Privacy Policy

Last updated: January 2026

Overview

Orchestra8 Ventures Pvt Ltd ("Orchestra8 Ventures", "Vectus", "we", "us", or "our") operates the website vectus.ai and provides the Vectus autonomous supply chain operating platform.

This Privacy Policy explains how we collect, use, store, and protect information when you visit vectus.ai or interact with our services.

By using vectus.ai you acknowledge that you have read and understood this Privacy Policy.

For privacy-related enquiries contact us at badri@vectus.ai.

Information we collect

Information you provide directly

When you submit a form on vectus.ai — including demo requests, contact enquiries, or whitepaper downloads — we collect:

  • Your name
  • Your work email address
  • Any message or context you choose to include

We do not require a phone number, company size, revenue, or other information beyond what is necessary to respond to your enquiry.

Information collected automatically

When you visit vectus.ai we automatically collect certain technical and usage information, including:

  • Browser type and version
  • Operating system and device type
  • Pages visited, time spent, and navigation path
  • Referring URL and exit pages
  • IP address
  • Approximate geographic location derived from IP address
  • Interactions with page elements

This information is collected via cookies and similar tracking technologies described below.

Cookies and tracking technologies

We use cookies and similar technologies to operate our website and understand how it is used.

Essential cookies

These cookies are necessary for vectus.ai to function. They enable core functionality such as page navigation and form submission. You cannot opt out of essential cookies while using our website.

Analytics cookies

We use the following third-party analytics services:

Google Analytics Operated by Google LLC. Google Analytics uses cookies to collect anonymised information about how visitors use vectus.ai including pages visited, time on site, and traffic sources. This information is used to improve our website.

Data collected by Google Analytics is processed by Google on servers that may be located outside India. Google's privacy policy is available at policies.google.com/privacy.

To opt out of Google Analytics tracking visit tools.google.com/dlpage/gaoptout or adjust your browser cookie settings.

Mixpanel Operated by Mixpanel Inc. Mixpanel uses cookies and similar technologies to collect information about user behaviour on vectus.ai including which features are used and how users navigate the site. This information helps us understand product usage and improve our services.

Data collected by Mixpanel is processed by Mixpanel on servers located in the United States. Mixpanel's privacy policy is available at mixpanel.com/legal/privacy-policy.

To opt out of Mixpanel tracking visit mixpanel.com/optout.

Managing cookies

You can control cookies through your browser settings. Most browsers allow you to:

  • View cookies that have been set
  • Delete individual or all cookies
  • Block cookies from specific websites
  • Block all third-party cookies

Blocking analytics cookies will not affect your ability to use vectus.ai but will mean we cannot improve the site based on usage data.

How we use your information

We use the information we collect to:

  • Respond to your enquiries and demo requests
  • Send you content you have requested such as our whitepaper
  • Follow up on commercial conversations where you have expressed interest
  • Analyse website usage to improve our website and services
  • Understand which content and features are most useful to visitors
  • Maintain the security and performance of our website

We do not use your information to:

  • Send unsolicited marketing emails
  • Serve targeted advertising
  • Build advertising profiles
  • Sell or rent to third parties
  • Share with data brokers

Infrastructure and data storage

vectus.ai and the Vectus platform are hosted on Amazon Web Services (AWS) infrastructure operating across multiple availability zones.

Our primary data region is AWS ap-south-1 (Mumbai, India). Certain services and backups may utilise additional AWS regions.

AWS maintains extensive security certifications including ISO 27001, SOC 2 Type II, and PCI DSS. AWS's security practices are described at aws.amazon.com/security.

Data you provide through vectus.ai forms is stored on our AWS infrastructure within India.

Analytics data is processed by Google and Mixpanel on their own infrastructure as described above.

Legal basis for processing

For users in the European Union

Where the General Data Protection Regulation (GDPR) applies, we process your personal data on the following legal bases:

  • Legitimate interests — to respond to enquiries, conduct business operations, and analyse website usage to improve our services
  • Consent — for analytics cookies where consent is required under applicable law
  • Contract — where processing is necessary to provide services you have requested

For users in India

We process personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act).

Our legal bases for processing under the DPDP Act are:

  • Consent — where you have provided consent for us to process your personal data
  • Legitimate uses — for purposes specified under Section 7 of the DPDP Act

Data retention

We retain your information for as long as necessary to fulfil the purposes described in this policy or as required by applicable law.

Specific retention periods:

  • Contact and demo enquiry data — retained for 24 months from last contact where no commercial relationship is established
  • Customer data — retained for the duration of the customer relationship plus 7 years for financial and compliance purposes
  • Analytics data — retained per Google Analytics and Mixpanel default settings (26 months for GA4, indefinite for Mixpanel unless deletion is requested)
  • Server logs — retained for 90 days

You may request deletion of your personal data at any time by contacting badri@vectus.ai.

Data sharing

We do not sell, rent, or trade your personal information.

We share your information only with:

  • Analytics providers — Google Analytics and Mixpanel as described above
  • AWS — as our infrastructure provider for hosting and storage
  • Professional advisors — lawyers, accountants, and auditors where necessary, bound by confidentiality
  • Regulatory and law enforcement authorities — where required by applicable law

All third-party service providers are required to process your data only for the purposes we specify and in accordance with applicable data protection law.

Your rights

Rights under GDPR (EU users)

  • Right of access to your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent at any time
  • Right to lodge a complaint with your local supervisory authority

Rights under the DPDP Act (India users)

  • Right to access information about personal data processed
  • Right to correction and erasure of personal data
  • Right to grievance redressal
  • Right to nominate another person to exercise your rights

Exercising your rights

To exercise any of the above rights contact us at badri@vectus.ai.

We will acknowledge your request within 72 hours and respond fully within 30 days.

We may need to verify your identity before processing certain requests.

Data Protection Officer

Orchestra8 Ventures Pvt Ltd does not currently have a formally designated Data Protection Officer. Privacy enquiries should be directed to badri@vectus.ai.

We will designate a DPO as required under applicable law as our operations grow.

Cross-border data transfers

Your personal data may be transferred to and processed in countries outside India, including:

  • United States — by Google Analytics and Mixpanel
  • AWS regions — data may be replicated across AWS availability zones which may be located outside India for redundancy

Where data is transferred outside India, we ensure appropriate safeguards are in place in accordance with the DPDP Act and other applicable law.

Children's privacy

vectus.ai is intended for enterprise professionals and is not directed at individuals under the age of 18. We do not knowingly collect personal data from children.

Security

We implement appropriate technical and organisational measures to protect your personal data, including:

  • TLS encryption for all data in transit
  • Encryption of data at rest
  • Access controls limiting who can access personal data
  • Regular security reviews
  • AWS security infrastructure as described above

No security measure is 100% effective. If you believe your data has been compromised please contact us immediately at badri@vectus.ai.

Changes to this policy

We will update this Privacy Policy when our practices change materially.

We will notify you of significant changes by updating the "Last updated" date at the top of this page. For material changes affecting how we use your personal data we will provide additional notice where required by law.

Grievance Officer

In accordance with the Information Technology Act, 2000 and applicable rules, the name and contact details of the Grievance Officer are:

Grievance Officer Orchestra8 Ventures Pvt Ltd Chennai, Tamil Nadu, India badri@vectus.ai

Grievances will be acknowledged within 48 hours and resolved within 30 days.

Contact

Orchestra8 Ventures Pvt Ltd (Trading as Vectus) Chennai, Tamil Nadu, India

Privacy enquiries: badri@vectus.ai

General enquiries: hello@vectus.ai