Privacy Policy
In short: we collect only what we need to run Vaartix, we store it in India, we never sell it, and we use the email data our customers send through us only to deliver those emails.
1. Who we are
Vaartix is an email sending service operated by NAP Designs, India ("Vaartix", "we", "us"). This policy explains how we handle personal data on vaartix.com and in the Vaartix service.
2. Two kinds of data
Data about our customers and visitors
For data about you, as a website visitor or a Vaartix customer, we decide how it is used. Under India's Digital Personal Data Protection Act, 2023 (DPDP Act), we act as the Data Fiduciary.
Data our customers send through Vaartix
When a customer sends email through Vaartix, the recipient addresses and message contents belong to that customer. We process them only on the customer's instructions, to deliver the email and report what happened to it. For this data we act as a Data Processor under a Data Processing Agreement with the customer. If you received an email sent through Vaartix and have a question about your data, please contact the company that sent it; we will help them respond.
3. What we collect
- Early access requests: your name, email address and anything you choose to tell us when you write to us.
- Account data (once accounts open): name, email address, phone number, company name, website, and billing and GST details.
- Usage data: API requests, sending volumes, IP addresses, and logs needed for security, abuse prevention and billing.
- Email data processed for customers: sender and recipient addresses, subject, content, attachments, and delivery events such as delivered, bounced, opened or clicked.
vaartix.com does not use advertising or analytics cookies. Our hosting and security provider, Cloudflare, may set strictly necessary cookies to protect the site from bots and attacks.
4. Why we use it
- To provide, secure and support the Vaartix service
- To deliver customers' emails and show them logs and events
- To prevent spam, fraud and abuse, and keep our sending infrastructure healthy
- To bill customers and meet tax and legal obligations
- To send you service and account messages, and with your consent, product updates
We never sell personal data or use customers' email contents for advertising.
5. Where it is stored
Vaartix stores customer and email data in India, in Amazon Web Services' Mumbai region (ap-south-1). Email naturally travels to recipients' mail servers wherever they are located, and some service providers listed below may process limited data outside India under contractual safeguards.
6. Who we share it with
We share personal data only with service providers that help us run Vaartix, and only as needed:
- Amazon Web Services: hosting, database and email sending (Mumbai region)
- Cloudflare: website hosting, DNS and protection from attacks
- Razorpay: payments (once billing opens)
- Error monitoring and support tools, configured to exclude email contents
We may also disclose data when required by Indian law or a valid order of a court or government authority.
7. How long we keep it
- Email logs and contents are kept for the retention period of the customer's plan (for example 7 or 30 days), then deleted. Customers may choose longer retention for compliance.
- Suppression entries (bounced or complained addresses) are kept as long as needed to stop unwanted email.
- Account and billing records are kept while the account is active and afterwards as required by tax law.
8. How we protect it
Data is encrypted in transit and at rest. API keys are stored as hashes. Access to production systems is limited and protected by multi-factor authentication. If a personal data breach occurs, we will notify affected customers, the Data Protection Board of India and affected individuals as the DPDP Act requires.
9. Your rights
Under the DPDP Act you can ask us to:
- Tell you what personal data we hold about you and how we use it
- Correct, complete or update your data
- Erase your data, where we don't need to keep it by law
- Withdraw consent you have given us
- Nominate someone to exercise these rights for you
- Address a grievance about how we handle your data
Write to [email protected]. We will respond within 30 days. If you're not satisfied with our response, you may complain to the Data Protection Board of India.
10. Grievance Officer
Grievance Officer, Vaartix (NAP Designs)
Email: [email protected]
11. Children
Vaartix is a service for businesses and developers. It is not meant for anyone under 18, and we don't knowingly collect their data.
12. Changes
We'll post any changes on this page with a new date, and email customers about significant changes.