Who we are and how to contact us
VritiSphere helps business teams coordinate projects, assignments, forms, work evidence, reviews and approvals. Your business determines the work information it asks you to submit and who may access it. We operate the service and handle account and privacy enquiries.
Information the app handles
- Account and profile: your sign-in phone number, name, account identifier, business memberships and the roles or permissions assigned to you.
- Business work: projects, assignments, deadlines, form responses, comments, submissions, review decisions, approvals and their attributed history.
- Evidence you choose to submit: selected photos, files, documents, audio or video and the metadata needed to upload, associate and retrieve them.
- Location: a foreground location reading when you explicitly choose the location action and grant device permission for work verification. The app does not request background location access.
- Technical information: service request information, network addresses, timestamps, operation status, duration and limited support diagnostics used to operate, secure and troubleshoot the service.
Information can come from you, your device and your business administrators or other authorized workspace members. Do not submit information your business has not authorized you to share.
Why information is used
We use this information to authenticate accounts, enforce current workspace permissions, present and synchronize assigned work, process submissions and reviews, deliver in-app reminders, maintain accountable history, support users and protect the service. We do not sell personal information or use work content for advertising or AI model training.
The current service does not activate external advertising analytics, AI processing, payments, WhatsApp, SMS delivery or external push notifications. Consultancy services described elsewhere on this website are separate from the app’s data processing.
Who can receive information
Authorized people in your business may see information according to their current role, project and work access. An administrator or reviewer does not receive unrestricted access merely because a link or a locally cached record exists.
Amazon Web Services provides hosting, storage and related infrastructure. Current regional application storage is in Mumbai, India; public website delivery can use worldwide edge locations. Email providers process information you voluntarily send to support. Service providers process information to deliver these services. We may also disclose information where legally required or necessary to protect users and the service. Work data is not published on this public website.
Device permissions and local storage
Location and device file or photo selection are used only when you choose the relevant action. You can decline or withdraw device permissions in system settings. A work step requiring that evidence may then be unavailable; ask your business administrator about alternatives.
Protected offline records and pending uploads use encrypted storage scoped to the account and business. Signing out locks that protected store and retires the active session; it is not an account-deletion request and does not promise to erase every local record. Explicitly exported copies saved outside the app remain under your control.
Security
The service uses HTTPS, encrypted storage and server-side access checks. History and submissions retain their original attribution and versions. We limit diagnostics and discourage sending confidential content through ordinary support email. No storage or transmission method can guarantee absolute security.
Retention
Configured retention categories make short-term records eligible for removal after 30 days, standard business records after 365 days and designated extended records after seven years, measured from their classification date. A legal hold can extend retention until it is released. These are retention eligibility rules, not a promise of automatic erasure at the exact expiry time.
Current operational log groups retain logs for 30 days. Business records, immutable work history and evidence may need separate review when you leave a workspace or request account deletion. We do not treat every business record as exempt from deletion: where information must be retained for a lawful reason, we explain the categories, reason and applicable period or release condition in our response.
Account and personal-data deletion
Use our account-deletion request page to request deletion of your VritiSphere account and associated personal data. We acknowledge requests within seven business days and complete verified requests within 30 days, except for specifically explained lawful retention obligations. We may ask for proportionate identity verification to prevent another person from deleting your account.
Deletion covers applicable active account information and associated personal data, including relevant uploaded-file versions. Current database recovery copies can remain for up to 35 days after primary deletion. This database recovery window does not describe uploaded-file version expiry: applicable file versions must be removed separately as part of the deletion process. If a recovery copy is restored, deletion instructions must be reapplied before ordinary use.
Your choices and policy changes
Contact us to request access, correction or deletion of your personal information, ask about retention or raise a concern. Your business administrator can help with workplace records; you may also contact us directly. Material changes will be reflected in this policy with an updated effective date and any additional notice appropriate to the change.