Vovix Back to home

Privacy Policy

Last updated: July 2026

Vovix Lens processes financial documents on your behalf, so we take data protection seriously. This policy describes what we collect, how we use it, who we share it with, and the choices you have.

1. Who we are

Vovix Lens is an intelligent document-processing service operated by Vovix Technologies Pvt. Ltd. (“Vovix”, “we”). This policy explains what data we handle when you use the service at lens.vovix.in and how we protect it.

2. Information we collect

  • Account data — your name, work email, firm name, and password (stored only as a salted hash), or your Google account identifier if you sign in with Google.
  • Documents you upload — invoices, receipts, bank statements, IDs, and other files you submit for processing, and the structured data extracted from them.
  • Master data — vendor lists, GSTINs, and purchase orders you add.
  • Usage & billing — job history, credit usage, subscription and payment status (payments are handled by our payment processor; we do not store card details).

3. How we use it

We use your data solely to provide the service: to extract and validate document data, run GST checks (GSTIN validation, ITC, GSTR-2B reconciliation), export to your accounting tools, operate your account and billing, and improve accuracy. We do not sell your data or use your documents to train third-party models.

4. Sub-processors

  • AI extraction — Google (Gemini) and OpenAI process document images/text to extract fields. Content is sent for inference only and is not used by them to train their models under their API terms.
  • Infrastructure — Amazon Web Services (hosting, ap-south-1) and MongoDB Atlas (database).
  • Payments — our payment gateway processes subscriptions; card data never touches our servers.
  • Optional GSTIN verification — when enabled, a verification provider confirms a GSTIN’s status.

5. Data storage, location & retention

Your data is stored in India (AWS ap-south-1) and is logically isolated per organisation. Uploaded files and extracted results are retained while your account is active so you can review, export, and reconcile them. You can delete documents at any time; on account closure we delete or anonymise your data within a reasonable period, except where retention is required by law.

6. Security

We use HTTPS/TLS in transit, per-tenant isolation, hashed passwords, server-side sessions with a device limit, and access controls. No system is perfectly secure, but we apply industry-standard safeguards appropriate to financial documents.

7. Your rights

You can access, correct, export, or delete your data from within the app, or by emailing us. We honour applicable data-protection rights, including under India’s Digital Personal Data Protection Act.

8. Changes

We may update this policy; material changes will be posted here with a revised “last updated” date.

Questions? Email support@vovix.in. This document is a general template and not legal advice — please have it reviewed by a qualified professional before relying on it.