Privacy Policy

1. Introduction

MeraCXO (meracxo.vedatricks.com) is operated by Vedatricks. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered CXO advisory platform.

We are committed to protecting your privacy and ensuring compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 of India.

2. Information We Collect

2.1 Personal Information (Provided by You)

• Account Details: Full name, email address, mobile number, password (encrypted), secret question answers (hashed)
• Business Profile: Business name, industry, revenue range, team size, location (city/state), GSTIN, website, social media URLs, business stage, goals, challenges, pitch deck (if uploaded)
• Person Profiles (up to 2): Full name, designation, email, mobile, LinkedIn URL, social media handles, personal website, uploaded resume/CV, publicly available profile data extracted from URLs you provide
• Payment Information: Processed by Razorpay; we store transaction IDs, subscription IDs, and amounts but not card numbers or bank details
• Consultation Data: Business challenges, diagnostic answers, context, and queries you submit for advisory
• IdeaForge Data: Business idea descriptions, target customer, location, budget range, experience level (for guest and registered users)

2.2 Automatically Collected Information

• Device Information: Browser type, operating system, device type
• Usage Data: Pages visited, features used, consultation history, session duration
• IP Address: Used for security, rate limiting, and approximate location
• Cookies: Session cookies for authentication (see Section 7)

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To provide personalized AI-powered business advisory consultations
• Account Management: To create and manage your user account
• Payment Processing: To process credit purchases and maintain transaction records
• Service Improvement: To improve our AI advisory quality and platform features
• Communication: To send transactional emails (payment receipts, account updates)
• Security: To detect and prevent fraud, abuse, and unauthorized access
• Legal Compliance: To comply with applicable Indian laws and regulations

4. Third-Party Services

We share data with the following third-party services strictly for the purposes stated:

5. Data Storage & Security

• Your data is stored on secure servers hosted in India.
• Passwords are securely hashed and never stored in plain text.
• All data transmission is encrypted using SSL/TLS (HTTPS).
• Payment processing is handled by PCI DSS-compliant Razorpay.
• Access to personal data is restricted to authorized personnel only.
• We implement industry-standard security measures including rate limiting, CSRF protection, and input sanitization.

6. Data Retention

• Account Data: Retained as long as your account is active, plus 90 days after deletion.
• Consultation History: Retained for the lifetime of your account to provide historical access.
• Payment Records: Retained for 7 years as required by Indian tax and financial regulations.
• Activity Logs: Retained for 12 months for security monitoring purposes.

7. Cookies

We use the following types of cookies:

• Essential Cookies: Session cookies required for authentication and platform functionality. These cannot be disabled.
• Analytics Cookies: To understand how users interact with the Platform and improve our services.

We do not use advertising or tracking cookies. You can manage cookies through your browser settings.

8. Your Rights

Under applicable Indian data protection laws, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete personal data.
• Deletion: Request deletion of your personal data (subject to legal retention requirements).
• Data Portability: Request your data in a machine-readable format.
• Withdraw Consent: Withdraw consent for data processing at any time.
• Grievance Redressal: Lodge a complaint with our Grievance Officer.

To exercise any of these rights, please email support@vedatricks.com.

9. Children's Privacy

MeraCXO is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a minor, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.

11. Grievance Officer

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023:

12. Contact Us

For any privacy-related questions or concerns: