Privacy Policy
Last updated: 31 October 2026
This policy explains how Visibility Readiness, operated by Haigreeva Kondury, Bengaluru, India, handles personal data. We act as the data fiduciary under India's Digital Personal Data Protection Act, 2023 (DPDP Act).
What we collect
| Data | Why | How long |
|---|---|---|
| Email address and a record of your consent | To send your API key, service messages and, if you agreed, occasional product updates | While your account is active; deleted on request |
| Plan, usage counts and payment event references | To apply your plan, limits and refunds, and to keep billing records | Up to 24 months, or longer where tax law requires |
| Website addresses you audit and the audit results | To provide findings, reports, fix packs and re-checks | Up to 12 months, then deleted |
| Basic technical logs (time, request status) | To keep the service secure and fix problems. API keys are never written to our logs and emails are masked | Short-term, as needed for operations |
Audit results describe public web pages, not people. We store API keys only as one-way hashes, so we cannot read your key.
What we do not do
- We do not sell personal data or use it for advertising.
- We do not access your code, builder account or passwords.
- This website uses no tracking cookies and no third-party analytics.
Payments
Payments are handled by Razorpay. Your card, UPI and bank details go to Razorpay, not to us. We receive the payment confirmation and the email you entered.
Service providers
We use Railway (application hosting), MongoDB Atlas (database), Resend (email delivery), Razorpay (payments) and Vercel (this website). Some of these process data outside India. Each processes data only to provide its service to us.
Your rights
Under the DPDP Act you can ask to access, correct or erase your personal data, withdraw consent (for example, stop product updates), nominate another person to exercise your rights, and raise a grievance. Email kondurhai@gmail.com from the address you registered with. We aim to respond within 7 days and resolve requests within 30 days. If you are not satisfied, you may approach the Data Protection Board of India.
Children
The service is meant for adults building websites and is not directed at children under 18.
Security
Data is encrypted in transit; keys are hashed; access to systems is restricted. No system is perfectly secure, and we will notify affected users and authorities of a personal data breach as the law requires.
Changes
We will update this page and the date above when this policy changes, and email you about material changes.