This Privacy Policy explains how VrozartX ("VrozartX", "we", "us") collects, uses, shares and protects personal data when you visit vxos.in or use the VXOS platform at platform.vxos.in (together, the "Services"). It is written to comply with India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000 and the rules made under them.
1. Who we are
VXOS is an agentic operating system for fundraising, built and operated by VrozartX. For the purposes of the DPDP Act, VrozartX is the Data Fiduciary for personal data processed through the Services. You can reach us at vx@vrozart.com.
2. Data we collect
Information you give us
- Account details — name, email address, mobile number, role (founder, investor, operator or admin), profile photo and password or single sign-on identifiers.
- Company and fundraising data — pitch decks, one-pagers, financial models, incorporation documents, KPIs, team details, cap-table information and anything else you upload to your data room.
- Investor and operator profiles — investment thesis, ticket size, sectors, stages, services offered and availability.
- Content and communications — chats with AI agents (including vrox, Pitch AI and the Virtual Pitch Room), messages with other users, posts, comments, calendar entries and support requests.
- Payment details — billing name, GSTIN (if provided) and transaction references. Card, UPI and bank details are collected directly by our payment processor; we do not store them.
- Contact form submissions — name, email, mobile number, company and the notes you share via the "Know more about us" form on vxos.in.
Information collected automatically
- Usage data — pages and features used, agent requests, credit consumption, timestamps and error logs.
- Device data — IP address, browser type, operating system and approximate location derived from IP.
- Voice data — when you use the Virtual Pitch Room, audio is processed in real time to produce captions and a scorecard.
Information from third parties
- Single sign-on — if you sign in with Google or LinkedIn, we receive your name, email address and profile photo as permitted by your settings with that provider.
- Calendar integrations — if you connect a calendar, we read and create events only to power scheduling features you turn on.
3. How we use your data
| Purpose | Legal basis (DPDP Act) |
|---|---|
| Create and manage your account; authenticate you across VXOS apps | Consent and performance of the Services you requested |
| Extract, build and score your company profile from your documents | Consent |
| Match founders with relevant investors and operators | Consent |
| Run AI agents for KPIs, priorities, calendar, decks and financial planning | Consent |
| Process payments, credits, invoices and refunds | Consent and compliance with tax law |
| Respond to enquiries and contact-form submissions | Consent |
| Keep the Services secure, prevent fraud and abuse, maintain audit logs | Legitimate uses permitted under Section 7 |
| Comply with law, court orders and lawful requests from authorities | Legal obligation |
We do not sell your personal data and we do not use it for third-party advertising.
4. AI processing
VXOS uses large language models to analyse decks, answer questions and power agents. When you use these features, the relevant content is sent to our AI model providers (currently OpenAI and Anthropic) through their business APIs.
- Under their API terms, these providers do not use your content to train their public models.
- AI outputs, including scores and evaluations, are generated automatically. They may be inaccurate and are not investment, legal or financial advice.
- You can ask us to re-run or delete any AI-generated report about your company.
6. Service providers (data processors)
| Provider | Purpose |
|---|---|
| Amazon Web Services | Cloud hosting and document storage |
| MongoDB, PostgreSQL (managed hosting) | Application databases |
| OpenAI, Anthropic | AI model inference |
| Google, LinkedIn | Single sign-on and optional calendar integration |
| Razorpay | Payment processing |
| VrozartX CRM (crm.vrozartx.com) | Managing contact-form enquiries |
| Google Fonts, jsDelivr | Serving fonts and open-source scripts on vxos.in |
Each processor is bound by contract to process personal data only on our instructions and to protect it with appropriate safeguards.
7. Retention
We keep personal data only for as long as your account is active or as needed to provide the Services. When you delete your account, we delete or anonymise your personal data within 90 days, except where we must keep it longer — for example, invoices and payment records for up to 8 years under Indian tax law, or audit logs needed to resolve disputes or prevent fraud.
8. Security
We protect data with encryption in transit (TLS) and at rest, role-based access controls, scoped tokens for every VXOS app, audit logging of administrative actions and regular reviews of our infrastructure. No system is perfectly secure; if we become aware of a personal data breach that affects you, we will notify you and the Data Protection Board of India as required by the DPDP Act.
9. Your rights
Under the DPDP Act you have the right to:
- Access a summary of the personal data we process and the processing activities.
- Correct, complete or update inaccurate or incomplete data.
- Erase data that is no longer needed, or withdraw consent at any time. Withdrawal does not affect processing already carried out.
- Nominate another person to exercise your rights in case of death or incapacity.
- Grievance redressal through our Grievance Officer, and thereafter to complain to the Data Protection Board of India.
Most data can be edited directly in your VXOS settings. For anything else, email vx@vrozart.com from your registered address. We respond within 30 days.
11. Children
The Services are meant for professionals and are not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.
12. International transfers
Some of our processors store or process data outside India. We transfer data only to countries not restricted by the Government of India under Section 16 of the DPDP Act, and with contractual safeguards in place.
13. Changes to this policy
We may update this policy as VXOS evolves. We will post the new version on this page with a new "Last updated" date, and notify you by email or in the app if changes are material.
14. Grievance officer and contact
Grievance Officer — VrozartX
Email: vx@vrozart.com
Website: vrozartx.com
We acknowledge grievances within 24 hours and resolve them within 15 days.
See also our Terms & Conditions and Refund & Cancellation Policy.