Last updated: July 23, 2026
Vian Software Solutions ("Company," "we," "us," or "our") is the operator of the website located at https://viannn.online (the "Website") and all associated services, tools, dashboards, APIs, and platforms (collectively, the "Platform"). This Privacy Policy explains how we collect, use, store, process, share, protect, and handle personal information and data in connection with your use of the Platform.
This Privacy Policy is designed to inform you about the types of information we collect, the purposes for which we collect and use that information, the circumstances under which we may share your information, our data retention and security practices, and the rights and choices available to you regarding your personal data. We are committed to being transparent about our data practices and to protecting your privacy in accordance with applicable data protection laws.
This Privacy Policy applies to all information collected through the Platform, including our Website, Dashboard, API, mobile-responsive interfaces, customer support channels, and any other digital interfaces owned, operated, or maintained by the Company. This Privacy Policy also applies to information collected offline or through any other means, including communications with our customer support team or interactions at events, where such information is linked to your Platform Account.
By accessing, browsing, registering for, logging into, or otherwise using the Platform, you acknowledge that you have read, understood, and agree to the collection, use, storage, processing, and sharing of your personal information as described in this Privacy Policy. If you do not agree with our data practices, you must immediately cease all use of the Platform and, if applicable, close your Account. Your continued use of the Platform constitutes your ongoing consent to the data practices described herein.
For the purposes of this Privacy Policy, "personal information" or "personal data" means any information that relates to a natural person which, either directly or indirectly, in combination with other information available or likely to be available with a body corporate, is capable of identifying such person. This includes, but is not limited to, name, email address, phone number, IP address, payment information, device identifiers, and any other information that can be used to identify, contact, or locate a specific individual.
We collect various categories of information in connection with your use of the Platform. The specific types of information we collect depend on your interactions with us and the features of the Platform you use. Below is a comprehensive description of the categories of information we may collect:
When you create an Account, place an Order, or interact with the Platform, we may collect the following personal information:
When you access or use the Platform, we automatically collect certain technical information, including:
We use cookies, session cookies, authentication cookies, security cookies, analytics cookies, performance cookies, local storage, browser cache, log files, pixels, and other tracking technologies to collect information about your interactions with the Platform. For detailed information about our use of cookies, please refer to the Cookies Policy section of this Privacy Policy.
When you deposit funds, place Orders, or conduct transactions on the Platform, we collect:
We collect information related to your use of the Platform's Services, including:
When you contact our support team or communicate with us through any channel, we collect:
We collect information related to your Account access and security, including:
If you access the Platform through the API, we collect:
If you complete identity verification (KYC), we may collect:
Beyond the technical data described above, we collect information about how you interact with the Platform over time. This includes the sequence of pages you visit, the features you engage with, the duration of each visit, the actions you take within the Dashboard (such as creating Orders, adjusting settings, or downloading reports), the search queries you enter, the filters you apply, and the manner in which you navigate between sections. Behavioral data helps us understand which parts of the Platform are most useful to you, detect interface problems, and tailor the experience to your needs. Although behavioral data is frequently aggregated and anonymized for analytical purposes, we may associate behavioral data with your Account where doing so is necessary to provide the Services, enforce our policies, or investigate anomalies.
In addition to information you provide directly, we may receive information about you from third-party sources where permitted by law and consistent with this Privacy Policy. These sources may include payment processors (who provide us with transaction confirmations, payment status updates, and limited identifying details necessary to reconcile payments), identity verification providers (who assist with KYC checks and may return verification results), fraud prevention and risk assessment services (who may supply risk scores or indicators associated with an IP address, device, or account), and analytics providers (who may share aggregated or de-identified usage statistics). We combine third-party information with the information we already hold to complete transactions, prevent fraud, verify identity, and improve the accuracy and completeness of the data we maintain about you. Where we receive information from third parties, the collection and use of that information by the third party is governed by that third party's own privacy policy, and we encourage you to review those policies.
If you participate in public-facing features of the Platform, such as commenting on blog posts, writing reviews, participating in community discussions, or responding to surveys, the information you choose to publish becomes visible to other users or the public, as applicable. You should exercise caution when deciding what information to disclose in public areas, as this information may be read, collected, and used by others who access those areas. We are not responsible for the use of information you voluntarily disclose in public forums. Where public features are moderated, we may process your published content for moderation, quality assurance, and compliance purposes.
We may derive additional information about you from the data we collect, including inferences about your preferences, likely interests, engagement patterns, risk profile, and the likelihood that certain transactions or activities are fraudulent. Derived and inferred data is generated through statistical analysis, pattern recognition, and automated decision-making techniques described in Section 19 (Automated Decision-Making and Profiling). Inferences are used to improve the relevance of our Services, protect the Platform from abuse, and personalize certain features. Where an inference is based on your personal information, it is treated as personal information and handled in accordance with this Privacy Policy.
If you use our referral program to invite another person to join the Platform, we may collect the contact information you provide for the invitee, such as an email address, solely for the purpose of sending the invitation on your behalf. We will not use the invitee's contact information for any other purpose unless the invitee independently creates an Account and provides us with their own information. The invitee may contact us at support@viannn.online to request that we remove their information from our records if they do not wish to receive further communications related to the invitation.
