Privacy Policy

This Privacy Policy describes how Vision (Trading as Tatynerds Private Limited) ("we", "our", or "us") collects, uses, and protects your information when you use our services and integrations (collectively referred to as the "Service"). By using Vision, you agree to the collection and use of information in accordance with this policy.

Vision is operated by Tatynerds Private Limited, and may be accessed via our website at https://vision-dev.anthers.com.

1. Information We Collect

We collect and process data solely for the purpose of providing analytics and reporting to our users. The information we collect may include:

• Account Information: Merchant identifiers and related account setup information you provide when using our Service.
• Connected Platform Data: Performance and analytics data retrieved via connected integrations (e.g., marketing platforms, ad networks, analytics tools).
• Technical Information: Log files, IP addresses, browser type, device identifiers, and timestamps to ensure proper service functionality and security.
• Cookies: Session cookies and analytics cookies to improve performance and user experience.

We do not collect personally sensitive data such as credit card information, passwords from connected accounts, or any user content unrelated to analytics performance.

2. How We Use Information

We use collected information to:

• Provide and maintain the Service.
• Generate reports and dashboards based on your connected accounts.
• Securely process API data and store results in encrypted form.
• Improve our platform's performance and user experience.
• Communicate important updates related to the Service.

Vision uses connected platform APIs (including but not limited to Google Ads API) only for read-only reporting purposes. We do not create, modify, or manage any advertising accounts or campaigns.

3. Data Storage and Security

• All data is securely stored on AWS infrastructure using encryption-at-rest and encryption-in-transit.
• API tokens and credentials are encrypted using AWS Secrets Manager / KMS.
• Access to data is restricted to authorized systems and personnel who require it to operate the Service.
• Tokens are short-lived and refreshed automatically; raw data is stored in encrypted databases and retained only while the user account or integration remains active.

We follow industry-standard practices to protect data from unauthorized access, alteration, disclosure, or destruction.

4. Data Retention and Deletion

We retain user data only as long as necessary to provide our services. When a user disconnects an integration or deletes their account:

• All associated data and API credentials are removed from our systems.
• Cached or backup copies are deleted within a reasonable time frame as part of routine maintenance.

You may contact us at any time to request data deletion.

5. Disclosure to Third Parties

We do not sell, rent, or trade personal or analytics information.

We may share limited data only in the following circumstances:

• To comply with applicable laws or respond to valid legal requests.
• To trusted service providers who support infrastructure, analytics, or security under strict confidentiality agreements.
• In connection with a merger, acquisition, or transfer of assets, provided users are notified prior to any such transfer.

6. Cookies

We use cookies to:

• Maintain user sessions and authentication states.
• Analyze how users interact with our platform to improve functionality.

You can manage or disable cookies through your browser settings. However, disabling cookies may affect how certain features of Vision work.

7. User Rights and Control

Users can:

• Disconnect integrations or revoke access at any time via their connected account settings.
• Request deletion of their account and all associated data.
• Contact us to obtain details about the data stored or processed on their behalf.

We respond to such requests promptly and in compliance with applicable data protection laws.

8. International Data Transfers

If you access Vision from outside India, please note that your data may be processed and stored on servers located in other countries (such as the United States).

We ensure that adequate data protection measures are in place, consistent with applicable legal requirements.

9. Additional Disclosures for General Data Protection Regulation (GDPR) Compliance (EU)

Data Controller / Data Processor

The GDPR distinguishes between organisations that process personal information for their own purposes ("data controllers") and organisations that process personal information on behalf of others ("data processors").

We, Tatynerds Private Limited, are a Data Controller and/or Data Processor with respect to the personal information you provide to us.

Legal Bases for Processing Your Personal Information

We only collect and use personal information when we have a legal basis to do so. These include:

• Consent: When you give us consent to collect and use your information for a specific purpose. You may withdraw your consent at any time by contacting us.
• Performance of a Contract or Transaction: Where processing is necessary for the performance of an agreement with you (e.g., to provide our services).
• Legitimate Interests: Where processing is necessary for our legitimate business interests, such as improving our services, analytics, or security.
• Compliance with Law: When processing is required to comply with legal obligations (e.g., responding to regulatory or court requests).

International Transfers Outside the EEA

We ensure that any transfer of personal information from the European Economic Area (EEA) to countries outside the EEA is protected by appropriate safeguards, such as:

• Standard data protection clauses approved by the European Commission; or
• Binding corporate rules or other legally accepted mechanisms.

Your Rights under GDPR

EU residents have the following rights:

• Access: Request a copy of personal information held about you.
• Correction: Request correction of inaccurate or incomplete data.
• Restriction: Request restriction of processing under specific conditions.
• Objection: Object to processing based on legitimate interests or public interest grounds.
• Data Portability: Request transfer of your data to another entity in a machine-readable format.
• Deletion: Request that your personal data be deleted ("right to be forgotten").

If you wish to exercise any of these rights, please contact us at tech@anthers.com.

10. Compliance with Other Data Protection Laws (CCPA / AU Privacy)

Vision (Trading as Tatynerds Private Limited) also complies with applicable privacy regulations outside the EU, including:

• CCPA (California Consumer Privacy Act): We do not sell or share user data and respect all data deletion and access requests.
• Australian Privacy Act: Users can request access or correction of their information at any time.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect product updates, integrations, or regulatory changes. The latest version will always be available at https://marmeto.io/vision/privacy-policy.

We encourage users to review this page periodically.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data handling practices, please contact us at tech@anthers.com.