Privacy Policy

Last updated: April 11, 2026

This Privacy Policy describes how VGCB IT Solutions ("Humerly," "we," "us," or "our") collects, uses, stores, and protects your personal data when you use our website (humerly.com), audit tool (audit.humerly.com), customer dashboard (dashboard.humerly.com), and related services (collectively, the "Services").

We are committed to protecting your privacy in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA) and the DPDP Rules, 2025, as notified by the Government of India.

1. Data We Collect

We collect the following categories of personal data:

• Account Information: Name, email address, and password (hashed, never stored in plain text) when you register on our dashboard.
• Domain Information: Domain names you submit for audit or warmup, and associated DNS records (SPF, DKIM, DMARC, MTA-STS configurations).
• Usage Data: Pages visited, features used, timestamps of activity, IP address, browser type, and device information.
• Payment Data: Processed by our payment partner (Razorpay). We do not store credit card numbers, bank account details, or UPI IDs on our servers.
• Communication Data: Messages sent to us via email or WhatsApp for support purposes.

2. How We Use Your Data

We use your personal data for the following purposes:

• To provide, operate, and improve our Services
• To create and manage your account
• To perform domain audits and warmup services you request
• To calculate and display Warmup Velocity Scores (WVS) and deliverability metrics
• To send you service-related communications (account confirmations, progress reports, trial reminders)
• To respond to your support requests
• To prevent fraud, abuse, and unauthorized access
• To comply with legal obligations

3. Legal Basis for Processing

Under the DPDPA, we process your personal data based on:

• Consent: You provide consent when you register for an account or submit a domain for audit. You may withdraw consent at any time (see Section 7).
• Legitimate Use: Processing necessary for the performance of the service you have requested.
• Legal Obligation: Processing required to comply with applicable Indian laws, including tax and accounting requirements.

4. Data Storage and Security

Your data is stored on servers located in India (E2E Networks, Delhi datacenter). We implement the following security measures:

• Passwords are hashed using bcrypt (never stored in plain text)
• API authentication via JSON Web Tokens (JWT) with defined expiry
• HTTPS encryption for all data in transit
• Database access restricted to localhost (not exposed to the internet)
• Daily automated backups of all databases
• Regular security monitoring and system health checks

5. Data Sharing

We do not sell, rent, or trade your personal data. We may share data with:

• Payment Processor: Razorpay, for processing payments (subject to their privacy policy)
• DNS Providers: Cloudflare, for domain verification and DNS record checks (publicly available DNS data only)
• Legal Authorities: When required by law, court order, or government request

We do not share your data with advertising networks, data brokers, or any third parties for marketing purposes.

6. Data Retention

• Account Data: Retained as long as your account is active. Deleted within 90 days of account closure.
• Audit Data: Domain audit results are retained for 12 months for historical comparison.
• WVS and Warmup Data: Retained for the duration of your subscription plus 30 days.
• Payment Records: Retained for 8 years as required by Indian tax law.
• Support Communications: Retained for 12 months after resolution.

7. Your Rights (Data Principal Rights under DPDPA)

You have the following rights regarding your personal data:

• Right to Access: Request a summary of your personal data and how it is being processed.
• Right to Correction: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data (subject to legal retention requirements).
• Right to Withdraw Consent: Withdraw your consent at any time. Note that withdrawal may affect our ability to provide Services to you.
• Right to Grievance Redressal: File a complaint about our data handling practices.
• Right to Nominate: Nominate an individual to exercise your rights in case of death or incapacity.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Children's Data

Our Services are designed for businesses and are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.

9. Cookies and Tracking

Our website uses minimal cookies required for functionality:

• Authentication Cookies: To keep you logged into the dashboard
• Session Cookies: To maintain your session state

We do not use advertising cookies, tracking pixels, or third-party analytics that track individual users. If we add analytics in the future, we will update this policy and obtain appropriate consent.

10. Data Breach Notification

In the event of a personal data breach that is likely to cause harm, we will:

• Notify the Data Protection Board of India within 72 hours of becoming aware of the breach
• Notify affected users without unreasonable delay
• Take immediate steps to contain the breach and prevent further unauthorized access

11. Cross-Border Data Transfer

Your data is primarily stored and processed in India. We do not transfer personal data outside India except where necessary for DNS verification services (which use publicly available DNS records, not personal data). If cross-border transfer becomes necessary in the future, we will ensure compliance with DPDPA requirements and applicable government notifications.

12. Grievance Officer

In accordance with DPDPA requirements, our Grievance Officer can be contacted at:

Grievance Officer
VGCB IT Solutions
Hyderabad, Telangana, India
Email: [email protected]
Response time: Within 30 days of receiving your complaint

If your grievance is not resolved satisfactorily, you may approach the Data Protection Board of India.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. For significant changes, we will notify registered users via email. Continued use of our Services after changes constitutes acceptance of the updated policy.

14. Contact Us

For any questions or concerns about this Privacy Policy or our data practices:

Email: [email protected]
Website: humerly.com