Certain information is collected automatically when you access or use the Platform, including:
We use cookies—small text files placed on your device—to collect and store information about your preferences, settings, and interactions with the Platform. Cookies help us recognize your browser, remember your preferences, and improve your experience.
We may use browser local storage and cache mechanisms to store and retrieve information on your device for performance, functionality, and preference management purposes. You can clear local storage and browser cache through your browser settings, although this may affect Platform functionality.
The Platform automatically records information in log files, including your IP address, browser type, operating system, referring URLs, access times, pages viewed, and other usage data. Log files help us diagnose technical issues, analyze trends, and administer the Platform.
We may use pixel tags, web beacons, clear GIFs, and similar tracking technologies to collect information about your interactions with the Platform and our communications, including whether you opened an email, clicked a link, or completed an action. These technologies help us measure the effectiveness of our communications and marketing efforts.
The Platform supports various payment methods, including UPI, bank transfers (NEFT, RTGS, IMPS), credit cards, debit cards, net banking, digital wallets, and cryptocurrency payments. When you make a payment, you provide payment information to our third-party payment processors, not directly to us.
Payment processing is handled by third-party payment processors, including but not limited to Razorpay, Cashfree, PayU, PhonePe, Paytm, Cryptomus, and Heleket. These processors are independently operated and have their own privacy policies governing the collection, use, and storage of payment information. We encourage you to review the privacy policies of each payment processor you use.
We do not permanently store full credit card numbers, CVV codes, or PINs on our servers. Payment card information is tokenized and processed securely by our third-party payment processors. We may retain truncated card information (such as the last four digits and card type) for transaction reference and dispute resolution purposes.
If you make payments via UPI, we may collect and store your UPI ID for transaction reference and verification purposes. We do not store UPI PINs or net banking passwords.
We use the information we collect for a wide range of purposes, including but not limited to:
We are explicit about the limits of our data use. We do not sell, rent, or trade your personal information to third parties for their own independent marketing or advertising purposes. We do not use your personal information to make automated decisions about your eligibility for credit, employment, housing, insurance, or other benefits that are unrelated to your use of the Platform. We do not use content from your private communications, support tickets, or Order details to build profiles for unrelated commercial purposes. We do not use your data to create or enhance marketing segments without your consent where such use requires consent under applicable law. We do not retain payment card data, CVV numbers, banking passwords, or UPI PINs in any form. These restrictions are integral to the way we operate, and we treat any proposed use outside the purposes described in this Privacy Policy as requiring additional disclosure and, where required, fresh consent.
We may aggregate or de-identify personal information so that it can no longer be used to identify you, and we may use such aggregated or de-identified information for any legitimate business purpose, including research, statistical analysis, product development, capacity planning, marketing measurement, and public reporting. For example, we may publish aggregate statistics about the volume of Orders processed, the geographic distribution of our Users, the performance of our Services, or the reliability of our infrastructure. Aggregated and de-identified information is not subject to the same restrictions as personal information because it no longer relates to an identified or identifiable individual, and we take reasonable steps to ensure that such information cannot be re-identified.
Where we rely on legitimate interests as the legal basis for processing your information (as described in Section 18), we conduct a careful balancing test. We consider the nature of the data involved, the context in which it was collected, the expectations a reasonable User would have about its use, and the impact of the proposed processing on your rights and freedoms. We implement safeguards that minimize any intrusion on your privacy, such as data minimization, pseudonymization, access controls, and retention limits. We will not process your information on the basis of legitimate interests where our interests are outweighed by the potential harm to your privacy, unless the processing is otherwise required or permitted by law.
Cookies are small text files that are placed on your device (computer, tablet, or mobile phone) when you visit a website. Cookies are widely used to make websites work efficiently, provide information to website operators, and enhance the user experience.
Essential cookies are necessary for the Platform to function properly. They enable core functionality such as authentication, security, session management, and load balancing. Without these cookies, the Platform cannot provide the services you have requested. Essential cookies cannot be disabled.
Analytics cookies collect anonymized data about how visitors use the Platform, including which pages are visited most frequently, how users navigate between pages, and whether users encounter errors. This information helps us understand user behavior and improve the Platform. Analytics data is aggregated and does not personally identify individual users.
Performance cookies help us understand how the Platform performs under different conditions, such as high traffic periods or different geographic regions. They allow us to identify and resolve performance issues, optimize page load times, and ensure the Platform remains responsive.
Remember Me cookies allow the Platform to remember your login credentials between sessions so you do not have to re-enter them each time you visit. Session cookies are temporary and are deleted when you close your browser. Both types of cookies are essential for providing you with a seamless login experience.
Security cookies are used to detect and prevent fraudulent activity, authenticate users, and protect against cross-site request forgery (CSRF) attacks. These cookies are critical for maintaining the security of your Account and the Platform.
