Privacy policy

Last updated: 4 October 2026

1. Who we are

This website, vrisic.com, is run by Vrisic (“Vrisic”, “we”, “us”). We are a remote first custom AI software development company. Our team is based in India and we work with clients in the United States, United Kingdom, United Arab Emirates, Canada, Australia and Saudi Arabia.

For personal data collected through this website, WhatsApp, email and calls, Vrisic is the data controller (called the “data fiduciary” under India’s Digital Personal Data Protection Act, 2023). You can reach us at:

• Email: info@vrisic.com
• WhatsApp: +91 63777 67206
• Postal address: India (remote first company)

When we build software for a client and handle personal data inside that client’s systems, we act for the client as a processor. That work is covered by a separate contract and data processing agreement, not by this policy.

2. What we collect

Information you give us

• Enquiry details: your name, work email, phone number, company, website, country, budget range, timeline and the details you write about your project.
• WhatsApp conversations: your WhatsApp number, display name and the messages and files you send us.
• Calls and meetings: the booking details you enter and notes our team takes during the call. We only record a call if everyone agrees at the start.
• Website chat: the messages you type into our AI chat assistant and any details you choose to share in it, such as your name, email, phone number, company and project needs.
• Voice calls with our AI advisor: the text of what you say and what the advisor replies, and the details you share, such as your name, email, phone number, company and needs. We store the text, not an audio recording. In Chrome, Edge and Safari your browser turns your speech into text using its own speech service (from Google, Microsoft or Apple). In other browsers a short recording of each answer is sent to our server, transcribed by our AI provider and then discarded. If you call our phone number, the call is handled by Twilio, which converts speech to text for us, and the advisor tells you at the start that it is an AI and that the call may be recorded.
• Documents and sample data you choose to share so we can scope a project or run an AI Pilot. Please remove personal data you do not need to share.

Information collected automatically

• Cookie choice: a necessary cookie named vgs_consent remembers the cookie choice you made, and we keep an anonymous record of the choice (a random ID, the date and your country code) as proof of consent.
• Attribution cookie, only if you allow analytics cookies: a first party cookie named vgs_src records how you first reached the site (for example a search engine, an AI assistant or a campaign link) and your first page, so we know which channels work. See the cookie policy.
• Server and security logs: IP address, browser type, pages requested and time, used to keep the site secure and working.
• Spam protection: a hidden form field, the time taken to fill the form and a short lived count of submissions per IP address.
• Chat assistant: the chat is an AI system, not a person, and says so. It stores a random conversation ID and your chat history in your browser’s local storage so you can continue later; use “New chat” to clear it. You can ask for a person at any time and we will move you to WhatsApp.
• WhatsApp button clicks: an anonymous count of clicks per page. No name, number or IP address is stored with it.

Analytics and marketing cookies, and any third party analytics or advertising tools, only run after you allow them in our cookie banner. You can change your choice at any time on our privacy choices page. We honour the Global Privacy Control signal.

3. How and why we use it

Under India’s Digital Personal Data Protection Act, 2023 we process personal data for these specified purposes on the basis of your consent, which you give when you contact us, or for legitimate uses the Act allows, such as fulfilling a service you asked for.

Lead scoring. We give each enquiry a simple internal score based on details such as budget and timeline so we can reply to urgent requests first. A person reviews every enquiry. The score never decides whether we will work with you and has no legal or similarly significant effect on you.

We do not sell your personal information, and we do not share it for cross context behavioural advertising.

4. Who we share it with

We share personal data only with service providers who help us run the business, under contracts that require them to protect it and use it only for our instructions:

• Website hosting and security providers
• Email and email delivery providers
• WhatsApp, provided by Meta Platforms, when you choose to message us there
• AI model providers (such as Google Gemini, Groq, OpenAI or Anthropic), which process chat messages to generate the assistant’s replies. On some free plans a provider may use this content to improve its services, so please do not share sensitive personal data in the chat
• Twilio, which runs our phone line if you call our number
• Calendar and video call tools used to book and hold meetings
• Cloud storage and office software used by our team
• Accountants, lawyers and other professional advisers, under confidentiality

We may also disclose information when the law requires it, to protect our rights or the safety of others, or as part of a merger or sale of the business, in which case this policy continues to protect your data.

