Privacy Policy

inMeet is an enterprise video meeting and collaboration platform operated by InstaVC (“InstaVC,” “we,” “our,” or “us”). This Privacy Policy explains how personal data is collected, used, processed, stored, disclosed, transferred, and protected when individuals visit the inMeet website (https://www.inmeet.ai) access or use the inMeet platform (whether deployed as cloud-hosted software or customer-managed on-premise software), use integrations or APIs, or otherwise interact with inMeet (collectively, the “Services”).

By accessing, browsing, installing, or using the inMeet website or Services in any manner, you acknowledge that you have read, understood, and agreed to this Privacy Policy and provide your free, specific, informed, unconditional, and unambiguous consent to the processing of your personal data as described herein, to the extent required under applicable law.

By using our services, you consent to the terms of this Policy. This Privacy Statement also describes the personal data that we collect and/or process (which may include collecting, organizing, structuring, storing, using, or disclosing) to provide products and services offered directly by inMeet including InstaVC's all other websites, its meetings, webinars, and messaging platform, related collaborative features, and InstaVC App Marketplace (“InstaVC products and services” or “products and services”).

Please read this Privacy Notice carefully. By visiting our website or using any of our services, you indicate your acceptance of our use of your personal data as set out in this Privacy Notice.

Scope, Applicability, and Roles

This Privacy Policy applies to website visitors, trial users, enterprise customers, administrators, hosts, meeting participants, partners, developers, and any other individuals whose personal data is processed in connection with the Services.

Depending on the deployment model and contractual arrangement:

• Enterprise customers act as data controllers or data fiduciaries, and
• InstaVC acts as a data processor, service provider, or technical platform provider,processing personal data strictly on documented customer instructions.

For on-premise deployments, customers retain full control over infrastructure, storage, access, and compliance. InstaVC’s access, if any, is limited to installation, maintenance, troubleshooting, or support as contractually agreed.

Categories of Personal Data We Process

We process personal data only to the extent necessary to provide, operate, secure, and improve the Services, comply with legal obligations, and pursue legitimate business interests.

Personal data provided directly may include name, business email address, phone number, company name, job title, account credentials, profile details, meeting host information, support requests, communications with sales or support teams, and any other information voluntarily submitted.

When the inMeet platform is used, we may process meeting-related data, including meeting identifiers, timestamps, duration, participant metadata, chat messages, and shared content solely to deliver the requested meeting functionality. Audio, video, screen shares, and meeting content are not monitored, analyzed for advertising, or sold by InstaVC.

We automatically collect limited technical and usage data such as IP address, device identifiers, browser type, operating system, approximate location derived from IP address, session logs, diagnostics, error reports, and performance metrics. This data is used for security, troubleshooting, analytics, and service improvement.

Cloud vs On-Premise Data Responsibility

Cloud-Hosted inMeet

For cloud deployments, InstaVC hosts and processes data on behalf of customers using industry- standard security and operational safeguards. InstaVC is responsible for platform infrastructure security and availability (subject to contractual terms and disclaimers). Customers remain responsible for user access management, meeting governance, participant consent, and lawful use of data.

On-Premise inMeet

For on-premise deployments, customers exclusively control data storage, access, backups, security configuration, and regulatory compliance. InstaVC does not host or retain customer data in on-premise environments except where limited access is expressly granted for support or maintenance. InstaVC is not liable for data loss, security incidents, misconfigurations, or compliance failures arising from customer-managed infrastructure.

Lawful Basis and Purpose Limitation

Personal data is processed only for clear, specific, and lawful purposes. Depending on context, processing is based on consent, contractual necessity, compliance with legal obligations, or InstaVC’s legitimate business interests, as permitted under the India Digital Personal Data Protection Act, 2023 (DPDP Act), GDPR, and other applicable laws.

• As necessary for our contract: When we enter into a contract directly with you, we process your personal data on the basis of our contract in order to prepare and enter into the contract, as well as to perform and manage our contract (i.e., providing InstaVC products and services, features and services to account owners, their users, and those they invite to join meetings and webinars hosted on their accounts, and manage our relationship and contract, including billing, compliance with contractual obligations, and related administration).
• Consistent with specific revocable consents: We rely on your prior consent in order to utilize cookies to engage advertising and analytics partners to deliver tailored advertising and analysis of our website usage. You have the right to withdraw your consent at any time by visiting our cookie management tool, available in Cookies Settings;
• As necessary to comply with our legal obligations: We process your personal data to comply with the legal obligations to which we are subject for the purposes of compliance with EEA laws, regulations, codes of practice, guidelines, or rules applicable to us, and for responses to requests from, and other communications with, competent EEA public, governmental, judicial, or other regulatory authorities.
• To protect your vital interests or those of others: We process certain personal data in order to protect vital interests for the purpose of detecting and preventing illicit activities that impact vital interests and public safety, including child sexual abuse material;
• As necessary for our (or others’) legitimate interests, unless those interests are overridden by your interests or fundamental rights and freedoms, which require protection of personal data.

Personal data is not processed in a manner incompatible with the original purpose unless required or permitted by law.

What Personal Data Do We Receive?

• Email address
• Profile information (name, profile picture)
• Calendar data

How We Use Personal Data

We use personal data to provide and operate the inMeet platform, authenticate users, host and manage meetings, enable collaboration features, provide customer support, perform diagnostics and maintenance, monitor system security and performance, improve product functionality, manage accounts and billing, communicate service updates, conduct lawful marketing activities, and comply with legal and regulatory obligations.