Some cookies on the Platform are placed by third-party services, including analytics providers, payment processors, and content delivery networks. These third parties may use cookies to collect information about your online activities across different websites. We do not control third-party cookies and encourage you to review the cookie policies of these third parties.
You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, or to receive a notification when a cookie is set. However, blocking or deleting essential cookies may impair the functionality of the Platform and prevent you from accessing certain features. To manage cookies in popular browsers:
We do not sell your personal information to third parties. We share your information only in the following circumstances and with the following categories of recipients:
We share transaction-related information with payment processors (Razorpay, Cashfree, PayU, PhonePe, Paytm, Cryptomus, Heleket, and others) to facilitate payment processing, fraud detection, chargeback management, and transaction verification. These processors handle your payment information in accordance with their own privacy policies and PCI-DSS compliance requirements.
We share information with cloud infrastructure and hosting providers who provide the servers, databases, and infrastructure on which the Platform operates. These providers implement robust security measures and process data on our behalf under contractual obligations.
We may share anonymized, aggregated usage data with analytics providers to help us understand Platform usage patterns and improve our Services. This data does not personally identify individual users.
We may disclose your information to government authorities, law enforcement agencies, courts, or regulatory bodies when required by law, legal process, court order, subpoena, or other lawful request. We may also disclose information where we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a governmental request.
We may share information with our legal advisors, auditors, accountants, and professional consultants for the purpose of obtaining professional advice, conducting audits, or ensuring compliance with legal and regulatory obligations.
In the event of a merger, acquisition, reorganization, bankruptcy, dissolution, sale of assets, or similar business transaction, your information may be transferred to the acquiring entity or successor as part of the transaction. We will notify you of any such change in ownership or control of your personal information.
We may share information with our subsidiaries, parent companies, and affiliated entities for purposes consistent with this Privacy Policy, subject to appropriate data protection safeguards.
We may share your information with third parties when you have given us your explicit consent to do so, such as when you connect a third-party service or integration to your Account.
We do not sell, rent, lease, trade, or otherwise commercially distribute your personal information to third parties for their independent marketing purposes without your explicit consent.
The Services provided through the Platform are delivered by engaging independent fulfillment providers, vendors, or service networks that operate their own platforms and infrastructure. In order to place, track, and complete your Orders, we may share with these providers the information reasonably necessary to fulfill the Order, including the target URL or handle you specify, the quantity and service selected, your internal Order reference, and, where applicable, a fulfillment identifier. These providers are independent data controllers or processors in their own right and may have their own privacy policies governing how they handle the data you and we provide. We require our fulfillment providers to adhere to applicable law and to use the information we share solely for the purpose of fulfilling your Orders. We are not responsible for the data practices of independent fulfillment providers, and we encourage you to review the terms and privacy policies of any third-party platform or network that processes your Orders.
We may engage sub-processors to assist us in delivering the Platform, including infrastructure providers, database operators, content delivery networks, email delivery services, monitoring and observability tools, and support tooling. Where a sub-processor processes personal information on our behalf, we enter into data processing agreements that require the sub-processor to process the data only for our documented instructions, to maintain appropriate security measures, and to cooperate with us in meeting our data protection obligations. A current list of categories of sub-processors is maintained internally and may be obtained by contacting us at privacy@viannn.online. We will update this Privacy Policy or provide separate notice where we add or change sub-processors in a manner that materially affects your data.
Where you operate a reseller panel, child panel, or storefront through the Platform (as described in Section 24), the Platform may share the information necessary to operate those features between the relevant panels and the main Platform. For example, Orders placed through a child panel or storefront are attributed to the operator of that panel and may be visible to them for fulfillment, accounting, and support purposes. The operator of a child panel or storefront acts in a limited capacity with respect to the data generated through their panel, and we require panel operators to comply with applicable law and our Terms when accessing or using such data.
We take the security of your personal information seriously and implement a comprehensive set of technical and organizational measures designed to protect your data from unauthorized access, disclosure, alteration, or destruction. These measures include:
All data transmitted between your device and the Platform is encrypted using industry-standard Transport Layer Security (TLS/SSL) protocols. Sensitive data stored on our servers is encrypted at rest using AES-256 encryption or equivalent standards. Passwords are hashed using bcrypt or equivalent one-way hashing algorithms and are never stored in plaintext.
The Platform is served exclusively over HTTPS, ensuring that all communications between your browser and our servers are encrypted and protected from interception and tampering.
We employ network firewalls and Web Application Firewalls (WAF) to monitor and filter incoming and outgoing network traffic, block malicious requests, and protect against common web application attacks such as SQL injection, cross-site scripting (XSS), and DDoS attacks.
We implement rate limiting, request throttling, and anti-abuse mechanisms to prevent automated attacks, brute force attempts, credential stuffing, and other forms of abuse. Rate limits are applied per IP address, per Account, and per API key.
Access to personal data and system resources is restricted to authorized personnel on a need-to-know basis. We enforce role-based access control (RBAC), multi-factor authentication (MFA) for administrative access, and least-privilege principles.
