Privacy Policy

1. Overview

Forvora Systems ("Forvora", "we", "us", "our") is an AI and automation consultancy based in Dindigul, Tamil Nadu, India. We are the data controller for the information described in this policy.

This policy explains what personal data we collect when you visit forvorasystems.com, enquire about our services, or communicate with us through any channel — and how we use, store, and protect that data. We keep this policy as plain-language as possible. Legal obligations require a small amount of formal terminology; we explain each term when it first appears.

By using our website or contacting us, you acknowledge this policy. If you disagree with any part of it, please do not submit personal information to us.

2. Information We Collect

We collect only information that is necessary for the purpose stated at the point of collection. We do not buy, rent, or scrape data about individuals.

2.1 Enquiries by email

When you email us at contact@forvorasystems.com, we receive the content of your message along with any personal information you choose to include — typically your name, email address, company name, and a description of your project or question. We do not prompt for any information beyond what is needed to respond.

2.2 Calendly booking

Our website includes a link to our discovery-call scheduling page hosted by Calendly LLC ("Calendly"). When you submit a booking, the data you enter — including your name, email address, and any answers to pre-call questions — is collected and stored by Calendly on their infrastructure. We receive your booking details as the calendar organiser. Calendly's own Privacy Policy governs their handling of your data.

2.3 WhatsApp messages

Our website includes a WhatsApp contact link. If you choose to message us through WhatsApp, your communication is transmitted through infrastructure operated by Meta Platforms Ireland Ltd (for EEA/UK users) or Meta Platforms Inc. (for all other users). WhatsApp applies end-to-end encryption to message content. We receive and retain your messages for the purpose of responding and managing the engagement. Meta's Privacy Policy governs their collection of metadata (account information, usage data).

2.4 Website analytics

We use Plausible Analytics to understand how visitors use our website (page views, referral sources, general geography at country level, device type). Plausible does not:

• Use cookies or any persistent identifiers
• Collect IP addresses (they are discarded after geolocation)
• Store any personally identifiable information
• Track users across different websites
• Share data with advertising networks

Plausible is operated by Plausible Insights OÜ, an EU company, and data is hosted in Frankfurt, Germany (EU) by Hetzner. Because Plausible collects no personal data, it does not require a cookie consent banner for analytics purposes.

2.5 Technical data collected automatically

Standard web server logs may temporarily record the IP address of HTTP requests for security and abuse-prevention purposes. These logs are not linked to any individual identity, are not processed for analytics, and are purged on a rolling basis (typically within 14 days). Our hosting provider (Vercel or equivalent) may process this data as a data processor acting on our instructions under a Data Processing Agreement.

3. How We Use Your Information

We process personal data only for the purposes and on the legal bases set out below. "Legitimate interests" means we have a genuine business reason that is not overridden by your right to privacy. "Contract" means processing is necessary to take pre-contractual steps at your request or to perform a contract we have with you.

We do not use your data for automated decision-making or profiling. We do not send unsolicited marketing communications.

4. Cookies and Local Storage

We set a single piece of data in your browser's localStorage to remember your cookie-consent preference (key: forvora-consent). This is a functional necessity, not tracking. It expires when you clear your browser's local storage, or after 365 days.

We do not set any advertising cookies, analytics cookies, or third-party tracking cookies. Third-party services you interact with (Calendly, WhatsApp) may set their own cookies governed by their respective privacy policies — we have no control over those.

5. Third-Party Service Providers

We use the following third-party services in delivering our website and communications. Each is a "data processor" (they handle data on our behalf) or an independent "data controller" (they determine their own processing purposes).

We do not sell, rent, or otherwise share personal data with parties outside this list, except where required by applicable law.

6. Data Retention

We retain personal data only for as long as necessary for the purpose it was collected and to comply with legal obligations (such as accounting and tax records in India under the Income Tax Act, 1961, and the Companies Act, 2013).

When the retention period expires, we delete or anonymise the data. You may request earlier deletion — see Section 7.

7. International Data Transfers

India, the EU, and several other jurisdictions regulate transfers of personal data to countries without equivalent protection. When we use Calendly (USA) or WhatsApp/Meta (USA/Ireland), your data may be transferred outside India and/or the European Economic Area (EEA). These transfers rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission, incorporated by Calendly and Meta into their data processing terms
• Adequacy decisions where applicable
• Your explicit consent (where SCCs are not in place and the transfer is necessary at your request)

Plausible data remains within the EU. Website hosting via Vercel may involve global CDN edge nodes; no personal data is stored persistently at edge nodes. Google Fonts requests may route through Google's global infrastructure; only your IP address and browser headers are sent to Google as part of the font request — we do not control this, and you can mitigate it by using a browser extension that blocks Google Fonts requests.

8. Your Rights

Depending on where you are located, you have various rights over your personal data. We honour these rights regardless of your jurisdiction — you do not need to prove residency to exercise them.

Rights under GDPR (EU/EEA/UK residents)

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — ask us to correct inaccurate data
• Right to erasure — request deletion of your data where there is no overriding legal obligation to retain it
• Right to restrict processing — ask us to pause processing while a dispute is resolved
• Right to data portability — receive your data in a machine-readable format
• Right to object — object to processing based on legitimate interests
• Rights related to automated decision-making — not applicable as we do not use automated decisions

Rights under India's DPDP Act, 2023 (Indian residents)

• Right to access information — request a summary of personal data processed and processing activities
• Right to correction and erasure — request correction of inaccurate data or erasure when the purpose of processing is fulfilled
• Right to grievance redressal — contact our grievance officer (see Section 9) for prompt resolution
• Right to nominate — nominate another individual to exercise your rights in the event of your death or incapacity

To exercise any right, email us at contact@forvorasystems.com with the subject line "Privacy Request". We will respond within 30 days (or sooner where required by law). We will not charge a fee unless your request is manifestly unfounded or excessive. We may need to verify your identity before acting on a request.

9. Data Security

We apply reasonable and appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• HTTPS (TLS 1.2 or higher) for all website traffic
• A mutual NDA can be provided at no additional cost before commercially sensitive information is shared.
• Access to enquiry data limited to personnel directly involved in the engagement
• No storage of payment card data — billing is handled by our clients' preferred payment rails

No system is perfectly secure. If you believe your personal data has been compromised in connection with Forvora, please notify us immediately at contact@forvorasystems.com. We will investigate and notify affected individuals and relevant authorities as required by applicable law.

10. Children's Privacy

Our website and services are directed at businesses and professionals. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has submitted personal data to us, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices, technology, or legal requirements. Material changes — those that meaningfully affect your rights or how we use your data — will be signalled by updating the "Effective date" at the top of this page. We recommend reviewing this policy periodically. Continued use of our website after an update constitutes acceptance of the revised policy.

12. Contact and Complaints

For any privacy-related questions, requests, or complaints, contact us at:

Forvora Systems
Dindigul, Tamil Nadu, India
Email: contact@forvorasystems.com

We aim to resolve all privacy queries within 30 days. If you are not satisfied with our response and you are an EU/EEA/UK resident, you have the right to lodge a complaint with your local supervisory authority (for example, the UK Information Commissioner's Office at ico.org.uk). If you are an Indian resident and remain dissatisfied after contacting us, you may approach the Data Protection Board of India once it becomes operational under the Digital Personal Data Protection Act, 2023.