Last updated: 2026-09-15 · Effective for vayalabs.in and related services
This is a lite-form policy for an early-stage sole proprietorship, written in plain language and aligned with the Digital Personal Data Protection Act (DPDPA), 2023. It will be expanded (dedicated grievance officer, DPO contact) once Vaya Labs is formally registered. This is not a substitute for legal review.
1. Who we are
Vaya Labs ("we", "us") provides Notion systems, data reporting, automation, and related services to clients in India and abroad, reachable at hello@vayalabs.in.
2. What we collect
Contact details you submit via our inquiry, feedback, or contact forms — name, email, phone (optional), company name
Project details you share with us — service needed, budget range, timeline, project description
Basic website analytics (page views, general location by country) if enabled by our hosting provider
3. Why we collect it
To respond to your inquiry and prepare an estimate or proposal
To deliver contracted services and communicate about ongoing work
To issue invoices and maintain records required for tax compliance
To improve our services, only where you've given feedback voluntarily
We do not sell your personal data, and we do not use it for purposes beyond what's stated here without asking you first.
4. Consent
By submitting a form on this site, you consent to us processing the information you provide for the specific purpose stated on that form. You may withdraw consent at any time by emailing hello@vayalabs.in — this may affect our ability to continue an active engagement.
5. Who we share it with
We use a small number of service providers to run our business, who process data on our behalf under their own security practices:
Notion (client and project records)
Make.com (workflow automation between our forms, email, and records)
Our email and hosting providers
We do not share your data with anyone else without your consent, except where required by law.
6. How long we keep it
We retain client and billing records for as long as needed to deliver services and meet tax/accounting record-keeping obligations under Indian law, typically up to 8 years for financial records. Inquiry data from leads that don't convert is deleted or anonymized within 12 months.
7. Your rights
Under the DPDPA, you have the right to:
Ask what personal data we hold about you
Ask us to correct inaccurate data
Ask us to erase your data, subject to our legal record-keeping obligations
Withdraw consent, and raise a grievance if you're unhappy with how we've handled your data
To exercise any of these, email hello@vayalabs.in. We'll respond within a reasonable time.
8. Security
We take reasonable technical and organizational measures to protect your data, including limiting access to those who need it to deliver your project.
9. Changes to this policy
We may update this policy as our business grows or as DPDPA rules are further clarified by the government. Material changes will be posted here with an updated date.