We maintain comprehensive audit logs and monitoring systems to track access to personal data, detect unauthorized activity, and investigate security incidents. Security events and anomalies are monitored in real-time and alert mechanisms are in place to enable rapid response.
We maintain an incident response plan designed to promptly detect, investigate, contain, and remediate security incidents. In the event of a data breach that affects your personal information, we will notify you and the relevant authorities as required by applicable law.
We maintain regular backups of Platform data to ensure business continuity and disaster recovery. Backups are encrypted and stored in secure, geographically distributed locations. Backup retention periods vary based on operational requirements and applicable regulations.
Third-party Provider API keys and credentials are encrypted at rest and are never exposed to client-side code. Access to Provider credentials is restricted to authorized system processes and administrators only.
Access to personal information is limited to those employees, contractors, and service providers who have a genuine business need to access it in connection with the purposes described in this Privacy Policy. All personnel who handle personal information receive privacy and security training, are bound by confidentiality obligations, and are subject to disciplinary action for unauthorized access, use, or disclosure. We perform background and access reviews on a periodic basis, promptly revoke access when personnel change roles or leave the organization, and maintain audit logs that record who accessed what data and when.
We operate a vulnerability management program that includes regular security assessments, code reviews, dependency scanning, and, where feasible, independent penetration testing of the Platform. Identified vulnerabilities are triaged, prioritized by severity, and remediated in accordance with internal timelines. We also maintain a responsible disclosure policy that welcomes reports from security researchers, and we encourage anyone who discovers a potential vulnerability to report it to us so that we can address it promptly.
Security is a shared responsibility. You are responsible for maintaining the confidentiality of your login credentials, API keys, and other authentication tokens; for choosing a strong and unique password; for keeping your contact information and recovery details up to date; and for promptly notifying us at support@viannn.online if you suspect that your Account has been compromised. We will never ask you for your password, OTP, CVV, or UPI PIN by email, phone, or direct message. If you receive such a request, please treat it as a phishing attempt and report it to us immediately.
Depending on the applicable laws of your jurisdiction, you may have certain rights regarding your personal information. We respect these rights and provide the following mechanisms to exercise them:
You have the right to request a copy of the personal information we hold about you. Upon verified request, we will provide you with a copy of your personal data in a commonly used, machine-readable format within a reasonable timeframe. We may charge a reasonable fee for processing the request, as permitted by applicable law.
You have the right to request the correction of inaccurate or incomplete personal information we hold about you. You can update most of your personal information directly through your Account settings on the Platform. For information that cannot be updated through the Platform, please contact us at support@viannn.online.
You have the right to request the deletion of your personal information, subject to certain exceptions. We may retain certain information as required by applicable law, for legitimate business purposes, or for the establishment, exercise, or defense of legal claims. If we deny a deletion request, we will explain the reasons for the denial.
You have the right to request a copy of your data in a structured, commonly used, and machine-readable format, and to request that we transmit your data to another controller where technically feasible and where such transmission is required by applicable law.
Where we process your personal information based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal. To withdraw consent for marketing communications, you can use the unsubscribe link in our emails or update your preferences in your Account settings.
You can manage your cookie preferences through your browser settings as described in the Cookies Policy section. You may also be able to opt out of certain analytics and tracking through industry opt-out mechanisms such as the Digital Advertising Alliance (DAA) or Network Advertising Initiative (NAI) tools.
If you believe that your privacy rights have been violated, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. In India, you may lodge a complaint with the Data Protection Board of India established under the Digital Personal Data Protection Act (DPDP Act). Before filing a complaint with a regulatory authority, we encourage you to contact us at support@viannn.online so that we have an opportunity to address your concerns.
To exercise any of the rights described in this section, please contact us at support@viannn.online. We may need to verify your identity before processing your request. We will respond to your request within the timeframe required by applicable law. If we require additional time to process your request, we will inform you of the extension and the reasons for the delay.
In certain circumstances, you may have the right to ask us to restrict the processing of your personal information. You may request restriction where you contest the accuracy of the information (for a period enabling us to verify it), where processing is unlawful but you do not wish us to delete the information, where we no longer need the information but you require it for the establishment, exercise, or defense of legal claims, or where you have objected to processing based on legitimate interests pending our verification of whether our legitimate grounds override yours. Where processing is restricted, we may still store the information but will only process it with your consent, for the establishment, exercise, or defense of legal claims, for the protection of the rights of another person, or for reasons of important public interest.
Where we process your personal information on the basis of legitimate interests, you have the right to object to that processing on grounds relating to your particular situation. Upon receipt of a valid objection, we will stop processing unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or where the processing is necessary for the establishment, exercise, or defense of legal claims. Where we process personal information for direct marketing purposes, you have an absolute right to object at any time, and we will promptly cease such processing. You may opt out of marketing communications at any time by following the unsubscribe instructions in any marketing email or by updating your communication preferences in your Account settings.
Where applicable law provides for it, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. As described in Section 19, we use automated systems primarily for fraud prevention, risk management, and service integrity purposes. You may request human review of an automated decision that significantly affects you by contacting us at support@viannn.online. We will review the relevant decision, the data relied upon, and the logic applied, and we will inform you of the outcome of the review.
