Privacy Policy
This policy is written in plain language. It is provided for transparency and should be reviewed by a qualified lawyer before final publication.
This Privacy Policy explains how I T Experts Academy Private Limited ("I.T. Experts", "Secuvexa", "we", "us"), of Bhavnagar, Gujarat, India, collects and uses personal data when you use secuvexa.com, the Secuvexa website scanner, our paid reports and services, and the Secuvexa Mobile Android app. We act as the "Data Fiduciary" under the Digital Personal Data Protection Act, 2023 ("DPDP Act").
1. What we collect
| When | What we collect | Why |
|---|---|---|
| Website scan | The website address you enter, the technical scan results, your IP address, the date and time, and how you found us (campaign tags, referrer) | To run the scan, show your report, prevent abuse and measure our marketing |
| Email report / contact form | Name, email, phone (optional), company, website, your message | To send the report, reply to you and provide the service you asked for |
| Purchase | Name, email, phone, order details and payment reference. Card, UPI and bank details are collected by Razorpay, not by us | To process payment, deliver the product, issue receipts and meet tax and accounting law |
| Mobile app | Name, email, password (stored only as a secure hash), a random device ID, phone model and Android version, security scores, and links or app package names you ask us to check | To provide app features, manage your subscription and improve scam detection |
SMS content: when you check a message in the app, the text is analysed in memory to give you a result and is not stored. We keep only a one-way hash and the verdict, so we can count trends without knowing what the message said.
We do not collect your contacts, photos, call logs, location, or the content of your banking, UPI or WhatsApp apps.
2. Legal basis
We process personal data on the basis of your consent (for example when you submit a form or tick a box) and for legitimate uses permitted by the DPDP Act, such as providing a service you requested, complying with law, and responding to security incidents. Marketing emails are sent only if you opt in, and every email has an unsubscribe link.
3. Who we share data with
- Payment processor: Razorpay Software Private Limited, to process payments.
- Hosting and email providers that store our database and deliver our emails, under confidentiality obligations.
- Authorities when required by Indian law, for example a lawful request under the Information Technology Act, 2000 or directions of CERT-In.
We do not sell personal data. We do not share scan reports with anyone except the person who ran the scan or holds the private report link.
4. Scan reports
Each report has a long, random private link. Anyone with the link can view it, so share it only with people you trust (such as your web developer). Report pages are marked so search engines do not index them.
5. How long we keep data
- Scan results: up to 24 months, so you can compare your score over time.
- Leads and contact messages: up to 36 months after our last interaction, unless you ask us to delete them sooner.
- Orders and payment records: 8 years, as required by Indian tax and accounting laws.
- Link and SMS check logs (hashed): up to 180 days.
- App account data: until you delete your account, then removed within 30 days except records we must keep by law.
6. Security
We use HTTPS everywhere, encrypt phone numbers in our database, store passwords only as salted hashes, limit staff access, and keep audit logs. No system is perfectly secure; if a breach affects your personal data, we will inform you and the Data Protection Board of India as required by law.
7. Your rights
Under the DPDP Act you can ask us to: confirm what personal data we hold about you; correct or update it; erase it (where we are not required to keep it); withdraw consent; and nominate another person to exercise your rights in case of death or incapacity. Email support@secuvexa.com from the address you used with us. We reply within 30 days.
8. Grievance Officer
For complaints about personal data, contact our Grievance Officer at support@secuvexa.com with the subject "Grievance". If you are not satisfied with our response, you may approach the Data Protection Board of India.
9. Children
Our services are meant for adults. We do not knowingly collect data from children under 18 without verifiable parental consent. The Family plan is managed by a parent or guardian.
10. Cookies
We use one essential session cookie to keep forms secure and remember your scan during your visit. We do not use advertising cookies on this website.
11. Changes
We may update this policy. The date at the top shows the latest version. Significant changes will be notified by email or in the app.