PrivacyPolicy.
Last updated: 8 October 2026 · Effective: 8 October 2026
VentureSense Technologies LLP · Data Fiduciary under the DPDP Act, 2023 · support@zurvek.com
This Privacy Policy explains what personal data VentureSense Technologies LLP ("Zurvek", "we", "us") collects when you use the Zurvek platform, the Zurvek Engine, OriZin, CENTRA, memos, dashboards, and related APIs and emails (the "Service"); why we process it; how retention works; who processes it on our behalf; and how to make a privacy request under applicable law.
1.Data We Collect
A. Account and identity. Name, email, role (Founder / Investor), organization, phone (optional), authentication metadata, and role assignments.
B. Uploaded Content. Pitch decks, financial inputs, product notes, URLs (LinkedIn, website, MCA filings), and any files you attach to support tickets.
C. Derived analytical data. Verdicts, scores, rubrics, memos, extracted metrics, idea fingerprints, and audit trails computed from your Content.
D. Usage telemetry. Pages viewed, features used, evaluation events, error reports, session identifiers, IP address, user agent, and coarse geolocation derived from IP.
E. Communications. Support tickets, replies, attachments (scanned server-side), email delivery events, and unsubscribe records.
F. Payment metadata. Transaction identifiers, plan, amount, GST status, and invoice number. Card and bank details are handled by our payment processor and never stored on Zurvek servers.
2.Why We Process (Lawful Basis)
| Data | Purpose | Lawful basis (DPDP §7) |
|---|---|---|
| Account & identity | Provide access, security, support | Contract & consent |
| Uploaded Content | Generate Verdicts you asked for | Contract |
| Derived analytical data | Deliver the Service, audit integrity | Contract & legitimate use |
| Usage telemetry | Reliability, abuse prevention, quotas | Legitimate use |
| Communications | Respond, notify, comply with §13 SLAs | Contract & legal obligation |
| Payment metadata | Invoicing, tax, fraud prevention | Contract & legal obligation |
| Anonymized derivatives | Improve models, benchmarks | Consent (opt-out available) |
3.Retention Schedule
- Account and workspace records — retained while the account is active and afterwards only as reasonably required for support, security, disputes and legal obligations.
- Uploaded files — retained in private storage while needed to provide the requested evaluation or until an authorized deletion request is completed, subject to legal or security holds.
- Sealed reports and audit records — retained to preserve the issued decision-support record unless deletion is required and permitted.
- Support, email, payment and security records — retained for operational, fraud-prevention, accounting and legal requirements.
- Aggregate or de-identified statistics — may be retained where they no longer identify a person or company.
4.Sub-processors
Zurvek relies on contracted infrastructure and service providers to operate the Service. Each processor is bound by a data-processing agreement or equivalent contractual controls, and all operate under the confidentiality and retention rules described in this policy. Processing categories include:
- Application hosting, private storage and authentication — account data and submitted files.
- Automated analysis services — submitted text and generated output under contractual confidentiality controls.
- Payment processing — payment data, tax invoices.
- Transactional email delivery — email address, notification content.
- Edge network and DDoS protection — routing and traffic metadata.
- Error and usage telemetry — diagnostics.
Not a certification. Providers may update their own sub-processors from time to time. A current list of processors, including names, is available on written request to support@zurvek.com.
5.Cross-Border Transfers
Service providers may process data in India and other jurisdictions. Cross-border processing is used only where permitted by applicable law and subject to contractual and technical safeguards. A current category-level processor description is published above; names are available on written request.
6.Your Rights as a Data Principal
- Access — request a summary of your personal data.
- Correction & update — request correction of inaccurate or incomplete data.
- Erasure — request deletion, subject to legal retention obligations.
- Grievance redressal — contact the published grievance route.
- Nomination — nominate another person to exercise your rights on death or incapacity.
- Withdraw consent — for processing based on consent, at any time; withdrawal does not affect prior lawful processing.
- Anonymized derivatives opt-out — write to support@zurvek.com with subject "Corpus Opt-Out".
Send requests to support@zurvek.com. We acknowledge requests and respond within the time required by applicable law. Identity and authority may need to be verified before access, correction, export or erasure is completed. These requests are currently handled by support; the dashboard does not provide a full-account export or self-service account deletion.
7.Security
We apply defense-in-depth controls appropriate to the sensitivity of the data. Details are published on the Security page. Highlights:
- Row-Level Security enforced at the database with organization-scoped isolation.
- Encryption controls are applied in transit and at rest by contracted service providers.
- Privileged credentials are restricted from browser access.
- Support attachment magic-byte and signature scanning before download.
- Zero-Trust account approval flow, quota gates, and 30-second upload cooldown.
- Audit trail for admin actions and approval decisions.
No system is perfectly secure. If you believe you have found a vulnerability, contact security@zurvek.com.
8.Breach Notification
We will make notifications to affected people and authorities where and within the period required by applicable law.
9.Cookies and Similar Technologies
We use strictly necessary cookies for session, authentication, and theme, and non-essential first-party analytics only after your consent. See the Cookie Policy.
10.Children
The Service is not directed to children. We do not knowingly process personal data of anyone under 18. If you believe we have collected such data, write to support@zurvek.com and we will delete it promptly.
11.Automated Decision-Making
The Zurvek Engine produces algorithmic Verdicts. These are decision-support outputs, not automated decisions producing legal or similarly significant effects on you. You always retain human oversight over any downstream decision.
12.Changes to this Policy
Material changes will be notified through an appropriate in-product, email or published notice. Non-material clarifications may be published without advance notice.
13.Grievance Officer
In accordance with DPDP §13 and IT Rules, our Grievance Officer can be reached via the Grievance Officer page or by writing to support@zurvek.com with subject "Grievance". Applicable timelines depend on the request and governing law.