Privacy Policy

Vaelo ("we", "our", or "us") provides institutional-grade financial analysis tools exclusively for Chartered Accountants (CAs) and financial professionals. Because you entrust us with sensitive client financial data, our privacy principles are simple: we collect only what is necessary to generate your reports, we protect it rigorously, and we never use your clients' data to train public AI models.

This Privacy Policy explains how we collect, use, and protect your information, and how we comply with the Digital Personal Data Protection (DPDP) Act of India.

1. What Data We Collect

To provide our services, we collect the following types of information:

• Account Information: Your name, firm name, email address, and billing details.
• WhatsApp Contact Information: The verified phone number you provide to receive your generated reports via the WhatsApp Business API.
• Client Financial Data: The raw financial data you submit for analysis. This includes Tally or Zoho exports, manual Profit & Loss statements, Balance Sheets, and specific transaction assumptions needed to generate Valuation or Deal Feasibility reports.

2. How We Use Your Data

Your data is used strictly to deliver the service you requested. We use the information to:

• Ingest and structure financial data to generate deterministic financial models (e.g., DCF valuations).
• Deliver the final, white-labeled PDF reports to you via WhatsApp or email.
• Provide customer support and respond to your inquiries.

We do not sell your data. We do not share your clients' financial data with unauthorized third parties. We strictly do not use your proprietary financial submissions to train external, shared, or public AI models.

3. Data Storage, Security & Hosting

We implement robust security measures to protect your data against unauthorized access or disclosure:

• Encryption: All data is encrypted at rest and in transit using industry-standard protocols (TLS/SSL).
• Isolation: Client data is logically isolated between individual CA accounts. You cannot access another practice's data, and they cannot access yours.
• Data Residency: Our primary databases and hosting infrastructure are located in secure, India-based data centers to comply with local data sovereignty preferences.

4. Third-Party Services

We utilize select, trusted third-party infrastructure providers to deliver our service. These providers are bound by strict data processing agreements:

• Meta (WhatsApp Business API): Used exclusively to deliver your completed reports and critical notifications securely to your registered WhatsApp number.
• Supabase & Deno Deploy: Used for secure database hosting, authentication, application logic (Edge Functions), and encrypted file storage of your generated PDF reports.
• Payment Processors: We use secure, compliant payment gateways (e.g., Razorpay/Stripe) to process invoice payments. We do not store your credit card numbers on our servers.

5. Data Retention & Deletion

We retain your account information and generated reports for as long as your account is active, allowing you to access historical valuations.

If you delete a client profile or close your Vaelo account, the associated raw financial data and generated reports are permanently deleted from our active databases within 30 days. You may request immediate deletion of specific client data at any time after a report is finalized.

6. Your Rights Under the DPDP Act

In compliance with the Digital Personal Data Protection (DPDP) Act of India, you (and by extension, your clients) hold the following rights regarding personal data:

• Right to Access: You can request a summary of the personal data we hold about you.
• Right to Correction: You can request that we correct any inaccurate or incomplete data.
• Right to Erasure: You can request the deletion of your personal data when it is no longer necessary for the purpose it was collected.
• Right to Grievance Redressal: You have the right to register a complaint regarding data processing.

7. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or regulatory requirements. We will notify you of any material changes by sending an alert to your registered WhatsApp number or email address, or by placing a prominent notice on our website prior to the change becoming effective.