Privacy Policy

Last updated: 5 November 2026. Applies to VEM Client, provided by Vibuh Solutions.

1. Privacy policy

1.1 What we collect. (a) Account and billing contact details: name, work email, organization name, number of users. (b) Payment metadata from Stripe, such as the payment reference, amount, currency and status; we never see or store full card numbers. (c) The workforce and employee data the Customer enters into VEM Client, which stays the Customer’s data (see Terms, section 4). (d) Basic technical data such as IP address and request logs, used for security and abuse prevention. (e) Messages sent to us through the contact or audit-request forms.

1.2 How we use it. To provide, activate and support the service; to bill and prevent fraud; to answer enquiries; to send service and billing messages; and to meet legal obligations. We do not sell personal data and do not use customer employee data for advertising.

1.3 Sub-processors and recipients

1.4 Cookies, rights and retention

Cookies. The website uses only essential cookies and storage needed to operate the site and checkout. It does not use advertising cookies.

Your rights. Depending on where the person lives, they may have the right to access, correct, delete or restrict the use of their personal data, to object to processing, to data portability, and to complain to a regulator. In the UK this is the Information Commissioner’s Office; in India it is the Data Protection Board under the Digital Personal Data Protection Act. Requests about our own data go to admin@vsol.in. Requests about employee data held in a Customer’s workspace should go to that employer, which is the controller.

Retention. Account and billing records are kept while a subscription is active and for the period required for tax, accounting and legal purposes afterwards (for UK companies, generally six years). Workspace data follows Terms, section 4.3.

International transfers. Data may be processed in the UK, India and other locations where our sub-processors operate. Where required, we rely on appropriate safeguards for transfers.

Breach notification. If we confirm a personal data breach affecting a Customer’s data, we will notify the Customer without undue delay and within 72 hours of confirmation.

Changes. We will post changes to this policy on the website with a new effective date, and notify Customers by email of material changes.