1. Who we are
Veltrix is a technology studio based in Karjat, Maharashtra, India. We build custom software, AI solutions, web platforms, automation and internal tools for businesses.
Veltrix and Veltrix AI Solutions are trading names of a sole proprietorship owned by Shahid Wahid Shaikh. It is not an incorporated company, so it has no Corporate Identity Number; the proprietor is the legal person behind this website and is personally responsible for the obligations in this policy.
In the language of India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), Shahid Wahid Shaikh, trading as Veltrix, is the Data Fiduciary for the personal data described in this policy, meaning we decide why and how it is processed. If you are the person the data is about, the Act calls you the Data Principal.
- Legal entity
- Shahid Wahid Shaikh, sole proprietor, trading as Veltrix AI Solutions
- Entity type
- Sole proprietorship (India)
- CIN / LLPIN
- Not applicable — a sole proprietorship is not registered with the Registrar of Companies
- Principal place of business
- Karjat, Maharashtra, India — full postal address and PIN to be added
- GSTIN
- to be added, or recorded as not registered if below the turnover threshold
2. What we collect
We collect very little, and only what you actively give us. We do not run advertising trackers, analytics scripts, or third-party marketing pixels on this website.
Data you give us directly
Through the contact form at /contact, and through email or calls:
| Data | Required? | Why we ask |
|---|---|---|
| Name | Yes | To address you correctly in our reply. |
| Email address | Yes | To reply to your enquiry. |
| Company / organisation | No | To understand the context of the project. |
| Phone number | No | Only if you would rather we call than email. |
| Project details, budget range, timeline | No | To assess whether we are a good fit and prepare a useful first response. |
| Anything you write in a free-text field | No | Please do not include sensitive personal information or third-party confidential data here. |
Data collected automatically
- Server and delivery logs. Our hosting provider and email provider record technical information such as IP address, browser user-agent, request time and requested URL. This is standard operation and abuse-prevention logging, not profiling.
- Rate-limiting. When you submit the contact form, we briefly hold your IP address in memory to stop the same address submitting more than five times in ten minutes. It is never written to disk and disappears when the server instance recycles.
Data we deliberately do not collect
- No advertising or tracking cookies, and no cross-site tracking.
- No analytics product, we do not run Google Analytics or any equivalent.
- No payment card details are ever taken through this website.
- No sensitive personal data as defined by the SPDI Rules, passwords, financial account details, health records, biometrics or similar. Please do not send these to us.
3. Why we use it
We use the personal data you give us for these purposes and no others:
- To respond to your enquiry and continue that conversation.
- To prepare a proposal, scope or estimate you have asked for.
- To deliver, support and invoice work you have engaged us to do.
- To keep our systems secure and prevent spam and abuse of the contact form.
- To meet obligations under Indian tax, accounting and other applicable law.
We do not sell personal data. We do not rent, trade or share it with data brokers, and we do not use your enquiry to add you to a marketing list without asking you first.
4. Consent and legal basis
Under the DPDP Act we process your personal data on the basis of the consent you give when you choose to submit the contact form or contact us directly, and for legitimate uses permitted by the Act, such as data you voluntarily provide for a purpose you have approached us about.
Your consent is specific to the purposes in section 3. You may withdraw it at any time by writing to us (see section 14). Withdrawing consent does not affect processing already carried out, and we may still retain what we are legally required to keep. If you withdraw consent, we may no longer be able to continue an enquiry or engagement with you.
6. Transfers outside India
Some of the providers listed above store or process data outside India. The DPDP Act permits such transfers except to countries specifically restricted by the Central Government, and we do not transfer personal data to any restricted territory. We take reasonable steps to satisfy ourselves that each provider maintains appropriate security standards.
7. How long we keep it
| What | Kept for |
|---|---|
| Enquiries that do not become projects | Up to 24 months, then deleted. |
| Client project records and correspondence | Duration of the engagement, plus up to 3 years. |
| Invoices and financial records | As long as Indian tax and accounting law requires (generally 8 years). |
| Contact-form draft in your browser | Stays on your device only, until you submit the form or clear your browser storage. |
| Rate-limiting IP record | Minutes. Held in memory only, never stored. |
When the purpose for holding data is exhausted and no legal obligation requires us to keep it, we erase it. You can ask us to erase it sooner, see section 9.
8. How we protect it
We maintain reasonable security practices and procedures as required by Section 43A of the Information Technology Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the security safeguards required by the DPDP Act. In practice:
- The entire site is served over HTTPS with HSTS enforced.
- Contact-form submissions are validated and length-capped on the server before processing.
- API credentials are held as environment variables, never in our source code or repository.
- Access to enquiry data is limited to the Veltrix team members who need it to reply to you.
- We apply security headers to prevent framing, content-type sniffing and referrer leakage.
No system is perfectly secure. If a personal data breach occurs, we will notify the Data Protection Board of India and affected Data Principals as the DPDP Act requires.
9. Your rights
As a Data Principal under the DPDP Act, you have the right to:
- Access: get a summary of the personal data we hold about you and how we process it.
- Correction: have inaccurate or incomplete data corrected or completed.
- Erasure: have your data deleted, unless we are required by law to keep it.
- Withdraw consent: as easily as you gave it.
- Grievance redressal: raise a complaint with us and get a response (section 10).
- Nominate: name another person to exercise these rights on your behalf in the event of your death or incapacity.
To exercise any of these, email us at [email protected] with the subject line "DPDP request". We will respond within 30 days. We may need to verify your identity first, so that we do not disclose your data to someone else.
If you are not satisfied with our response, you may complain to the Data Protection Board of India.
10. Grievance officer
Contact for privacy complaints
In line with the DPDP Act and Rule 5(9) of the SPDI Rules, the following person handles questions and complaints about how Veltrix processes personal data:
Shahid Wahid Shaikh, Proprietor, Veltrix AI Solutions
Email: [email protected]
Phone: +91 97676 37299
Postal: Karjat, Maharashtra, India —
full address and PIN to be added
Response time: within 30 days of receiving your complaint
11. Children's data
Our services are intended for businesses and are not directed at children. We do not knowingly collect personal data of anyone under 18. The DPDP Act requires verifiable parental consent before processing a child's data, and prohibits tracking, behavioural monitoring and targeted advertising directed at children, none of which we do. If you believe a child has given us personal data, contact us and we will delete it.
13. Changes to this policy
We may update this policy as our services or the law change. The "last updated" date at the top always reflects the current version. Where a change materially affects how we handle your personal data, we will take reasonable steps to notify you directly.
14. Contact us
For anything in this policy, or to exercise your rights:
- Shahid Shaikh, Founder & CEO, [email protected] · +91 97676 37299
- Purva Morge, Business Executive, [email protected] · +91 755 913 0929
Or use the form at veltrix-solutions.com/contact.