Privacy Policy | Vertibis

1. Introduction

Vertibis Technologies Pvt. Ltd. ("Vertibis", "we", "us", or "our") operates the Vertibis platform and website at vertibis.com. This Privacy Policy describes how we collect, use, store, and protect information about you and your clients when you use our services.

By using Vertibis, you agree to the collection and use of information as described in this policy. If you do not agree, please discontinue use of our services.

2. Information We Collect

Account Information: When you register, we collect your name, email address, CA registration number, firm name, and billing information.

Client Data: When you add an MSME client, we collect their GSTN, PAN, and business details necessary to generate health scores. This data is provided by you and sourced from government databases with your clients' consent.

Usage Data: We collect information about how you use the platform — features accessed, reports generated, session durations — to improve the product.

Payment Information: Payment details are processed by Razorpay and are not stored on our servers.

3. How We Use Your Information

To provide and operate the Vertibis platform and generate health score reports
To send transactional emails (report notifications, account updates, security alerts)
To improve our scoring algorithms and AI advisory quality
To provide customer support and respond to your enquiries
To comply with applicable Indian laws and regulatory requirements

We do not sell your personal data or your clients' financial data to any third party.

4. Data Storage & Security

All data is stored on servers located in India, complying with RBI data localisation guidelines. We use AES-256 encryption at rest and TLS 1.3 in transit.

We maintain SOC 2 Type II compliance and conduct annual third-party security audits. Access to client data is restricted to authorised personnel with a documented need.

5. Data Retention

Account data is retained while your account is active and for 3 years thereafter for legal compliance. Client health score data and reports are retained for 7 years to support longitudinal analysis. You may request deletion of your account and associated data at any time, subject to applicable legal retention requirements.

6. Your Rights

Under applicable Indian data protection laws, you have the right to:

Access the personal data we hold about you
Correct inaccurate personal data
Request deletion of your account and data (subject to legal holds)
Data portability — export your data in machine-readable format
Object to certain processing activities

To exercise any of these rights, contact us at privacy@vertibis.com.

7. Cookies

We use essential cookies for authentication and session management, and analytics cookies (via privacy-preserving tools) to understand platform usage. You may disable non-essential cookies in your browser settings.

8. Contact

For privacy-related enquiries or to exercise your data rights, contact our Data Protection Officer at: privacy@vertibis.com