Privacy Policy

We collect information that you provide directly to us when you create an account, use our services, or communicate with us. This includes: - Account information such as your name, email address, company name, and contact details provided during registration or contact form submissions. - Usage data including camera configurations, streaming preferences, AI model settings, and platform interaction logs. - Technical data such as IP addresses, browser type, device information, and operating system details collected automatically when you access the Visylix platform. - Video data processed through our AI analytics models as configured by your organization. Visylix processes video feeds on behalf of your organization and does not claim ownership of video content. - Communication records including support tickets, feedback, and correspondence with our team.

We use the information we collect for the following purposes: - Providing, maintaining, and improving the Visylix platform and its AI analytics capabilities. - Processing video streams through our computer vision models as configured by your organization. - Sending service notifications, security alerts, and administrative communications. - Responding to your inquiries, support requests, and feedback. - Analyzing usage patterns to improve platform performance, reliability, and user experience. - Ensuring compliance with applicable laws, regulations, and our terms of service. - Detecting, preventing, and addressing security incidents, fraud, and technical issues. We do not sell your personal information to third parties. We do not use your video data for purposes other than providing the services you have configured. Automated decision-making and AI transparency: Visylix uses AI models to analyze video as configured by your organization. Consistent with the EU AI Act, where an AI system interacts directly with a person we make that clear. We do not make decisions producing legal or similarly significant effects about you based solely on automated processing without human involvement. Biometric data: Some Visylix features (for example, facial recognition) may process biometric identifiers when enabled by your organization. Where enabled, your organization is the controller and is responsible for the legal basis and any consents required under laws such as the EU/UK GDPR (special-category data), India's DPDP Act, and US biometric laws including the Illinois Biometric Information Privacy Act (BIPA). Biometric data is processed on your infrastructure under retention and deletion policies you configure; Aptibit does not retain or reuse it.

Aptibit Technologies takes the security of your data seriously. We implement industry-standard technical and organizational measures to protect your information: - All data in transit is encrypted using TLS 1.3 encryption. - Data at rest is encrypted using AES-256 encryption. - Access to customer data is restricted to authorized personnel through role-based access controls with multi-factor authentication. - We conduct regular security audits and vulnerability assessments of our infrastructure. - Video recordings are stored with tamper-evident encryption and configurable retention policies. - We follow industry-standard security practices and align our data handling with the principles of the EU/UK GDPR and India's Digital Personal Data Protection (DPDP) Act, 2023. While we strive to protect your information, no method of electronic transmission or storage is completely secure. We continuously evaluate and improve our security practices. Breach notification: In the event of a personal data breach likely to result in a risk to your rights, we will notify the relevant supervisory authority and affected individuals without undue delay and within the timelines required by applicable law (for example, within 72 hours under the GDPR, and as prescribed under India's DPDP Act, 2023).

Visylix uses cookies and similar tracking technologies to enhance your experience: - Essential cookies required for platform functionality, authentication, and session management. - Analytics cookies to understand how users interact with our platform, helping us improve performance and usability. - Preference cookies to remember your settings, dashboard configurations, and language preferences. In compliance with the GDPR and ePrivacy rules, we use Google Consent Mode v2: all non-essential cookies (analytics and marketing) default to "denied" until you give explicit consent through our cookie banner. You can change or withdraw your choices at any time using the cookie settings control on any page, or through your browser settings. Disabling certain cookies may affect platform functionality.

We may share your information with the third party service providers listed below, who assist us in operating our platform. Each is engaged under a data processing agreement and processes data only for the purposes we specify: - Razorpay – payment processing and subscription billing for customers in India. Razorpay handles your payment details under its own privacy policy; we do not store full card numbers. - Google Analytics (GA4) – website and platform usage analytics (loads only with your analytics-cookie consent). - Microsoft Clarity – product analytics, heatmaps, and session replay of page interactions (analytics-cookie consent). - HubSpot – customer relationship management; stores contact and account enquiries so we can respond. - Ahrefs Analytics – privacy-friendly, cookieless website analytics (no cookies, no personal data stored). - Chatwoot – live chat and customer support. - Cloudflare – website hosting, CDN, DNS, and bot/spam protection (Turnstile) on our forms. - Cloud infrastructure providers – for application hosting and storage. We do not sell your personal information. We do not share your video data with third parties unless required by law or explicitly authorized by your organization. Some of these providers may process data outside India; see Section 8.

