Privacy Policy

Introduction

Visavior.com (“we”, “us”) is operated by Zenvior Ventures Private Limited. We are committed to protecting your personal data under Indian law (the Information Technology Act, 2000 and its SPDI Rules) and the EU GDPR. Indian SPDI rules require companies handling personal data to publish a clear privacy policy describing the data collected, its purpose, disclosure practices, and security measures. In this policy we explain what information we collect, why we use it, and your rights. We follow industry-standard security practices to protect your data. We encourage you to read this policy carefully and contact us with any questions.

Information We Collect

We collect information that you provide to us and information collected automatically:

• Information you provide: When you use our website forms (contact forms, demo requests, account registration) or sign up for newsletters, we may collect personal details such as your name, email address, phone number, address, and other contact information. We also collect sensitive data you submit for our AI visa processing service, including passport details, Aadhaar numbers, financial documents, and other supporting documents. (Under Indian law, financial information and identity documents are treated as Sensitive Personal Data or Information.) We obtain your explicit consent before collecting any sensitive data and will inform you of the purpose and recipients of that data.
• Automatically collected data: We use cookies and analytics tools on our website. These may collect technical data such as IP address, browser and device information, pages visited, and usage patterns. We also use third-party tracking tools (e.g. Google Analytics, Facebook Pixel) to understand how visitors use our site and improve our services.

We only collect data that is necessary for our purposes. All data collection is done lawfully and with your consent where required. We retain personal information only as long as needed to fulfill the purposes described below.

How We Use Your Data

We use personal data for the following purposes:

• Provide and improve our service: To operate the Visavior platform (including AI-based document parsing via the AI Providers) and improve its features. This includes verifying identity documents, processing visa applications, and providing customer support. It is necessary to fulfill our contracts with users and to pursue our legitimate interest in improving the platform.
• Communication and support: To respond to your inquiries submitted via contact or demo request forms, and to send you transactional information (e.g. confirmations, service updates). Responding to inquiries is a legitimate business interest.
• Newsletters and marketing: If you sign up for our newsletter or marketing emails, we use your name and email to send you news, offers, or product updates. We rely on your consent to send marketing communications, which you can withdraw at any time.
• Analytics and performance: To analyze website usage and platform performance. We use aggregate data from Google Analytics, Facebook Pixel, and similar tools to understand usage patterns. This helps us improve user experience and services. We only do this when permitted by law (e.g. after obtaining cookie consent).
• Security and compliance: To detect and prevent fraud or misuse of our services, and to comply with legal obligations (e.g. tax or accounting rules). Maintaining security is a legitimate interest; it also helps us comply with Indian law on reasonable security practices.

No personal data is sold or rented to any third party. We use data internally and share it only as described below. We do not use automated decision-making to take legal or similarly significant decisions about you.

Legal Basis for Processing (GDPR)

For users located in the EU/EEA, we process data under the lawful bases defined in Article 6(1) of the GDPR. These include:

• Consent: We ask for your explicit consent before processing for certain purposes (e.g. sending newsletters, setting non-essential cookies). You can withdraw your consent at any time (e.g. via an unsubscribe link or contacting us).
• Contract: When you use our platform or services, processing is necessary to perform our contract with you (for example, processing visa documents or account maintenance).
• Legitimate interests: We process personal data for legitimate interests such as improving our platform, customer service, fraud prevention, and system security. We will not override your fundamental rights and freedoms in doing so.
• Legal obligation: We may process personal data to comply with legal duties (for example, accounting or tax laws).

We inform you of the legal basis for processing at the time of collection, as required by law. For example, we rely on consent for marketing communications, on contract for providing our service, and on legitimate interest for analytics and service improvement.

Cookies and Tracking

Our website uses cookies and similar tracking technologies to improve your experience. We have a cookie consent banner to obtain your permission before using non-essential cookies. Cookies are small text files stored on your device. We use cookies for:

• Essential functionality: Cookies necessary for the operation of the website (e.g. security or load balancing). These do not require consent.
• Preferences: Cookies that remember your preferences (e.g. language or login state) to personalize your experience.
• Analytics and marketing: We use third-party tools (such as Google Analytics and Facebook Pixel) to track website usage and advertising effectiveness. These cookies collect information about your device and online behavior (e.g. pages visited, time on page). By law, we only enable these cookies after you give informed consent.