Where the law permits, you may designate an authorized agent to make a privacy request on your behalf. To protect the security of your data, we will require the authorized agent to provide proof of their authorization, and we may require you to verify your own identity directly with us. If you have concerns about the delegation of your privacy rights, please contact us before designating an agent.
We will not discriminate against you for exercising any of your privacy rights. We will not deny you access to the Platform, charge you different prices or rates, provide you with a different level of service, or suggest that you will receive a different price or level of service, solely because you exercised your rights under applicable privacy law. We may, however, apply different treatment where such differences are reasonably related to the value provided by your data or where required or permitted by applicable law.
The Platform operates on cloud infrastructure provided by third-party hosting and cloud service providers. Your personal information may be stored and processed on servers located in India, the United States, Europe, or other countries where these providers maintain data centers.
When you access the Platform from outside India, your information may be transferred to, stored, and processed in India or other countries. By using the Platform, you consent to the transfer of your information to countries that may have different data protection rules than your country of residence.
Where your personal information is transferred internationally, we implement appropriate safeguards to protect your data, including contractual clauses with data processors, encryption, access controls, and other technical and organizational measures as required by applicable law. We ensure that any international transfer of personal data is conducted in compliance with the Digital Personal Data Protection Act (DPDP Act) and other applicable data protection frameworks.
The Platform is not directed to individuals under the age of eighteen (18). We do not knowingly collect personal information from children under the age of eighteen (18). If we discover that we have collected personal information from a child under eighteen (18) without verification of parental consent, we will promptly delete that information.
If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us at support@viannn.online. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information from our systems.
We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, as described in this Privacy Policy, and to comply with applicable legal, regulatory, tax, accounting, or reporting requirements. The specific retention period for each category of data depends on the nature of the data, the purposes for which it is processed, and applicable legal requirements.
Payment records, transaction histories, invoices, and financial data are retained for a minimum of eight (8) years from the date of the transaction, or longer as required by applicable tax, accounting, and financial regulations.
Support ticket records, including communications, attachments, and resolution details, are retained for a minimum of three (3) years from the date of the last activity on the ticket, or longer as necessary for dispute resolution, quality assurance, and training purposes.
Server logs, application logs, and access logs are retained for a minimum of twelve (12) months from the date of creation. Security logs may be retained for longer periods where required for ongoing investigations, legal proceedings, or compliance obligations.
Information related to fraud investigations, suspicious activity reports, and AML/CTF compliance may be retained for a minimum of seven (7) years from the date of the investigation, or longer as required by applicable law.
Records related to legal proceedings, disputes, claims, and regulatory inquiries are retained for the duration of the proceedings plus a minimum of seven (7) years following the final resolution.
API access logs and usage records are retained for a minimum of twelve (12) months from the date of the API request, or longer as necessary for security, troubleshooting, and compliance purposes.
Account information is retained for the duration of the Account and for a reasonable period following Account closure or termination, as necessary for the purposes described in this Privacy Policy, to resolve disputes, enforce our Terms, and comply with legal obligations.
When personal information is no longer needed for the purposes described in this Privacy Policy, we will either delete it, anonymize it (so that it can no longer be associated with you), or de-identify it (so that it can no longer be attributed to you), in accordance with applicable law.
We periodically review the data we hold against our retention schedule and delete or anonymize data that has reached the end of its retention period. Retention periods are determined with reference to (a) the duration of our relationship with you, (b) legal, regulatory, tax, accounting, and audit requirements, (c) the statute of limitations applicable to disputes and claims, (d) operational needs such as fraud prevention and service continuity, and (e) industry practice. Automated and manual processes operate in parallel to ensure that expired data is not retained indefinitely.
Some information may be retained in backup systems, log archives, or immutable storage for a limited period even after it has been removed from active systems. Such residual copies exist solely for technical continuity, disaster recovery, and integrity purposes, and they are subject to the same confidentiality and security controls as active data. Residual copies are overwritten, deleted, or made inaccessible in accordance with their applicable retention windows.
When you close your Account, we stop processing your personal information for ordinary business purposes and begin the deletion or anonymization process. Certain information, such as financial transaction records, invoices, and audit trails, may be retained for the longer periods described in this Section 12 to comply with legal, tax, accounting, and regulatory obligations and to permit dispute resolution. Orders previously placed may continue to be recorded in fulfillment and settlement systems for the periods required by those systems and by our providers. We will respond to any specific request about data retained after Account closure in accordance with Section 9.
We continuously monitor the Platform and User activities for security threats and suspicious behavior. Our security monitoring program includes:
The Platform integrates with and links to third-party services, including Social Media Platforms (Instagram, Facebook, YouTube, TikTok, Telegram, Discord, Twitter/X, LinkedIn, Spotify, and others), payment processors, analytics providers, and cloud infrastructure providers. These third-party services are independently operated and have their own privacy policies and terms of service.