We retain your information for as long as necessary to provide our services and fulfill the purposes described in this policy: - Account information is retained for the duration of your active subscription and for a reasonable period afterward for record-keeping and legal compliance. - Video recordings and AI analytics data are retained according to the retention policies configured by your organization within the Visylix platform. - Usage logs and technical data are retained for up to 24 months for security analysis and platform improvement. - Communication records are retained for up to 36 months for support and quality assurance purposes. When data is no longer needed, we securely delete or anonymize it in accordance with our data destruction procedures.

Depending on your jurisdiction, you may have the following rights regarding your personal data: - Right of access: Request a copy of the personal data we hold about you. - Right to rectification: Request correction of inaccurate or incomplete personal data. - Right to erasure: Request deletion of your personal data, subject to legal retention requirements. - Right to restrict processing: Request that we limit the processing of your personal data. - Right to data portability: Request your personal data in a structured, machine-readable format. - Right to object: Object to the processing of your personal data for certain purposes. - Right to withdraw consent: Withdraw previously given consent at any time. - Right to grievance redressal: Raise a complaint about our handling of your personal data with our Grievance Officer (see Section 11). - Right to nominate (DPDP Act): Nominate another individual to exercise your rights in the event of death or incapacity. To exercise any of these rights, please contact us at info@aptibit.com. We will respond to your request within 30 days as required by applicable law. If you are in India and remain dissatisfied, you may complain to the Data Protection Board of India under the DPDP Act, 2023. US state privacy rights: If you are a resident of California (CCPA/CPRA), Virginia, Colorado, Connecticut, Utah, or another US state with a comprehensive privacy law, you also have the right to opt out of the "sale" or "sharing" of personal information and of targeted advertising, and (in some states) to appeal a decision on your request. We do not sell your personal information for money. Your privacy choices / Do Not Sell or Share: You can reject marketing cookies using the cookie settings control on any page, or enable a Global Privacy Control (GPC) signal in your browser — we automatically detect and honor GPC as a valid opt-out of sale and sharing. We will not discriminate against you for exercising these rights. Other jurisdictions: We extend equivalent rights wherever you live. Depending on your location, you may also have rights under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), Singapore's PDPA, Australia's Privacy Act 1988 and Australian Privacy Principles, Canada's PIPEDA and Quebec Law 25 (and CASL for electronic marketing), Brazil's LGPD, and the UK GDPR.

Visylix is operated by Aptibit Technologies from Kolkata, India. If you are accessing our services from outside India, please be aware that your information may be transferred to, stored, and processed in India or other countries where our service providers operate. We ensure that international data transfers are conducted in compliance with applicable data protection laws, including the use of Standard Contractual Clauses or other approved transfer mechanisms where required.

Visylix is designed for use by organizations and is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. Consistent with India's DPDP Act 2023, we do not knowingly track, profile, or direct advertising at children, and we would require verifiable parental consent before processing a child's personal data. If we become aware that we have collected personal data from a child, we will take steps to delete that information promptly. Please contact info@aptibit.com if you believe a child has provided us personal data.

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website and, where appropriate, by sending you a notification. We encourage you to review this policy periodically for the latest information on our privacy practices.

If you have questions, concerns, or grievances about this privacy policy or our data practices, please contact: Aptibit Technologies Private Limited (operator of Visylix) CIN: U46510WB2024PTC275420 Grievance Officer: Mr. Falguni Chatterjee, Chief Executive Officer Email: info@aptibit.com Registered office: Fortune Township, Fl No-N-006, 49/2 Jessore Road (E), Barasat, North 24 Parganas, West Bengal 700124, India For data protection specific inquiries, please include "Privacy Request" in your email subject line. We respond within 30 days. If you are located in India and are not satisfied with our response, you have the right to complain to the Data Protection Board of India under the Digital Personal Data Protection Act, 2023. This notice is available in English; a version in any language listed in the Eighth Schedule to the Constitution of India can be provided on request.