Legal

Privacy Policy

Effective and last updated: 1 October 2026

This Privacy Policy explains how VorreiX Consulting LLP (“VorreiX”, “we”, “us” or “our”) collects, uses, shares and protects personal data when you use any of our products and services (together, the “Services”), including:

• Vorrei (vorrei.io) — online presence and tools for local businesses;
• ProfitSync (profitsync.net) — personal and business finance;
• Nodum, Hourly, Walkable and TuneVA;
• this website (vorreix.com) and any other website, mobile application, API or service operated by VorreiX that links to this page.

Where a product publishes a product-specific privacy notice, that notice supplements this policy. If they conflict, the product-specific notice applies to that product.

1. Who we are and how to contact us

The data controller (or “data fiduciary” under Indian law) for the Services is VorreiX Consulting LLP, Room No 4/219, Mundakkode, Pazhamallur, Perinthalmanna, Malappuram, Kerala 676506, India.

For any privacy question, request or complaint, including requests to our grievance officer, email mail@vorreix.com. We respond to all requests within 30 days, and sooner where the law requires it.

2. Personal data we collect

Data you give us:

• Account data — name, email address, phone number, password (stored only as a salted hash), language and profile details.
• Business data — for business users: business name, address, opening hours, photos, catalogue, prices and contact details you choose to publish.
• Content — information you enter into a product, such as financial transactions and budgets, time entries, routes and places, audio recordings, notes, messages and files.
• Support data — the content of emails and messages you send us.

Data we receive from third parties:

• Sign-in providers — if you sign in with Google, Apple, Facebook or another provider, we receive only the information you authorise, typically your name, email address, profile picture and a unique account identifier.
• Payment providers — confirmation of payment, billing country and the last digits and expiry of your card. We never receive or store full card numbers.
• Connected services — if you choose to connect a third-party account (for example a calendar or bank feed), the data you authorise that service to share with us.

Data collected automatically:

• Device and log data — IP address, browser type, operating system, device model, app version, time zone, pages viewed, and error and crash reports.
• Cookies and similar technologies — see section 10.

Data that needs your permission: some products ask for device permissions, such as precise location (for example, Walkable), microphone (for example, TuneVA), camera, photos or notifications. We access these only after you grant permission and only for the feature you are using. You can withdraw permission at any time in your device settings.

We do not intentionally collect special categories of personal data (such as health, religious or biometric data). Please do not submit it unless a feature specifically asks for it.

3. How we use personal data

Where we rely on consent, you can withdraw it at any time. This does not affect processing that happened before you withdrew it.

We do not sell personal data, we do not “share” it for cross-context behavioural advertising, and we do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

4. Google user data

If you connect a Google account to one of our products, we use the Google user data you authorise only to provide and improve the user-facing features of that product. Our use of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements. In particular, we:

• do not use Google user data for advertising;
• do not sell Google user data or transfer it to others, except as needed to provide or improve the features you use, to comply with law, or as part of a merger or acquisition with your notice;
• do not allow humans to read Google user data unless you give consent, it is needed for security or to comply with law, or it has been aggregated and anonymised;
• do not use Google user data to train generalised artificial-intelligence or machine-learning models.

You can revoke access at any time from your Google Account permissions page.

5. Who we share personal data with

We share personal data only as described below:

• Service providers (processors) who act on our instructions under written contracts, such as cloud hosting and storage, email delivery, payment processing, analytics, error monitoring and customer support tools.
• Other users or the public, but only content you choose to publish, such as a public business listing on Vorrei.
• Third-party services you connect, when you ask us to send data to them.
• Authorities and others, where required by law, court order or a lawful request, or to protect the rights, property or safety of our users, the public or VorreiX.
• A buyer or successor, if we are involved in a merger, acquisition, financing or sale of assets. We will notify you before your personal data becomes subject to a different privacy policy.

A current list of our main service providers is available on request at mail@vorreix.com.

6. International data transfers

We have teams in India, Italy and the United Kingdom, and our service providers may process data in other countries, including the United States. When we transfer personal data out of the European Economic Area, the United Kingdom or Switzerland to a country without an adequacy decision, we use safeguards recognised by law, such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum. You can ask for a copy of these safeguards at mail@vorreix.com.

7. How long we keep personal data

• Account data and content — for as long as your account is active. When you delete your account, we delete it within 30 days, and it leaves our backups within a further 90 days.
• Payment and invoice records — for as long as tax and accounting laws require, generally up to 8 years.
• Log and security data — generally up to 12 months.
• Support emails — up to 3 years after the matter is closed.

After these periods we delete personal data or anonymise it so that it can no longer identify you.

8. How we protect personal data

We use technical and organisational measures appropriate to the risk, including encryption in transit (TLS), encryption at rest where supported by our providers, hashed passwords, role-based access controls, least-privilege access for staff, and regular backups. If a personal data breach occurs that is likely to affect your rights, we will notify you and the relevant authorities as the law requires.

No system is perfectly secure. Please use a strong, unique password and keep your sign-in details private.

9. Your rights and choices

Depending on where you live, you have some or all of the following rights:

• to access the personal data we hold about you and receive a copy;
• to correct inaccurate or incomplete data;
• to delete your data (see User Data Deletion);
• to restrict or object to certain processing, including direct marketing;
• to data portability, meaning a copy of your data in a machine-readable format;
• to withdraw consent at any time;
• to nominate another person to exercise your rights if you die or become incapacitated (India);
• to not be discriminated against for exercising your rights (United States).

To exercise any right, email mail@vorreix.com from the address linked to your account. We may need to verify your identity before acting. You can use an authorised agent where the law allows it. If we decline a request, we will explain why, and you may appeal by replying to our decision.

You also have the right to complain to a data-protection authority, such as the authority in your EU country of residence, the UK Information Commissioner’s Office (ICO), or the Data Protection Board of India. We would appreciate the chance to resolve your concern first.

Region-specific information. Residents of the EEA and UK have rights under the GDPR and UK GDPR. Residents of California and other US states with privacy laws have rights to know, access, correct and delete personal data and to opt out of sale, sharing and targeted advertising. We do not sell or share personal data in those senses, and we treat browser Global Privacy Control signals as an opt-out. Users in India have rights under the Digital Personal Data Protection Act, 2023.

10. Cookies and similar technologies

We use:

• Strictly necessary cookies to keep you signed in, remember your preferences and protect the Services. These cannot be switched off.
• Analytics cookies to understand how the Services are used. Where the law requires consent, we set these only after you agree, and you can change your choice at any time.

We do not use third-party advertising cookies. You can also block or delete cookies in your browser settings, although some features may not work without strictly necessary cookies.

11. Children

The Services are not directed at children. You must be at least 16 years old to use them, or 18 where the law requires it (for example, in India). We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact mail@vorreix.com and we will delete it.

12. Links to other services

The Services may link to websites and services that we do not operate. Their own privacy policies apply, and we are not responsible for their practices.

13. Changes to this policy

We may update this policy from time to time. We will post the new version on this page with a new “last updated” date. If a change is material, we will tell you in the Services or by email before it takes effect.

14. Contact

VorreiX Consulting LLP
Room No 4/219, Mundakkode, Pazhamallur, Perinthalmanna, Malappuram, Kerala 676506, India
Email: mail@vorreix.com