We are not responsible for the privacy practices, data collection, or content of third-party services. When you interact with a third-party service through the Platform, you are subject to that third party's privacy policy. We encourage you to review the privacy policies of all third-party services before providing them with your personal information.
The inclusion of any third-party service on the Platform does not imply endorsement, sponsorship, or affiliation with the Company.
We may update this Privacy Policy from time to time to reflect changes in our data practices, technology, legal requirements, or business operations. The "Last Updated" date at the top of this Privacy Policy indicates when the most recent changes were made.
We will notify you of material changes to this Privacy Policy by posting the updated policy on the Platform and, where required by applicable law, by sending you a notification via email or through a prominent notice on the Platform. The nature and scope of the notification will depend on the significance of the changes.
It is your responsibility to review this Privacy Policy periodically for changes. Your continued use of the Platform following the posting of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree to the updated Privacy Policy, you must immediately cease all use of the Platform and, if applicable, close your Account.
To maintain the security and integrity of the Platform and to help prevent fraud, money laundering, payment abuse, chargeback fraud, identity theft, sanctions violations, and other unauthorized or unlawful activities, Vian Software Solutions reserves the right to request identity verification ("Know Your Customer" or "KYC") from Users in certain circumstances.
KYC verification may be requested, including but not limited to, when:
The Company may request documentation such as:
Failure to provide requested verification within the specified time may result in temporary restrictions on deposits, wallet usage, order processing, API access, or account functionality until verification is completed.
The Company reserves the right to decline verification, reject transactions, suspend or terminate accounts, or refuse services where fraudulent activity, false documentation, identity theft, sanctions concerns, or other unlawful conduct is reasonably suspected.
All KYC information is processed solely for identity verification, fraud prevention, security, legal compliance, dispute resolution, and risk management purposes. Documents are handled in accordance with our Privacy Policy and applicable data protection laws.
Completion of KYC does not guarantee continued access to the Platform or approval of any transaction. The Company retains the right to refuse service or terminate accounts in accordance with these Terms and applicable law.
Vian Software Solutions is committed to complying with applicable anti-money laundering (AML), counter-terrorism financing (CTF), and sanctions laws and regulations. The Company has implemented a comprehensive risk-based AML compliance program designed to detect, prevent, and report suspicious activities.
The Company employs both automated and manual monitoring systems to detect suspicious transaction patterns, unusual account behavior, and activities that may indicate money laundering, fraud, or other financial crimes. The Company monitors transaction volume, frequency, and value patterns; rapid or repeated fund transfers; deposits that are immediately converted to orders; round-trip transactions; unusual use of multiple payment methods; and transactions inconsistent with the User's profile.
The Company may, where applicable and feasible, screen User information and transaction details against applicable sanctions lists, including lists maintained by the United Nations, the Office of Foreign Assets Control (OFAC), the European Union, and the Reserve Bank of India (RBI).
For unusually large transactions, high-value deposits, or transactions that trigger risk thresholds, the Company may request documentation regarding the source of funds. The Company reserves the right to restrict Account functionality until source-of-funds verification is satisfactorily completed.
The Company cooperates with banks, financial institutions, payment processors, regulatory authorities, and law enforcement agencies in connection with AML investigations, compliance inquiries, and legal proceedings. The Company may disclose User information, transaction records, and account details to such parties as required or permitted by applicable law.
The Company may file Suspicious Transaction Reports (STRs), Currency Transaction Reports (CTRs), or other reports as required by applicable AML/CTF laws. The Company shall not disclose to the User that a report has been filed, where such disclosure is prohibited by law.
In cases of suspected AML/CTF violations, fraud, or other unlawful activity, the Company reserves the right to freeze Account balances, restrict Account functionality, and retain funds pending the outcome of an investigation or a directive from competent authorities.
Users agree to cooperate fully with the Company's AML compliance efforts, including responding to inquiries, providing requested documentation, completing KYC verification, and disclosing information as reasonably necessary. Failure to cooperate may result in Account restrictions, suspension, or termination.
We process your personal information on one or more of the following legal bases, depending on the nature of the processing and the jurisdiction in which you are located:
Where you enter into an agreement with us, we process your personal information to perform our obligations under that agreement, including creating and maintaining your Account, processing your Orders, managing your Wallet, providing the Services, and delivering customer support. Most of the data we process for day-to-day Account operation falls within this category, and without this processing we cannot provide the Services you have requested.
Where we rely on your consent, we will request it in a clear and specific manner, and you may withdraw it at any time with effect for the future. Consent-based processing includes certain marketing communications and, where applicable, certain optional data uses. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. To withdraw consent, please use the mechanisms described in Section 22 or contact us at support@viannn.online.
We may process your personal information where we have a legitimate interest in doing so and where those interests are not overridden by your rights and interests. Our legitimate interests include: operating and securing the Platform; detecting and preventing fraud, abuse, and unauthorized access; maintaining the security and integrity of our systems; analyzing and improving our Services; resolving disputes and enforcing our Terms; and managing our business operations. We conduct balancing assessments as described in Section 5.11 before relying on this basis.
