Privacy policy

1. Who we are and what this policy covers

Viyuh Security Pvt Ltd ("Viyuh Security", "we", "us") is a cyber security company with its registered office at 303B, Satya The Hive, Sector 102, Gurgaon, Haryana 122505, India.

This policy explains how we handle personal data when you visit viyuhsecurity.com or contact us by email, phone or WhatsApp. It also covers personal data that appears in the threat intelligence we collect (section 8). Customers of our platform and services are also covered by the terms of their agreement with us.

We handle personal data in line with:

• the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, as their provisions come into force

2. Personal data we collect

When you email, call or message us on WhatsApp

• Your email address or phone number, the name you use and anything you choose to tell us

When you browse this website

• Technical data our hosting provider needs to deliver and protect the site: your IP address, browser and device type, the pages you request and the time of each request

We do not use analytics, advertising or tracking tools on this website. We do not ask for sensitive personal data such as passwords, financial details, health information or biometric data. Please do not include it in your message.

3. How we use your data

• To respond to your enquiry: to reply, arrange a demo, prepare a proposal and follow up on that enquiry.
• To keep this website secure: to detect and block spam, abuse and attacks.
• To meet our legal obligations: for example record keeping, security incident reporting and responding to lawful requests from authorities.

We use the data you send us for the purpose you sent it. Where the law requires your consent, we will ask for it. You can withdraw it as easily as you gave it. We do not sell personal data. We do not send marketing to people who contact us unless they ask us to.

4. Who we share it with

We share personal data only with service providers who process it on our behalf under contract, and only for the purposes above:

• Cloudflare: hosts this website, delivers it and protects it from attacks.
• Zoho Mail: our email provider, which receives the emails you send us.
• WhatsApp: only if you choose to message us there. WhatsApp's own terms and privacy policy apply to that service.

We may also share personal data with our professional advisers under a duty of confidentiality, and with government agencies, regulators or courts where the law requires it.

5. Where your data is processed

Our email is hosted with Zoho's India data centre. Our hosting provider serves this website from a global network, so a request may be handled at a data centre outside India, usually the one nearest to you. WhatsApp messages are processed by WhatsApp on its own infrastructure.

We transfer personal data outside India only as permitted by law, including any restrictions the Government of India notifies under section 16 of the Digital Personal Data Protection Act, 2023.

6. How long we keep it

• Enquiries: for as long as we need to respond and follow up, and for the length of any business relationship that results. We then delete them unless the law requires us to keep them longer.
• Security and access logs: for the period the law requires. Under the Digital Personal Data Protection Rules, 2025 that is at least one year. We then delete them.

7. How we protect it

We follow reasonable security practices as required by section 43A of the Information Technology Act, 2000. On this website these include:

• encryption in transit on every connection (HTTPS, enforced with HSTS)
• a strict content security policy that blocks scripts and connections we have not approved
• access to the enquiries you send us limited to the people who need it to respond
• contracts with our service providers that require them to protect the data

If a personal data breach affects you, we will tell you and report it to the Data Protection Board of India and to CERT-In as the law requires.

8. Personal data in our threat intelligence

Our work involves collecting information from dark web forums, ransomware leak sites, Telegram channels and breach data. This material can include personal data about people affected by breaches, such as names, email addresses, usernames and passwords.

We use it to detect, alert organisations to and help investigate cyber crime affecting them. These records are masked at rest and access to them is restricted. Some of this processing may fall within the exemption in section 17(1)(c) of the Digital Personal Data Protection Act, 2023 for processing in the interest of prevention, detection or investigation of offences.

If you believe information about you appears in our threat intelligence, you can contact us (section 12). We will respond as the law requires.

9. Your rights

Subject to applicable law, you can ask us:

• for a summary of the personal data we hold about you and how we process it, and the identities of those we have shared it with
• to correct, complete or update your personal data
• to erase your personal data, unless we must keep it to meet a legal obligation
• to withdraw consent, where we rely on your consent
• to nominate another person to exercise your rights if you die or become unable to

How to make a request: email [email protected] with the subject "Privacy request". Tell us your name and the email address or phone number you used to contact us, so we can find your data and confirm the request is yours.

You also have the right to have a grievance about our handling of your personal data addressed by us (section 12). If you are not satisfied with our response, you may complain to the Data Protection Board of India.

10. Children

This website and our services are for businesses and are not directed at anyone under 18. We do not knowingly collect personal data from children. If we learn that we have, we will delete it.

11. Cookies and browser storage

We do not set cookies on this website. Our hosting provider may set strictly necessary security cookies to protect the site from automated attacks.

The site stores two small markers in your browser's session storage (vy-visited and vy-home) so its opening animation plays once per visit. They contain no personal data and are deleted when you close the tab.

Our fonts are served from our own domain. Links to other websites, such as WhatsApp, take you to services with their own privacy policies.

12. Contact

Questions, requests and grievances about personal data can be sent to us by email or phone.

Email

[email protected]

Phone

+91 79855 34793

Registered office

303B, Satya The Hive, Sector 102, Gurgaon, Haryana 122505, India

We respond to grievances within one month of receiving them.

13. Changes to this policy

We will post any changes on this page and update the date at the top. If a change is significant, we will say so clearly on this page.