Privacy Policy (DPDP Act & GDPR Aware)

1. Commitment to Privacy & DPDP Compliance

VeloForge Labs (“Nyrolo”, “we”, “us”, or “our”) operates the website audit and quality assurance platform at nyrolo.com. We are committed to complying with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) of India, as well as global regulations such as GDPR.

2. Data We Collect

• Account Data: Email address, name, agency brand name, and authentication credentials.
• Audit & URL Data: Public website URLs and staging preview links entered for scanning, response headers, metadata, and HTML structure.
• Payment Data: Handled securely by Razorpay. Nyrolo never stores raw credit/debit card numbers or bank credentials.
• Technical Logs: IP addresses and user agents for fraud prevention and SSRF defense.
• Site Analytics (only if you accept): If you accept the analytics choice, Google Analytics counts visits and page views on our public pages. It uses cookies. We turn off Google signals and ad personalisation, and we never send it your name, email, account ID, the websites you audit, or report links. Declining keeps it from loading. See the Cookie Notice.
• Product Emails: After you sign up we send one welcome email and at most two reminders during your first day, through our email provider Resend. They stop as soon as you run your first audit, and every email has an unsubscribe link. We record when these were sent and whether you opted out.

3. How We Use Website Scan Data

Website URLs submitted for auditing are processed strictly for the purpose of analyzing site quality, calculating the 0–100 Readiness Score, and delivering your client reports. We never sell, rent, or trade your audit findings or client URLs to data brokers or advertisers.

4. Your Rights Under DPDP Act (India)

As a Data Principal under the DPDP Act, you have the right to:

• Access and review personal data processed by us.
• Export your data in a portable JSON format (available in your Dashboard Settings).
• Request permanent erasure of your account and all associated audit reports.
• Grievance redressal: Contact our designated Data Protection Officer at privacy@nyrolo.com.

5. Data Retention & Erasure

Audit data is stored securely for the duration of your active account. If you trigger account deletion via Dashboard > Settings, all project records, scan logs, and weekly monitors are permanently purged from our database within 24 hours.