: File a complaint about our data handling practices.
• Right to Nominate: Nominate an individual to exercise your rights in case of death or incapacity.

To exercise any of these rights, contact us at support@humerly.com. We will respond within 30 days.

9. Children's Data

Our Services are designed for businesses and are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.

10. Cookies and Tracking

Our website uses minimal cookies required for functionality:

• Authentication Cookies: To keep you logged into the dashboard
• Session Cookies: To maintain your session state

We do not use advertising cookies or tracking pixels. We count visits to our pages with Umami, which we run on our own server at stats.humerly.com, and with Cloudflare Web Analytics. Cloudflare receives your IP address and browser details (see Section 6).

11. Data Breach Notification

In the event of a personal data breach that is likely to cause harm, we will:

• Notify the Data Protection Board of India within 72 hours of becoming aware of the breach
• Notify affected users without unreasonable delay
• Take immediate steps to contain the breach and prevent further unauthorized access

12. Cross-Border Data Transfer

Your data is stored in India. Cloudflare, which delivers our website and provides our web analytics, may process your IP address and browser details outside India. Our DNS checks use publicly available DNS records, not personal data.

13. If you are in the European Economic Area or the United Kingdom

This section applies to you in place of Section 4. We process your personal data to provide the service you signed up for (contract), to keep the service secure and working (our legitimate interests), and, where we ask for it, with your consent, for example for the sending waitlist. You can ask us to access, correct, delete or restrict your data, to object to our processing, and to receive your data in a portable form. You can withdraw consent at any time. We are based in India and store your data in India. Some providers listed in Section 6 process it in other countries. You can complain to your local data protection authority. In the UK, this is the Information Commissioner's Office.

14. Grievance Officer

In accordance with DPDPA requirements, our Grievance Officer can be contacted at:

Grievance Officer
VGCB IT Solutions Private Limited
Innov 8 Vasavi Gachibowli Vasavis Shalom Sky City, 7th floor, Tower-1, Unit No -701 to 710, S.Y N,O- 17, Gachibowli Villgae, Kondapur Serilingamapally Mandal, Rangareddy District, Gachibowli, K.V.Rangareddy, Seri Lingampally, Telangana, India, 500032
Email: support@humerly.com
Response time: Within 30 days of receiving your complaint

If your grievance is not resolved satisfactorily, you may approach the Data Protection Board of India.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. For significant changes, we will notify registered users via email. Continued use of our Services after changes constitutes acceptance of the updated policy.

16. Contact Us

For any questions or concerns about this Privacy Policy or our data practices:

Email: support@humerly.com
Website: humerly.com