5. International transfers

Our team works from India, so information you send us is accessed and processed in India. Some of our service providers store data in other countries, such as the United States or the European Union.

• For people in the European Economic Area and the United Kingdom, we rely on the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum or Agreement where a transfer needs them.
• For people in the United Arab Emirates, we transfer data in line with the Federal Decree Law No. 45 of 2021 on the Protection of Personal Data, and follow DIFC or ADGM rules when a client is based there.
• For client projects that need data to stay in a specific country, such as the UAE or the UK, we agree the hosting region in the contract.

6. How long we keep it

• Enquiries that do not become projects: up to 24 months after our last contact, then deleted.
• Client records and invoices: for the length of the contract and then for as long as tax and accounting laws require, which in India can be up to 8 years.
• AI Pilot sample data: deleted within 30 days after the pilot readout unless you continue to a full build.
• Website chats that do not lead to an enquiry: deleted automatically after 180 days. Chats that do are kept with the enquiry.
• Voice advisor call transcripts that do not lead to an enquiry: deleted automatically after 180 days.
• Your cookie choice: 6 months, then we ask again. Anonymous consent records: up to 13 months.
• Server and security logs: up to 90 days.
• The attribution cookie: 90 days.

7. Security

We use HTTPS across the site, two factor authentication and least privilege access for our systems, encrypted storage offered by our providers and confidentiality agreements with everyone on the team. We sign an NDA with clients before they share confidential material. No system is completely secure, so if we ever have a breach that affects you, we will tell you and the relevant authority when the law requires it.

8. Your rights

Wherever you live, you can ask us to show you the personal data we hold about you, correct it, delete it, or stop contacting you. Depending on where you are, you also have these rights:

• European Economic Area and United Kingdom: access, correction, erasure, restriction, objection, data portability and withdrawing consent at any time. You can complain to your local supervisory authority, such as the Information Commissioner’s Office in the UK.
• California and other US states with privacy laws: the right to know, access, correct and delete personal information, and the right not to be discriminated against for using these rights. We do not sell or share personal information. We honour the Global Privacy Control signal as an opt out, and our privacy choices page lets you change your cookie settings. You may use an authorised agent.
• United Arab Emirates: the rights to access, correct, erase, restrict and object to processing under the federal PDPL, or the equivalent DIFC and ADGM rules.
• Saudi Arabia: the rights to be informed, to access, to correct and to request destruction of your data under the Personal Data Protection Law.
• Canada: the rights to access and correct your information and to withdraw consent under PIPEDA and provincial laws such as Quebec’s Law 25.
• Australia: the rights to access and correct your information under the Privacy Act 1988 and the Australian Privacy Principles, and to complain to the Office of the Australian Information Commissioner.
• India: the rights to a summary of the data we hold, correction and erasure, grievance redressal and to nominate another person to exercise your rights, under the Digital Personal Data Protection Act, 2023.

To use any right, email info@vrisic.com from the address you used with us, or message us on WhatsApp. We may ask you to confirm your identity. We reply within one month, or within 45 days where US state law allows that period, and we do not charge a fee.

9. Grievance officer and complaints

If you have a concern about how we handle your personal data, contact our grievance officer: Nitesh Dan Charan, Founder, at info@vrisic.com. We acknowledge complaints within 7 days and aim to resolve them within 30 days. If you are not satisfied, you can contact the data protection authority where you live, including the Data Protection Board of India.

10. AI assistants and automated processing

Our chat assistant and voice advisor are AI systems and say so. They answer questions and pass your details to our team; they do not make decisions about you. See our AI transparency statement for how they work and which AI providers they use.

11. Children, links and changes

Our services are for businesses. This website is not directed at anyone under 18 and we do not knowingly collect their data.

Our site links to other websites and services, such as WhatsApp. Their own privacy policies apply when you use them.

We may update this policy as our services or the law change. We will change the date at the top and, for significant changes, tell clients directly.