We may process your personal information where necessary to comply with a legal obligation to which we are subject, including tax and accounting requirements, anti-money laundering and counter-terrorism financing obligations, payment industry rules, regulatory reporting, and lawful requests from government authorities, courts, or law enforcement. Where we process data under this basis, our ability to honor deletion or restriction requests is subject to the overriding legal obligation.
In limited circumstances, we may process your personal information where necessary to protect the vital interests of you or another person, such as where we reasonably believe there is a threat to someone's safety. We will only rely on this basis where no other basis is available and the processing is necessary in the circumstances.
We use automated systems to support fraud prevention, risk management, security monitoring, and service integrity. These systems may analyze data such as transaction amounts and frequencies, IP addresses, device characteristics, payment methods, login patterns, order behaviors, and Account history to identify anomalies, flag suspicious activity, and protect the Platform and its Users from abuse. These automated systems operate in support of, and are subject to oversight by, our security and compliance teams.
Automated systems may result in actions that affect your Account, including temporary holds on funds, requests for additional verification (KYC), rate limiting, restrictions on certain transactions, or suspension of specific features pending review. These actions are taken to protect you and the Platform from fraud, money laundering, and unauthorized activity. Where an automated decision has a significant or legal effect on you and you are located in a jurisdiction that grants you a right to human review, you may request human review as described in Section 9.11.
We do not use personal information collected through the Platform to evaluate your creditworthiness, employment eligibility, housing eligibility, insurance eligibility, or to make decisions about unrelated benefits. Profiling performed by the Platform is confined to the purposes of operating, securing, and improving the Platform as described in this Privacy Policy.
We are committed to transparency in automated decision-making. If you have questions about how an automated decision was reached, the data that was considered, or the logic applied, you may contact us at privacy@viannn.online, and we will provide a meaningful explanation to the extent it does not compromise security, expose confidential fraud-detection logic, or reveal information about third parties.
In the event of a security incident that results in the accidental or unlawful destruction, loss, alteration, or unauthorized disclosure of, or access to, personal information transmitted, stored, or otherwise processed by the Platform, we will assess the severity and scope of the incident, take steps to contain and remediate it, and notify affected individuals and the relevant supervisory or regulatory authorities as required by applicable law.
Where notification is required, we will provide affected Users with a description of the nature of the incident, the categories of information involved, the likely consequences, the measures we have taken or propose to take to address the incident, and, where possible, recommendations for protecting against potential harm. We will make such notifications without undue delay after becoming aware of the incident, and we will document the facts relating to the incident, its effects, and the remedial action taken.
If you become aware of or suspect any unauthorized access to your Account, unusual transactions, phishing attempts, or other security concerns, please contact us immediately at support@viannn.online. Early reporting helps us investigate incidents quickly and limits potential harm. You should also change your password, revoke any suspicious API keys, and review your recent activity after any suspected compromise.
Where consent is the legal basis for a particular processing activity, we obtain it through clear, affirmative actions, such as ticking an opt-in box, confirming a preference in your Account settings, or otherwise actively indicating your agreement. We do not rely on pre-ticked boxes, silence, or inaction as consent. Consent we obtain is recorded, and you may request a record of the consent you have given at any time.
We distinguish between service communications and marketing communications. Service communications include Account verification emails, password resets, payment confirmations, Order status updates, security alerts, and notices required by law or our Terms. These are necessary for the operation of your Account and are not subject to opt-out, although you may receive them only where we have a lawful basis to contact you. Marketing communications include promotional emails, offers, surveys, and newsletters. You may opt in to or out of marketing communications at any time.
You can manage your communication preferences at any time through your Account settings or by using the unsubscribe link included in every marketing email we send. Processing of an opt-out request may take a short time to propagate through all of our systems, and you may continue to receive marketing messages that were already in transit at the time of your request. Please allow a reasonable period for the change to take effect.
Some browsers and browser extensions support "Do Not Track" (DNT) signals or similar mechanisms that communicate your preference not to be tracked across websites. Because industry standards for interpreting DNT signals are not yet uniform, our Platform does not currently respond to browser DNT signals. We do, however, honor the cookie management and opt-out mechanisms described in Section 6, and you may control most tracking through your browser settings. Where applicable law requires us to recognize such signals, we will do so.
The Platform includes features that allow certain Users to operate reseller panels, child panels, and public storefronts, including the ability to create subdomains, connect custom domains, publish catalogs, and accept payments for services. When these features are used, additional categories of data are generated, including the configuration of the panel, the catalog published, Orders placed through the panel, customer information associated with those Orders, and settlement or payout information.
When a User places an Order through a child panel or storefront, the Platform processes the information necessary to fulfill that Order, which may include the target URL or handle, the service selected, the quantity, the amount paid, and a contact identifier. The operator of the panel may have visibility into Orders placed through their panel for fulfillment, accounting, and support purposes. The personal information of the end customer is processed for the limited purpose of providing the service, and we require panel operators to comply with applicable law and our Terms when handling such information.
