Privacy Policy
► View as a slide presentation
Last updated: 2026-07-14 · Applies to gvsgroup.netlify.app and the GVS Platform, IAS Vault and CAS applications
Who we are
GVS Technologies is a sole proprietorship registered in India and is the data controller for this website.
- Principal place of business: 1st Floor, No. 106, Scion Vista Apartment, Bengaluru (Urban), Karnataka 560075, India
- Udyam Registration No.: UDYAM-KR-03-0740911
- DPIIT Recognition No.: IN-0826-9513CC
- Contact: info@gvstechnologies.online · +91 97512 40965
- Data protection & grievance contact: info@gvstechnologies.online — for access, correction, deletion or complaints under the DPDP Act 2023 and the GDPR. We respond within 30 days.
The short version
GVS Platform, IAS Vault and CAS run entirely in your browser. We do not operate an application server or database that receives, stores, or processes your records. There is nothing on our infrastructure to lose, sell, or hand over, because it was never sent to us in the first place.
What we don't collect
- No account registration data for the browser-based apps (Platform, Vault, CAS)
- No analytics, no tracking cookies, no third-party scripts or CDNs on this website or those apps
- No sale of personal data to anyone, for any reason
Where your data actually lives
Content you create in IAS Vault or CAS (passwords, documents, contract records) is stored locally on your device, encrypted with AES-256-GCM via the Web Crypto API. Your encryption key is derived on-device using PBKDF2 or WebAuthn biometric unlock and is never transmitted to us. Export and deletion are entirely under your control — there is no vendor copy for us to act on.
Outbound calls: who your data can reach
The apps run on your device, but some features deliberately call an outside service. Every destination is listed here. Each call is made directly from your browser, using credentials you supply, and GVS Technologies never receives or stores a copy.
- Anthropic (Claude API) — when you invoke an AI agent in the Platform. The request carries the prompt for that task; it does not carry your vault or CAS records.
- Google — in GVS Email Validator, which signs in with your own Google OAuth client and reads your Gmail through Google’s API. The token stays in your browser.
- Netlify — our static host. Like any web server it records request logs, which include IP addresses.
Each provider’s own privacy terms govern what they do with what they receive. No GVS server sits in any of these paths.
Regulatory scope — what applies and what doesn't
We get asked about specific compliance frameworks, so here's where things actually stand rather than a generic disclaimer:
- GDPR / CCPA consent banners. The browser-based apps set no cookies and run no analytics or trackers (see our Cookie Policy). They do store data on your device — in localStorage and IndexedDB — because that storage is the application; under the ePrivacy rules that is storage you have asked for, so no consent banner is required for it
- PCI-DSS. We do not process, store, or transmit payment card data anywhere on this site or in any application. PCI-DSS does not apply because no cardholder data is ever in scope.
- HIPAA. We do not collect, store, or process protected health information in any product. HIPAA does not apply because none of our products handle health data.
Your rights
Because the browser-based apps hold no server-side copy of your data, data-subject requests (access, correction, deletion) are things you can already do yourself, instantly, in the app. For general questions about this policy, email info@gvstechnologies.online.
Changes to this policy
We'll update the "last updated" date above when this policy changes, and keep it aligned with the architecture actually in use — described in full on our security & data-handling page.