Privacy Notice — Vaiyuh Waitlist

Last updated: 24 May 2026

Vaiyuh is building a platform to connect Indian startups and investors. vaiyuh.com is currently a prelaunch waitlist — we are collecting expressions of interest before our app launches. This notice explains how we handle your data during this prelaunch phase, in line with India's Digital Personal Data Protection Act, 2023 (DPDP Act).

A comprehensive Privacy Policy covering the launched platform will be published when the app goes live.

1. What we collect

When you submit the Get Early Access form, we collect:

Your role (startup or investor)
Funding stage(s) you indicate
Industry (for startups) or typical cheque size in INR (for investors)
Your name or company name
Your email address

For security purposes only, we also automatically capture:

A one-way hash of your IP address (we do not store raw IPs)
Your country code (from your network connection)
Your browser's user agent string
Cloudflare Turnstile bot-detection signals

We do not use cookies for tracking. We do not use third-party analytics tools that track individuals.

2. Why we collect it

Our lawful basis under the DPDP Act is your consent, given by submitting the waitlist form. We use your data only to:

Add you to the waitlist
Notify you when Vaiyuh launches
Prevent abuse and spam (anti-bot, rate-limiting)
Generate aggregate metrics about waitlist composition

We do not sell, rent, or share your personal data with third parties for marketing.

3. Who has access

Your data is stored in:

Our hosting database, provided by Hostinger (India region)
A Google Sheet mirror, hosted on Google LLC servers

The following third-party services receive limited data:

Cloudflare Turnstile — receives anonymised bot-detection signals; does not see your submitted fields
Google Sheets / Google Apps Script — receives your submitted form fields for storage and display in our internal sheet

These providers are bound by their own privacy commitments. We do not authorise them to use your data for purposes other than what we direct.

4. Cross-border transfer

By submitting the form, you consent to your data being processed by Google LLC on US-based servers (Google Sheets / Apps Script). This transfer is permitted under DPDP Act Section 16.

5. Retention

We retain waitlist data until the Vaiyuh app launches plus 12 months thereafter. After that period, inactive waitlist entries are deleted. You may request earlier deletion at any time (see Section 7).

6. Security

We apply reasonable technical safeguards including HTTPS-only transmission, secrets stored outside the webroot, prepared SQL statements, IP hashing before storage, and rate-limiting on the form. No platform can guarantee absolute security. In the event of a personal data breach affecting your information, we will notify you and the relevant authorities as required by law.

7. Your rights under DPDP

You may, at any time, request:

A copy of the data we hold about you
Correction of inaccurate data
Deletion of your data
Withdrawal of consent (which will result in deletion)
Resolution of a grievance about how we process your data

To exercise any of these, email business@vaiyuh.com with the subject line "DPDP Request: [your request]". We will respond within 30 days.

8. Children's data

Vaiyuh is intended for adults (18 and over). We do not knowingly collect data from minors. If we learn we have done so, we will delete it immediately.

9. Grievances

For any concern about how we handle your data, contact The Founder, Vaiyuh at business@vaiyuh.com. We will acknowledge your grievance within 7 days and resolve it within 30 days.

10. Changes to this notice

We may update this notice as Vaiyuh evolves. Material changes will be communicated to waitlist members via email. Continued use of the site after an update constitutes acceptance of the revised notice.