Privacy Policy

Ventexa Technologies (“Ventexa”, “We”, “Us”, or “Our”), having its principal development office in Noida, Uttar Pradesh, India, is dedicated to protecting the privacy, confidentiality, and integrity of personal and business data entrusted to us.

This Privacy Policy applies to personal information and enterprise operational records processed through our corporate website (ventexa.tech), custom software applications engineered by us, the Ventexa Transport ERP, the Ventexa Retail ERP, and during technical architectural consultations.

We collect data strictly relevant to the execution of software engineering and operational ERP workflows:

Under the Digital Personal Data Protection Act, 2023, Ventexa processes personal data only for lawful purposes supported by valid grounds:

• Performance of Contract: Facilitating custom engineering milestones, staging environment deployments, and active SaaS application delivery.
• Compliance with Indian Law: Fulfilling tax obligations (GST e-invoicing under the Central Goods and Services Tax Act) and responding to lawful statutory notices.
• Legitimate Uses: Security monitoring, prevention of unauthorized system access, bug diagnostics, and safeguarding system resilience.

Our dual role under modern data protection jurisprudence:

• Ventexa as a Data Fiduciary: For visitors to our public websites, participants in architecture consultations, and our direct commercial contracting points of contact.
• Ventexa as a Data Processor: For operational data processed inside the Transport ERP (e.g. freight customer numbers, driver phone contacts) and Retail ERP (e.g. retail shopper receipts). In these contexts, the Client acts as the Data Fiduciary, and Ventexa processes records solely on the Client’s documented instructions.

Ventexa engineers security safeguards directly into the application topology:

• Hard Tenant Schema Isolation: Every enterprise subscriber operates with logically or physically segregated database schemas, preventing cross-tenant leakage.
• Encryption Standards: Data in transit is secured via Transport Layer Security (TLS 1.3). Data at rest is encrypted using Advanced Encryption Standard (AES-256) with automated cryptographic key rotation.
• Access Controls & Audit Logs: Strict Role-Based Access Control (RBAC) ensures only designated staff within your company can view financial ledgers or driver records. All administrative queries are immutable and logged.

Ventexa partners with industry-leading infrastructure and API vendors bound by stringent Data Protection Agreements (DPAs):

We retain personal and transactional data only as long as necessary to fulfill the commercial engagement or satisfy statutory retention mandates:

• Active Accounts: Maintained for the duration of the subscription or project lifecycle.
• Accounting & GST Records: Retained for a period of up to eight (8) financial years following transaction completion in accordance with Indian tax laws.
• Purging Protocols: Upon account termination and the expiry of the 30-day export window, client operational databases are permanently sanitized and purged using industry standard zero-fill deletion protocols.

As a Data Principal under the Digital Personal Data Protection Act, 2023, you hold the following non-negotiable rights:

• Right to Access: Request a clear summary of personal data processed by Ventexa and the identities of any Data Processors involved.
• Right to Correction & Completion: Request the rectification of inaccurate or incomplete personal records.
• Right to Erasure: Request the deletion of personal data no longer required for the purpose for which it was originally collected.
• Right of Grievance Redressal: Avail of an accessible, prompt grievance redressal mechanism managed by our Grievance Officer.
• Right to Nominate: Nominate an individual who, in the event of death or incapacity, shall exercise your data rights.

Ventexa does not engage in aggressive behavioural tracking or third-party advertising surveillance:

• Essential Session Cookies: Utilized solely to preserve authentication tokens, csrf tokens, and user preferences (such as bypassing loading screens for returning visitors).
• Zero Third-Party Ad Pixels: We do not deploy Meta Pixel, Google AdSense, or third-party commercial data broker trackers on our customer ERP instances.

In compliance with Section 10 of the Indian Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and Section 8(10) of the Digital Personal Data Protection Act, 2023, the details of our designated Grievance Officer are set forth below: