Scope and who is responsible
This Privacy Policy explains how Vaayam collects and handles personal information when you visit our website, use our free search tools, create an account, connect a data source, or use Vaayam's AI search visibility and SEO intelligence service (the Service).
The India-based Vaayam operator identified in your order, invoice, or account correspondence determines why and how the personal data described here is processed and acts as the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (DPDP Act) when applicable. If an organization provides your Vaayam account, that organization may separately determine how workspace content is used and who can access it.
Information we collect
Account and commercial information
We collect your business email address, account and authentication identifiers, plan, subscription status, and related communications. Payments are processed by Stripe; Vaayam receives billing identifiers and transaction or subscription status, not full card numbers.
Workspace and SEO data
We process the domains, competitors, keywords, countries, languages, report settings, prompts and other inputs you provide, and monitoring prompts Vaayam generates. We also create and store search-result snapshots, ranking and traffic measurements, intent classifications, AI-engine responses, brand mentions, citations, alerts, recommendations, reports, and usage records.
Connected Google Search Console data
If you connect Google Search Console, we receive your connected Google email, selected property, read-only search performance data such as queries, pages, clicks, impressions, click-through rate and position, and an authorization token needed to maintain the connection. Vaayam requests read-only Search Console access and does not use it to change your site.
Free tools, device, and usage data
When you use the rank checker or SERP simulator, we may record the domain, query, country, language, results, time, and diagnostic data. We also receive IP address, browser and device information, pages and features used, referring pages, timestamps, approximate location derived from IP, cookie identifiers, logs, and error or security events.
Where information comes from
Information comes from you and your organization, your browser and device, connected services such as Google Search Console, search and SEO data providers, AI providers, payment and authentication providers, and publicly available web and search-result sources. Some measurements and insights are inferred from these sources rather than supplied directly by you.
How and why we use information
We use personal information to:
- provide accounts, workspaces, reports, scans, monitoring, and support;
- retrieve and compare search, traffic, ranking, and AI visibility data;
- generate classifications, summaries, recommendations, and other insights;
- process subscriptions, enforce plan limits, and maintain billing records;
- send service, security, onboarding, and transactional communications;
- understand feature use and improve reliability and user experience;
- detect abuse, secure the Service, troubleshoot, and enforce our terms; and
- comply with law and protect the rights and safety of users and others.
We process personal data for lawful purposes with your consent, where processing is necessary to provide the Service you requested, for certain legitimate uses permitted by Indian law, and to comply with legal obligations. Where processing is based on consent, you may withdraw it with comparable ease, although this will not affect processing already carried out and may prevent us from providing the affected feature.
AI and search-data processing
Vaayam sends limited inputs—such as prompts, keywords, domains, public web content, and relevant search metrics—to search-data and AI providers so they can return results or generate analysis. Depending on availability and configuration, these providers may include DataForSEO, Serper, OpenAI, Anthropic, Google, and Perplexity.
Do not put confidential personal information, regulated data, credentials, or secrets into keywords, prompts, competitor fields, or other free-text inputs. AI outputs can reproduce or infer information from the submitted context and from public sources.
Retention and deletion
We retain account and workspace information while your account is active and for as long as reasonably needed to provide the Service, meet legal or accounting obligations, resolve disputes, prevent abuse, and enforce our agreements. Retention periods vary by data type and operational need.
Removing a domain from Settings deletes that workspace and its associated keywords, snapshots, alerts, AI runs, Search Console data, and usage rows from the active database. Disconnecting Search Console removes the stored connection. Residual copies may remain temporarily in encrypted backups, security logs, or records we must retain by law. To close your final workspace or request account-level deletion, contact us as described below.
Security and international transfers
We use administrative, technical, and organizational safeguards designed to protect information, including access controls, tenant-level database restrictions, private storage, secure transport, and encryption of stored Google authorization tokens when production keys are configured. No system is completely secure, so we cannot guarantee absolute security.
Vaayam is operated from India, and some providers may process information in other countries. We use contractual, technical, and organizational safeguards for these transfers and will comply with any country-specific transfer restrictions notified by the Government of India under applicable law.
Your rights under Indian law
Under India's DPDP Act and the Digital Personal Data Protection Rules, 2025, as applicable and as their provisions come into force, you may request a summary of personal data being processed and relevant processing activities; the identities of other Data Fiduciaries and processors with whom it has been shared; correction, completion, or updating of inaccurate or incomplete personal data; and erasure of personal data that is no longer needed, subject to lawful retention requirements.
You may withdraw consent, use our grievance process, and nominate another individual to exercise your rights in the event of your death or incapacity, where applicable. If a grievance is not resolved through our process, you may approach the Data Protection Board of India in accordance with applicable law. We may verify your identity and authority before acting on a request.
When making a request, you must not impersonate another person, suppress material information, submit a false or frivolous grievance, or provide inauthentic information. You can update workspace data, disconnect Search Console, manage billing, and remove eligible domains in Settings. For other requests, email jharanjansameer@gmail.com with the subject “Privacy Request.”
Children
Vaayam is a business service for people aged 18 or older and is not directed to children as defined under Indian law. We do not knowingly process the personal data of anyone under 18. If you believe a child has provided personal data, email us so we can investigate and delete it where appropriate.
Changes and contact
We may update this Policy as the Service or law changes. We will post the updated version here, change the date above, and provide additional notice when required. Material changes apply prospectively unless law permits otherwise.
For privacy questions, grievances, or rights requests, contact the Vaayam operator at jharanjansameer@gmail.com. Please include the email associated with your account and enough detail to identify the request, but do not send passwords or sensitive credentials. We will acknowledge and address grievances within the periods required by applicable Indian law.
Use of the Service is also governed by our Terms of Use.