Privacy Policy

Vangrove Tech Private Limited ("Vangrove Tech", "we", "our", or "us") operates the website vangrovetech.in and delivers customized enterprise software products (HRMS, LMS, POS, EMS) and technical recruiting/placement solutions. We are fully committed to protecting the privacy of our clients, job candidates, and website visitors. This Privacy Policy details our practices regarding the collection, processing, logical segregation, security, and erasure of personal data, aligning with the Digital Personal Data Protection Act, 2023 (DPDP Act India) and the General Data Protection Regulation (GDPR).

1. Information We Collect

We collect personal identifiers and corporate telemetry details through voluntary disclosures, automated operations, and third-party systems:

• Direct Submissions: Contact form details (Full name, work email address, company name, phone number) and request-for-proposal documents (RFPs).
• Job Applications: Candidate application datasets submitted via our careers module, including resumes/CVs, professional profiles, education history, and portfolio links.
• Portal Credentials: Email addresses and passwords encrypted with secure cryptographic hashes used to access client, employee, and super-admin portals.
• System Telemetry: Log files, browser types, referral links, network latency metrics, and IP addresses parsed to monitor dashboard performance.

2. How We Use Your Information

All data collected is processed strictly under legitimate business interests, execution of service agreements, and compliance with statutory laws:

• To provision, maintain, and secure our enterprise software client dashboards.
• To process technical RFP proposals and project scoping documents.
• To communicate project status, security updates, and SLA reactions.
• To screen and assess candidate competencies for engineering, design, and product job opportunities.
• To analyze and monitor system health metrics and aggregate web performance.

3. Data Security & Isolation

We enforce strict security controls to protect personal and corporate datasets from unauthorized access, modification, or leakage:

• Data in Transit: Encrypted using TLS 1.3 protocol standards.
• Data at Rest: Cryptographically protected using AES-256 standards inside database systems.
• Logical Segregation: Client portal data is logically isolated within distinct databases and virtual private clouds (VPCs) on AWS, GCP, or Azure.
• Access Protocols: Role-based access control (RBAC) restricted exclusively to authorized personnel through multi-factor authentication.

4. Data Retention & Erasure

We retain personal data only for as long as necessary to fulfill the purposes described, comply with regulatory requirements, or execute contracts. Upon expiration of the retention timeframe, or upon a legitimate request for erasure, datasets are permanently deleted or anonymized using secure overwrite protocols.

5. User Rights (GDPR & DPDP Act India)

Under both Indian DPDP Act 2023 and European GDPR frameworks, you possess specific data rights:

• Right to Access: The right to request copies of your personal data held by us.
• Right to Correction: The right to request correction of inaccurate, incomplete, or outdated data.
• Right to Erasure: The right to request the complete deletion of your data when processing is no longer required.
• Right to Withdraw Consent: The right to withdraw processing consent at any time, without affecting prior compliance.

6. Cookies & Third-Party Integrations

We utilize persistent and session cookies to store user preferences, enable secure dashboard authentication, and monitor web interactions via Google Analytics 4 (GA4). We do not sell, rent, or lease your personal identifiers to third-party advertisers. We disclose data to sub-processors (cloud hosting partners, database operators, email notification engines) strictly to execute our software agreements.

7. Grievance Officer & Contact Information

In compliance with the Digital Personal Data Protection Act (DPDP Act 2023), Vangrove Tech has designated a Grievance Officer to address any questions, feedback, or data erasure requests: