What we collect
1. Visitor analytics (every page view)
When you load any page on gvalabs.in, a tiny script sends a single POST to
/api/track. That request creates one row in our database with:
- The path you visited (e.g.
/vittlens/) - Your referrer, if your browser sent one
- Your country (2-letter code, derived from your IP at the network edge — the IP itself is never stored)
- Your device class (mobile, desktop, tablet) and browser family — derived from your User-Agent
- A timestamp
That's the entire row. We do not store your IP, do not set a cookie to track you across pages, do not use Google Analytics, Facebook Pixel, Hotjar, or any third-party tracker. Bot traffic is identified and dropped before it's recorded so the visitor count reflects humans.
2. Form submissions (only when you fill the Connect form)
If you submit the form on the homepage, we store what you typed:
- Name and email (you provided both)
- Product interest, if you picked one
- Your message
- A timestamp
We use this to reply to you. It is not sold, shared, sent to a CRM, used to train AI, or fed into anything else. The reply comes from a real human (the founder), not an autoresponder.
Where it's stored
Records sit in a managed SQLite database in the APAC region (one of Mumbai, Singapore, Tokyo, or Sydney — picked by the platform). The website itself is served from Indian edge nodes for speed.
We call this India-first, not "India-only". As GVA Labs grows we plan to move the database to an India-only host. Backups stay inside the same managed environment; there is no copy on Google Drive, Dropbox, or anyone's laptop.
Who can see it
The founder can sign in to /admin with a password to see aggregate counts and read
the form submissions. That's it. There are no employees, no agency, no contractors with access.
If that ever changes, this page changes first.
How long we keep it
- Page views: retained for 24 months as a rolling window, then deleted.
- Form submissions: retained until you ask us to delete them, or for 7 years if statutory rules apply.
Your rights under the DPDP Act 2023
You can email care@gvalabs.in at any time to:
- Get a copy of every record we hold about you
- Correct anything that's wrong
- Delete it all
- Withdraw consent
We respond within 7 days, usually faster. No "your request has been queued" boilerplate — a real reply from a real person.
Individual products have their own policies
VittLens, PunchKaro, DueDash, FeeJustifier, StockRadar, and Know Thyself are operated as separate products with their own privacy notices on their own domains. This page covers gvalabs.in only — the studio's marketing site.
Changes to this policy
If we change anything material, we update this page and bump the "last updated" date at the top. We will not silently widen what we collect.
Contact
Privacy questions, data requests, or anything else:
care@gvalabs.in
Operated by Gupta Vibhor & Associates, Delhi, India.