Privacy policy

This policy explains what personal data Vizabiliti collects through this website, why, how long we keep it and the rights you have. It is written to meet the EU and UK General Data Protection Regulation (GDPR), India's Digital Personal Data Protection Act 2023 and Digital Personal Data Protection Rules 2025 (together, the DPDP Act), and applicable US state privacy laws.

1. Who we are

This website is operated by Vizabiliti NexGen Private Limited (CIN U62013DL2023PTC422698), 18 Sunder Nagar, New Delhi 110003, India, together with its office at 43 King Avenue, Fremont, CA 94536, USA ("Vizabiliti", "we", "us").

For personal data collected through this website, we are the controller under the GDPR and the Data Fiduciary under the DPDP Act. You can contact us about privacy at info@vizabiliti.com.

This policy covers vizabiliti.com and its language versions. Each Vizabiliti platform (for example ConsentEZ, AuditEZ or LawDesks) has its own terms and privacy notice for customers and users of that platform.

2. Personal data we collect

Data you give us

• Contact and assessment requests: name, work email, organisation, job title, country, the platform or service you are interested in, and your message.
• Partner applications: company name, website, contact name, work email, phone number, country, partnership type, platforms of interest and a description of your business.
• Emails you send us and any details you choose to include.

Data collected only with your consent

• Analytics (Google Analytics 4): pages viewed, time on page, how you arrived at the site, approximate location (country or city), device and browser type, and actions such as submitting a form. This lets us count visitors and measure engagement and bounce rate. Google Analytics 4 does not store full IP addresses.
• Experience insights (Microsoft Clarity): clicks, scrolling and mouse movement, used to create heatmaps and session recordings that show how pages are used. Text typed into form fields is masked and not recorded.

Data needed to run the site

• Technical logs kept by our hosting provider, such as IP address, browser type and the time of a request, used to deliver the site securely and prevent abuse.
• Your choices, such as your cookie preferences and light or dark theme, stored in your own browser.

We do not ask for sensitive personal data through this website, and we ask you not to include it in messages.

3. Why we use your data and our legal basis

We do not sell your personal data, share it for cross-context behavioural advertising, or use it for automated decisions that have legal or similarly significant effects on you.

4. Your consent and how to withdraw it

When you first visit, we ask whether you agree to analytics and experience insights. "Accept all" and "Reject all" are equally easy to choose, and nothing optional runs until you decide. You can change your choice at any time through Cookie settings at the bottom of every page.

To withdraw consent you gave on a form, email info@vizabiliti.com. Withdrawing is as easy as giving consent. It does not affect processing that took place before you withdrew, but we will stop processing for that purpose and delete the data unless the law requires us to keep it.

5. Who we share data with

We share personal data only with service providers who process it on our instructions and under written agreements that require them to protect it:

• Website hosting and form delivery (our hosting platform and its infrastructure providers), which deliver the site and pass form submissions to our mailbox.
• Email services used to receive and answer your messages.
• Google LLC / Google Ireland Limited for Google Analytics, only if you consent.
• Microsoft Corporation for Microsoft Clarity, only if you consent.

We may also disclose data where the law requires it, to protect our rights, or as part of a merger or acquisition, in which case the recipient must respect this policy.

6. International transfers

We work from India and the United States, and our service providers may process data in other countries. When personal data from the European Economic Area, the United Kingdom or Switzerland is transferred to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework where the recipient is certified. Personal data collected in India may be transferred outside India except to any country the Government of India restricts under the DPDP Act.

7. How long we keep data

• Enquiries and partner applications: up to 24 months after our last contact with you, unless a business relationship begins, in which case our customer or partner agreement applies.
• Google Analytics data: 14 months.
• Microsoft Clarity: session recordings for 30 days and aggregated heatmap data for up to 13 months.
• Hosting logs: no longer than needed for security, normally under 90 days, and at least as long as any period required by law.
• Your consent choices: 12 months in your browser, after which we ask again.

When data is no longer needed we delete or anonymise it.

8. How we protect data

We use encryption in transit, access controls limited to staff who need the data, reputable providers with recognised security certifications, and regular review of the services we use. If a personal data breach occurs, we will notify the relevant authorities and affected individuals as required by the GDPR and the DPDP Act.

9. Your rights

If you are in the EEA, UK or Switzerland (GDPR)

You can ask to access, correct or delete your personal data, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time. You can also complain to your local data protection supervisory authority.

If you are in India (DPDP Act)

You can ask for a summary of the personal data we process and the processing activities, the identities of the Data Fiduciaries and Data Processors we have shared it with, and the correction, completion, updating or erasure of your data. You can withdraw consent, nominate another person to exercise your rights in the event of your death or incapacity, and use our grievance redressal process below. If you are not satisfied with our response, you can complain to the Data Protection Board of India.

If you are in the United States

Depending on your state, including California, you can ask to know, access, correct or delete your personal information, and you will not be discriminated against for doing so. We do not sell or share personal information as those terms are defined under the California Consumer Privacy Act.

How to make a request

Email info@vizabiliti.com with the subject "Privacy request". We may need to confirm your identity. We will respond within one month, or sooner where the law requires, and we will explain any reason we cannot fully meet a request.

10. Grievance Officer

For questions, complaints or to exercise your rights under the DPDP Act, contact our Grievance Officer:

Grievance Officer, Vizabiliti NexGen Private Limited
18 Sunder Nagar, New Delhi 110003, India
Email: info@vizabiliti.com

We acknowledge grievances promptly and resolve them within the time limits set by the DPDP Rules.

11. Children

This website is intended for business users and is not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, contact us and we will delete it.

12. Languages

This policy is published in English. On request, we will provide this notice in any language listed in the Eighth Schedule to the Constitution of India, or in Spanish, Portuguese, French or German.

13. Changes to this policy

We may update this policy when our practices or the law change. We will change the date below and, for significant changes, show a notice on the site or ask for your consent again where required.

Vizabiliti NexGen Private Limited · CIN U62013DL2023PTC422698 · Last updated: 1 November 2026