If you operate a reseller panel, child panel, or storefront, you are responsible for ensuring that your use of the feature complies with applicable privacy and data protection law, including providing appropriate privacy notices to your own customers and obtaining any consents that may be required. You must not use panel data for purposes unrelated to the operation of the panel, and you must not transfer such data to third parties except as necessary to provide the services offered through your panel or as permitted by law.
Where panels generate earnings, settlements, or payouts, we may process the information necessary to compute, pay, and report such amounts, including payout identifiers, bank account details where applicable, and tax-related information where required. This information is processed for contract performance, legal compliance, and legitimate business purposes and is retained in accordance with Section 12.
The Platform may use artificial intelligence and machine learning to assist with certain features, including automated extraction of payment reference numbers (such as UTR numbers) from uploaded receipts, fraud detection, content moderation, customer support assistance, and service recommendations. AI-assisted features are used to improve accuracy, speed, and efficiency, and the output of such features is subject to human review where it materially affects you.
When you use an AI-assisted feature, the data you provide for that feature (for example, an uploaded receipt) is processed for the sole purpose of delivering the feature. Uploaded receipts are stored only as necessary to complete and verify the transaction and are subject to the security measures described in Section 8. We do not use your personal data to train AI models that are shared with third parties unless we have obtained your consent or the data has been de-identified. Where AI is provided by third-party services, we require those services to process data in accordance with our instructions and applicable law.
AI-assisted output is probabilistic and may occasionally be inaccurate. Where AI output is used to pre-fill a value (such as an extracted UTR number), you retain the ability to review, correct, or override the output before submission. You should verify AI-generated output before relying on it.
The Platform is operated from India, and if you are located in India, the Digital Personal Data Protection Act, 2023 (DPDP Act) may apply to our processing of your personal data. Under the DPDP Act, you may have the right to obtain a summary of the personal data we process about you, to request correction of inaccurate data, to request completion of incomplete data, to request erasure of data where processing is no longer required for the specified purpose, to withdraw consent where consent is the basis of processing, and to nominate a person to exercise your rights in the event of your death or incapacity. We have appointed a Grievance Officer as described in Section 25, and you may address your concerns to that officer in the first instance. If you are not satisfied with our response, you may approach the Data Protection Board of India.
If you are located in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) or the UK GDPR may apply to our processing of your personal data. Where applicable, you may have the rights described in Section 9, including the right of access, rectification, erasure, restriction of processing, data portability, objection, and the right not to be subject to automated decision-making. You also have the right to lodge a complaint with your local supervisory authority. Where GDPR applies, we process your data on the legal bases described in Section 18, and any transfer of your data outside the EEA or the UK is made subject to appropriate safeguards, including standard contractual clauses.
If you are a resident of California, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), may apply to our processing of your personal information. We do not sell personal information, and we do not use or disclose sensitive personal information for purposes other than those permitted by the CCPA/CPRA. California residents may have the right to request disclosure of the categories and specific pieces of personal information we have collected about them, to request deletion, to correct inaccurate information, to opt out of the sale or sharing of personal information, and to limit the use of sensitive personal information. We will not discriminate against you for exercising these rights. Similar rights may be available under the privacy laws of other U.S. states.
Depending on your country of residence, additional data protection laws may apply, including the Personal Data Protection Law of the United Arab Emirates (PDPL), data protection laws of other Gulf Cooperation Council states, and the laws of other countries. Where such laws grant you rights that are broader than those described in this Privacy Policy, we will honor those rights to the extent they are applicable and we are able to do so. If you have questions about how a specific law applies to your data, please contact us at privacy@viannn.online.
In accordance with applicable law, including the DPDP Act, we have appointed a Grievance Officer responsible for addressing questions, concerns, and complaints relating to the processing of personal information on the Platform. The Grievance Officer may be contacted as follows:
If your concern is not resolved to your satisfaction, you may escalate it to the relevant supervisory or data protection authority in your jurisdiction. In India, you may approach the Data Protection Board of India. We ask that you give us an opportunity to resolve your concern before approaching an authority, as this usually results in a faster resolution for all parties.
We integrate privacy considerations into the design and development of the Platform. This includes applying data minimization principles (collecting only the data we need), building in access controls and audit trails, using encryption and pseudonymization where appropriate, and conducting privacy impact assessments before deploying features that involve significant new processing of personal information.
Where we offer choices about data collection and use, the most privacy-friendly default is applied unless you actively choose otherwise. We limit the collection, use, and retention of personal information to what is reasonably necessary to provide the Services, and we do not retain data longer than necessary for the purposes for which it was collected, as described in Section 12.
Our privacy program is subject to continuous review. We monitor developments in privacy law, industry standards, and security best practices, and we update our policies, procedures, and technical controls accordingly. We welcome feedback from Users and regulators that helps us improve our privacy practices.
The following terms are used throughout this Privacy Policy and are intended to have the meanings described below:
If you have any questions, concerns, or requests regarding this Privacy Policy, our data practices, or your personal information, please contact us through the following channels:
We will make reasonable efforts to respond to your inquiry within a reasonable timeframe. Response times may vary based on the nature and complexity of your request.