Privacy Policy
Vismika Tech (Bengaluru, Karnataka)
Last Updated: 2nd December 2025
1. Information We Collect
1.1 Personal Data
We may collect personal information including, but not limited to:
- Name
- Email address
- Phone number
- Physical address
- Employee IDs
- Identification documents (only when legally or contractually required)
1.2 Sensitive Personal Data or Information (SPDI)
Where applicable, we may collect sensitive data such as:
- Financial information
- Biometric data
- Aadhaar / PAN details
- Health-related information
- Passwords and authentication credentials
All SPDI is handled strictly in accordance with applicable Indian data protection laws.
1.3 System-Generated Data
We automatically collect technical and system-related data, including:
- Device and browser metadata
- IP address and access logs
- Session and activity logs
System logs are retained for a minimum of 180 days, as mandated by CERT-In guidelines.
1.4 Government / Smart City Data
For government or enterprise projects, we may process:
- IoT sensor feeds
- GIS and geospatial data
- Citizen service records
- Payment and transaction logs
- Workflow and operational logs
2. Purpose of Data Processing
Collected data is used strictly for legitimate business and compliance purposes, including:
- Account creation and management
- System operations and service delivery
- AI/ML analytics and automation
- Platform reliability, security, and uptime
- Client communication and service notifications
- Compliance with CERT-In and MeitY regulations
- Fraud detection and prevention
- Backup, disaster recovery, and business continuity
3. Data Sharing & Disclosure
Data may be shared only with:
- Authorized internal personnel
- Cloud hosting and infrastructure partners
- Payment gateway providers
- Government authorities upon lawful request
- Compliance, audit, and regulatory bodies
- Approved third-party vendors under contractual obligations
Vismika Tech does not sell, rent, or commercially trade personal data.
4. Data Security & Storage
We implement robust security measures, including:
- End-to-end data encryption
- Role-based access control
- Secure identity and access management
- Regular vulnerability and penetration testing
- Continuous threat detection and monitoring
- 180-day log retention as per CERT-In requirements
- Periodic internal and external security audits
5. Data Retention Policy
- Data is retained for the duration of the active contract
- System and access logs are retained for a minimum of 180 days
- Data deletion or anonymization is performed upon verified request, subject to applicable legal and regulatory requirements
6. User Rights
Users have the right to request:
- Access to personal data
- Correction of inaccurate data
- Deletion of data where legally permissible
- Restriction of processing
- Data portability
All valid requests are addressed within 30 working days.
7. Cross-Border Data Transfer
Vismika Tech primarily stores and processes data within India.
Cross-border data transfer occurs only when required by law or explicitly authorized by contract.
8. Policy Revisions & Updates
This policy may be updated periodically.
Revisions will be communicated through registered email or system notifications.
