What we collect, and why.

This policy explains what personal data Vitati360 and its Excel add-in collect, what we use it for, who processes it on our behalf, how long we keep it and how to exercise your rights.

VITATI360 ANALYTICS LLP · Last updated 18 October 2026

Who we are

Who is responsible for your data

VITATI360 ANALYTICS LLP (“Vitati360”, “we”) decides how and why the personal data described here is processed — the data fiduciary under India’s Digital Personal Data Protection Act, 2023.
This policy covers vitati360.com, the platform at app.vitati360.com, the Vitati360 Excel add-in, and our dealings with customers and enquirers.

Collected

What we collect

Account details: name and email address, and the company, country, job title and phone number you choose to add to your profile. Sign-in is handled by Auth0; we never receive or store your password.
Subscription and billing records: your plan, amounts, dates, invoices and the payment provider’s reference numbers. Card and bank details are entered with PayPal or Razorpay and never reach us.
Team and workspace data: team membership and role, and settings you save such as watchlists, saved views and preferences.
Enquiries: what you send through our contact and trial forms — name, work email, company and message.
AI chat (plans that include it): the amount you use, for plan limits. We do not keep your questions — except when you mark an answer as unhelpful, when that question and answer are saved so we can fix the problem.
Technical and security data: IP address, browser details and request logs, used to keep the service secure, enforce rate limits and investigate faults.

Excel add-in

The Excel add-in

The add-in sends us only what is needed to answer you: your sign-in token and the companies, metrics and periods you ask for.
It does not upload the contents of your workbook. It writes the data you request into the sheets it creates or the cells holding Vitati360 formulas.
Your sign-in session and add-in preferences are stored locally in Excel on your device. Signing out removes the session.

Purpose

Why we use it

To provide the Services: sign you in, apply your plan and team access, and deliver the data, exports and reports you ask for.
To bill you, keep accounting records and meet tax and legal obligations.
To answer enquiries, provide support and send messages about your account, such as trial access, receipts and changes to these policies.
To protect the Services: detect abuse, shared logins and automated scraping, and keep an audit trail of administrative changes.
To understand faults and improve the Services. We do not use your data for advertising, and we do not sell it.

Sharing

Who processes it for us

Auth0 — sign-in and identity.
PayPal and Razorpay — payments and subscriptions.
OpenAI — on plans with AI chat, your question and the figures retrieved to answer it are sent to generate the reply.
Cloudflare Turnstile — the bot check on our website forms.
Our hosting, database and email-delivery providers, which store and transmit data on our behalf.
These providers act on our instructions and only for these purposes. Some process data outside India. We also disclose data where the law requires it.

Cookies and local storage

We use only what the Services need to work: sign-in session cookies, the bot check on forms, and your display preferences such as light or dark theme.
We do not use advertising cookies or third-party analytics trackers.

Retention

How long we keep it

Account, team and workspace data: for as long as your account is open. Ask us to delete your account and we delete this data within 90 days. Your profile stays available to you after a subscription ends, so you can resubscribe or ask for deletion.
Billing and invoice records: for as long as Indian tax and accounting law requires, even after an account is closed.
Enquiries: for up to two years, or longer if they become part of a customer relationship.
Security logs: for a limited period, as needed to investigate abuse and faults.

Your rights

You can ask for a summary of the personal data we hold about you, have it corrected or completed, have it erased, or withdraw consent you have given — withdrawing consent may mean we can no longer provide some Services.
You can nominate another person to exercise these rights on your behalf if you die or become incapacitated.
These rights apply wherever you live. To exercise any of them, including deleting your account, email [email protected]. We may need to confirm your identity first.

Complaints

Questions and complaints

Send any question or complaint about your personal data to [email protected]. We acknowledge it within two business days and aim to resolve it within 30 days.
If you are not satisfied with our response, you may complain to the Data Protection Board of India, or to the data protection authority where you live.

General

Security, children and changes

How we protect accounts and data is described on our Security & Data page.
The Services are for professional use and are not directed at anyone under 18. We do not knowingly collect children’s data.
We may update this policy. For a material change we will tell you by email or on this site before it takes effect. The date above shows the latest version.
The Terms of Use govern your use of the Services.