GDPR Compliance

Last Updated: August 25, 2024

1. Introduction

Vymera is committed to protecting the privacy and personal data of our users, especially those located in the European Union. This GDPR Compliance document explains how we comply with the General Data Protection Regulation (GDPR).

Vymera is developed and operated by Alphabetin Consulting & It Services Private Limited.

2. Data Controller

Data Controller: Alphabetin Consulting & It Services Private Limited
Contact for GDPR Matters: gdpr@vymera.app
Website: https://alphabet-in.com

3. Legal Basis for Processing

We process your personal data on the following legal bases under the GDPR:

  • Consent: When you voluntarily provide information (e.g., profile picture, status).
  • Contractual Necessity: To provide our messaging services as agreed.
  • Legal Obligation: When required by law (e.g., responding to legal requests).
  • Legitimate Interests: For security, fraud prevention, and service improvement.

4. Data We Collect

4.1 Personal Data

  • Phone number (for account registration)
  • Profile information (name, status, profile picture - optional)
  • Device information (type, OS, unique identifiers)
  • Usage data (how you use the app)

4.2 Special Category Data

We do not collect special category data (sensitive personal data) such as health information, political opinions, or religious beliefs.

5. How We Use Your Data

  • To provide and maintain our messaging service
  • To verify your phone number for account registration
  • To send important service notifications
  • To improve app performance and user experience
  • To detect and prevent fraud and abuse
  • To comply with legal obligations

6. End-to-End Encryption and GDPR

Vymera uses end-to-end encryption for all messages, voice calls, and video calls. This means:

  • We cannot access the content of your communications
  • Only you and the intended recipient can decrypt messages
  • Message content is not stored on our servers
  • We only process metadata (timestamps, participants, message type)

7. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this document:

  • Account Data: Retained until you delete your account
  • Usage Data: Retained for 12 months for analytics
  • Security Logs: Retained for 6 months for security purposes
  • Legal Requests: Retained as required by law

Upon account deletion, your personal data will be removed within 30 days, except as required by law.

8. Your GDPR Rights

Under the GDPR, you have the following rights:

8.1 Right to Access

You can request a copy of the personal data we hold about you. Contact us at gdpr@vymera.app.

8.2 Right to Rectification

You can request correction of inaccurate or incomplete personal data.

8.3 Right to Erasure (Right to be Forgotten)

You can request deletion of your personal data. You can also delete your account directly through the app settings.

8.4 Right to Restrict Processing

You can request that we restrict the processing of your personal data in certain circumstances.

8.5 Right to Data Portability

You can request a copy of your data in a structured, commonly used format.

8.6 Right to Object

You can object to processing based on legitimate interests.

8.7 Right to Withdraw Consent

You can withdraw your consent at any time by deleting your account or contacting us.

9. International Data Transfers

Your data may be transferred to countries outside the EU. We ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Adequacy decisions from the European Commission
  • Other appropriate legal mechanisms

10. Data Security

We implement appropriate technical and organizational measures to protect your data:

  • End-to-end encryption for all communications
  • Encryption of data at rest and in transit
  • Regular security audits and assessments
  • Access controls and authentication
  • Secure data storage and processing

11. Data Breaches

In the event of a personal data breach that poses a risk to your rights and freedoms, we will:

  • Notify you within 72 hours of becoming aware of the breach
  • Provide details of the breach and its potential impact
  • Outline steps we are taking to address the breach
  • Notify relevant supervisory authorities as required

12. Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect personal data from children under 16 without parental consent. If you are a parent and believe your child has provided us with personal data, please contact us.

13. Changes to This Policy

We may update this GDPR Compliance document from time to time. We will notify you of any changes by posting the updated document on this page and updating the "Last Updated" date.

14. Contact for GDPR Matters

For all GDPR-related inquiries, please contact:

  • Email: gdpr@vymera.app
  • Website: https://alphabet-in.com
  • Company: Alphabetin Consulting & It Services Private Limited

You also have the right to lodge a complaint with a supervisory authority in your country of residence.