Who we are
This policy explains how Vibidsoft Pvt Ltd ("Vibidsoft", "we", "us") handles personal data when you visit www.vibidsoft.com, including our blog, or contact us. Vibidsoft Pvt Ltd trades as VIBIDSOFT and is a software development company registered in India, with our office at C-805, West Wing, Stratum @ Venus Ground, Nehrunagar, Ahmedabad 380015, India.
For the data described here, Vibidsoft is the data controller (under the GDPR and UK GDPR) and the data fiduciary (under India's Digital Personal Data Protection Act, 2023). This policy covers the website only. Personal data we process for clients during a project is covered by the contract and data processing terms agreed with that client.
What we collect
Information you give us
- Contact form: first and last name, work email, phone number (optional), company, country, subject, your message, budget range and timeline.
- Email, WhatsApp and calls: whatever you choose to share when you write to us or speak to us.
- Job applications: your CV, cover letter and any samples you email to our HR team.
Information collected automatically
- Usage data: pages viewed, links and buttons clicked, time on page, referring site, device and browser type, approximate location (country or city) and an online identifier. We collect this with Google Analytics and Microsoft Clarity. Clarity also records how the page was used (mouse movement, clicks and scrolling) to help us find usability problems; form fields are masked.
- Company identification: Leadfeeder uses your IP address to identify the company network you visit from, not you personally.
- Advertising data: the Meta Pixel tells Meta that a visit or enquiry came from one of our adverts, so we can measure and improve our ads.
- Security data: Cloudflare (our network and security provider) and Cloudflare Turnstile process your IP address and browser signals to block spam and attacks. Our contact form stores a one-way hash of your IP address with the times of recent submissions, to limit repeated submissions.
Visitors from the European Economic Area, the UK and Switzerland are asked for consent before analytics and marketing tools store or read anything on their device. See our Cookie Policy for each tool and how to change your choice.
Why we use it
| Purpose | Data | Legal basis (GDPR / UK GDPR) |
|---|---|---|
| Reply to your enquiry and prepare a proposal | Contact form, email and call details | Steps at your request before a contract; legitimate interest in answering business enquiries |
| Follow up about your enquiry | Name, email, company, enquiry details | Legitimate interest (you can ask us to stop at any time) |
| Recruitment | CV and application details | Steps at your request before an employment contract |
| Understand and improve the website | Usage data | Consent where required; otherwise legitimate interest |
| Measure and improve advertising | Advertising and company identification data | Consent where required; otherwise legitimate interest |
| Keep the site and form secure | Security data | Legitimate interest in preventing spam and abuse |
| Meet legal obligations | Any of the above, as needed | Legal obligation |
Under India's DPDP Act, we process personal data you give us for the purpose you gave it, and analytics data with your consent or for other legitimate uses permitted by law. We do not sell personal data, and we do not use it for automated decisions that have legal or similar effects on you.
Who we share it with
We share personal data only with service providers that help us run the website and our business, under contracts that require them to protect it:
- Hosting and email: our web hosting provider and email services, which store our website and deliver contact-form messages to our team.
- Cloudflare, Inc.: content delivery, security and Turnstile spam protection.
- Google LLC: Google Analytics.
- Microsoft Corporation: Microsoft Clarity.
- Leadfeeder (Dealfront): company identification.
- Meta Platforms: Meta Pixel advertising measurement.
- Professional advisers and authorities: lawyers, accountants and auditors, or a court or regulator when the law requires it.
If Vibidsoft is involved in a merger or sale, personal data may pass to the new owner under the same protections.
International transfers
We are based in India and some of our providers are in the United States and other countries. When personal data from the EEA, UK or Switzerland is transferred to a country without an adequacy decision, we rely on safeguards such as the European Commission's Standard Contractual Clauses (and the UK addendum), or the provider's certification under the EU–US, UK and Swiss Data Privacy Frameworks.
How long we keep it
- Enquiries that do not lead to a project: up to 3 years after our last contact, then deleted.
- Client contacts: for the length of the relationship and as long as needed for legal, tax and accounting records afterwards.
- Job applications: up to 12 months, unless you agree that we keep them longer for future roles.
- Contact-form rate-limit records: a few hours.
- Analytics and advertising data: for the period set in each tool. See the Cookie Policy for cookie lifetimes.
Security
We protect personal data with encrypted connections (HTTPS), spam and attack protection, limited staff access on a need-to-know basis, and confidentiality agreements with every employee. Read more on our confidentiality page. No system is completely secure, so please do not send passwords or other sensitive credentials through the contact form.
Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you and get a copy;
- correct or update it;
- have it deleted;
- object to or restrict how we use it, including for follow-up and marketing;
- receive it in a portable format;
- withdraw consent at any time, without affecting what we did before you withdrew it (for cookies, use the cookie settings);
- nominate someone to exercise your rights if you die or become unable to (India);
- complain to a data protection authority.
Residents of California and other US states can ask what we collect, ask us to delete it, and opt out of the use of advertising cookies through the cookie settings. We will not treat you differently for using these rights.
To use any of these rights, email [email protected] with the subject "Privacy request". We will reply within one month, and may ask you to confirm your identity first.
Children
Our website and services are for businesses. They are not directed at children, and we do not knowingly collect personal data from anyone under 18.
Changes to this policy
We will update this page when our practices change and show the new date at the top. If a change is significant, we will make it clear on the website.
Contact and complaints
For privacy questions, requests or complaints, contact our Grievance Officer at [email protected], or write to Vibidsoft Pvt Ltd, C-805, West Wing, Stratum @ Venus Ground, Nehrunagar, Ahmedabad 380015, India.
If you are not satisfied with our answer, you can contact your local data protection authority: in the UK, the Information Commissioner's Office; in the EU, the authority in your country; in India, the Data Protection Board of India; in Australia, the Office of the Australian Information Commissioner.