You can control or delete cookies through your browser settings at any time. If you block or delete cookies, some features of our site may not work properly. For more details on the cookies we use and how to manage your preferences, please see our Cookie Policy (link) or adjust your browser settings.

Sharing of Information

We do not sell your personal data to anyone. We share personal data only in the following limited ways:

• Service providers: We engage trusted third-party vendors to perform services on our behalf (e.g. Cloud providers for data hosting, CRM and analytics platforms, email marketing providers, and the AI Provider's API for document parsing). These providers have contractual obligations to keep your data confidential and secure. They only process data according to our instructions.
• Affiliates and subsidiaries: We may share data with related entities within Zenvior Ventures group, if necessary to provide services or support.
• Legal requirements: We may disclose personal data if required by law or to protect our rights. For example, if a government agency or court subpoenas information, we may comply. Indian SPDI rules state that except where disclosure is required by government or law, we must obtain your permission before sharing data with third parties. We will seek your consent for any other disclosure whenever possible.

Except as above, we will not share your personal information without your explicit consent. In the event that we do share your data (with service providers or affiliates), we ensure that such parties provide the same level of data protection that we do, as required by Indian law.

Data Storage and Security

Your data is stored securely in encrypted form. We use Files and Data Storage with strong encryption (AES-256) at rest. Data in transit is protected by HTTPS/TLS. We implement robust security measures, including access controls, firewalls, and intrusion detection, in accordance with industry standards. In line with Section 43A of the IT Act and SPDI Rules, we follow reasonable security practices to safeguard Sensitive Personal Data. Only authorized personnel have access to your personal data, and all employees and contractors are bound by confidentiality obligations. We also conduct regular security audits and reviews to help prevent unauthorized access, disclosure, or alteration of data.

Your Rights

Under the GDPR, individuals in the EU have certain rights regarding their personal data. These include:

• Right to be informed: You have the right to know how we process your data. This policy provides that information.
• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can request correction of inaccurate or incomplete data.
• Right to erasure (right to be forgotten): You may request deletion of your personal data when it is no longer needed or if you withdraw consent (and no other legal basis applies).
• Right to restriction of processing: You can request us to limit how we use your data in certain situations.
• Right to data portability: You may ask for a digital copy of your data in a structured, commonly used format.
• Right to object: You can object to processing based on legitimate interests or direct marketing.
• Rights related to automated decision-making: You can request human intervention if automated processing significantly affects you.

We will respond to your data subject requests without undue delay and at most within one month of receipt. If your request is complex, we may extend this by up to two additional months, notifying you of any delay. We will not charge a fee for handling your request unless it is clearly unfounded or excessive. If we refuse a request, we will explain the reasons and inform you of your right to lodge a complaint with a supervisory authority. Under Indian SPDI Rules, you also have the right to withdraw consent at any time and to review or amend any sensitive personal data you have provided. If you believe any data we hold about you is incorrect, you may request an update. If you wish to exercise any of these rights, please contact us as described below.

Children’s Privacy

Our services are intended for use by adults (18 years or older). We do not knowingly collect personal data from children under 18 without parental consent. If we learn that we have collected data from a child under 18 without verification of parental approval, we will delete that data immediately. In any case, processing the personal data of minors requires verifiable consent from a parent or guardian. Our marketing and services are not directed at children, and we do not use the information of children for targeted advertising or profiling.

International Transfers

Visavior’s data storage and processing may involve servers located outside your home country. Under Indian law, transfer of personal data abroad is permitted only if the receiving party provides the same level of protection as mandated by Indian rules. Under the GDPR, we will transfer data outside the EU only to countries with an adequacy decision or using approved safeguards (such as Standard Contractual Clauses). We always ensure that adequate security and legal protections are in place when transferring personal data internationally.

Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we post changes, we will update the “Last Updated” date at the top of this page. We encourage you to review this policy periodically. If changes are significant, we will provide a more prominent notice (such as an email notification) to inform you of any material changes. By continuing to use our services after those changes become effective, you agree to be bound by the updated policy.

Contact Information

If you have any questions or concerns about this policy or our data practices, please contact us:

Data Controller: Zenvior Ventures Private Limited (Visavior.com)

Office Address:

LightBridge, 6th Floor, Hiranandani Business Park,

Saki Vihar Road, Tunga Village Chandivali, Powai,

Mumbai, Maharashtra 400072

India

Email: legal@zenvior.com

You may also use the contact form on our website to reach our Data Protection Officer or customer support. We will respond to your inquiries promptly and aim to resolve any privacy concerns.