Vismika Tech (Bengaluru, Karnataka)

Last Updated: 2nd December 2025

---

1. Information We Collect

1.1 Personal Data

We may collect personal information including, but not limited to:

• Name
• Email address
• Phone number
• Physical address
• Employee IDs
• Identification documents (only when legally or contractually required)

---

1.2 Sensitive Personal Data or Information (SPDI)

Where applicable, we may collect sensitive data such as:

• Financial information
• Biometric data
• Aadhaar / PAN details
• Health-related information
• Passwords and authentication credentials

All SPDI is handled strictly in accordance with applicable Indian data protection laws.

---

1.3 System-Generated Data

We automatically collect technical and system-related data, including:

• Device and browser metadata
• IP address and access logs
• Session and activity logs

System logs are retained for a minimum of 180 days, as mandated by CERT-In guidelines.

---

1.4 Government / Smart City Data

For government or enterprise projects, we may process:

• IoT sensor feeds
• GIS and geospatial data
• Citizen service records
• Payment and transaction logs
• Workflow and operational logs

---

2. Purpose of Data Processing

Collected data is used strictly for legitimate business and compliance purposes, including:

• Account creation and management
• System operations and service delivery
• AI/ML analytics and automation
• Platform reliability, security, and uptime
• Client communication and service notifications
• Compliance with CERT-In and MeitY regulations
• Fraud detection and prevention
• Backup, disaster recovery, and business continuity

---

3. Data Sharing & Disclosure

Data may be shared only with:

• Authorized internal personnel
• Cloud hosting and infrastructure partners
• Payment gateway providers
• Government authorities upon lawful request
• Compliance, audit, and regulatory bodies
• Approved third-party vendors under contractual obligations

Vismika Tech does not sell, rent, or commercially trade personal data.

---

4. Data Security & Storage

We implement robust security measures, including:

• End-to-end data encryption
• Role-based access control
• Secure identity and access management
• Regular vulnerability and penetration testing
• Continuous threat detection and monitoring
• 180-day log retention as per CERT-In requirements
• Periodic internal and external security audits

---

5. Data Retention Policy

• Data is retained for the duration of the active contract
• System and access logs are retained for a minimum of 180 days
• Data deletion or anonymization is performed upon verified request, subject to applicable legal and regulatory requirements

---

6. User Rights

Users have the right to request:

• Access to personal data
• Correction of inaccurate data
• Deletion of data where legally permissible
• Restriction of processing
• Data portability

All valid requests are addressed within 30 working days.

---

7. Cross-Border Data Transfer

Vismika Tech primarily stores and processes data within India.
Cross-border data transfer occurs only when required by law or explicitly authorized by contract.

---

8. Policy Revisions & Updates

This policy may be updated periodically.
Revisions will be communicated through registered email or system notifications.