• To send you important updates, notifications, and support communications.
• To authenticate your identity and ensure secure access to our services.
• To personalize your experience and display relevant information within the app.
• To allow you to manage your events, schedule meetings, and set reminders.

InstaVC does not sell personal data and does not use meeting content for advertising, profiling, or behavioral tracking.

Healthcare & Sensitive-Use Disclaimer (HIPAA-Aligned Positioning)

inMeet may be used by customers in healthcare or regulated environments. InstaVC acts strictly as a technology platform provider and does not provide medical services, diagnosis, treatment, or clinical decision-making.

Any health-related or sensitive data processed through inMeet is processed solely on customer instruction. Customers are responsible for obtaining required consents and ensuring compliance with applicable healthcare laws. InstaVC does not represent itself as a covered entity or business associate under HIPAA unless expressly agreed in writing through a separate agreement.

Visitor Consent and Marketing Communications

By visiting the inMeet website, submitting contact information, requesting demos or trials, or otherwise interacting with inMeet, you expressly consent to InstaVC collecting and using your contact information for business communications, marketing, advertising, promotional outreach, and sales- related activities, to the extent permitted by law.

You may opt out of non-essential marketing communications at any time. Transactional, security, and legally required communications may continue.

Cookie Policy (Integrated)

The inMeet website uses cookies and similar technologies to ensure functionality, security, analytics, preference storage, and marketing measurement. Essential cookies are required for operation. Analytics cookies help improve performance. Marketing cookies measure campaign effectiveness but do not involve selling personal data.

Where required by law, cookie consent controls are provided. Disabling cookies may affect website functionality.

Data Collection and Use

We meticulously choose our scopes to balance functionality with user privacy and security.

Here’s why we request each scope:

• https://www.googleapis.com/auth/userinfo.email: We require this scope to securely identify user accounts and facilitate communication between users.
• https://www.googleapis.com/auth/userinfo.profile: This scope is crucial for personalizing user experiences within our application, fostering user engagement and satisfaction.
• https://www.googleapis.com/auth/calendar: Access to calendar data is vital to provide scheduling, event management, and reminder features within the app.
• https://www.googleapis.com/auth/openid OpenID ensures robust identity authentication, guaranteeing secure access to our services.
• https://www.googleapis.com/auth/youtube.force-ssl: This scope is required to enable users to create, edit, delete and manage YouTube livestreams directly from our app. It allows scheduling streams, setting titles, descriptions, and privacy settings without manually entering RTMP details, streamlining the live meeting experience.
• https://www.googleapis.com/auth/calendar.addons.execute: This scope is essential for executing our addon functions within Google Calendar. It enables the core functionality of creating and managing video conferences directly from calendar events.
• https://www.googleapis.com/auth/calendar.addons.current.event.read: We require this scope to read the current calendar event details (title, time, attendees) when users create video conferences. This ensures we can properly configure meeting settings based on the event information.
• https://www.googleapis.com/auth/calendar.addons.current.event.write: This scope is necessary to update calendar events with video conference data, including meeting URLs and conference details. It allows seamless integration between calendar events and video conferences.
• https://www.googleapis.com/auth/calendar: Full calendar access is required to read and manage calendar events across the user's calendar. This enables comprehensive event management and ensures our addon works with all calendar data.
• https://www.googleapis.com/auth/calendar.events: This scope provides specific access to calendar events, allowing us to create, read, update, and delete events with video conference data. It's essential for managing meeting schedules and conference details.
• https://www.googleapis.com/auth/script.external_request: We require this scope to make secure API calls to our backend services for license validation, meeting creation, and user authentication. This enables seamless integration with our video conferencing platform.
• https://www.googleapis.com/auth/userinfo.email: This scope is essential for identifying users and associating calendar events with the correct user accounts. It enables personalized meeting experiences and proper user authentication.

For more details on OAuth Scopes, please refer to: OAuth 2.0 Scopes Page and OAuth API Verification FAQs.

Sharing and Disclosure of Personal Data

Personal data is shared only where necessary to provide the Services or comply with legal obligations. This may include sharing with cloud infrastructure providers, security and monitoring vendors, analytics providers, customer support platforms, payment processors, and professional advisors, all subject to confidentiality and data protection obligations.

Data may be shared within the InstaVC / PeopleLink group strictly for legitimate internal purposes such as compliance, security, audits, and operational support.

We may disclose data if required by law, regulation, court order, or governmental request, or to protect rights, public safety, prevent fraud, or enforce agreements.

We do not share your personal data with third parties, except in the following circumstances:

• With your consent: We may share information with third parties if you give us explicit permission to do so.
• For legal reasons: We may disclose information if required by law or to protect our rights and safety.

Limited Use Requirements

inMeet use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements. For more details, visit Google API Services User Data Policy.

We ensure that the use of your data is limited to the purpose of providing our services and is not shared for any other use.

What Personal Data Do We Receive?

Personal data is any information from or about an identified or identifiable person, including information that InstaVC can associate with an individual person. We may collect, or process on behalf of our customers, the following categories of personal data when you use or interact with InstaVC products and services:

Information You Provide

• Personal information: We may collect your name, email address, phone number, and other information that you provide to us in order to use our Services or communicate with us.
• Registration Information: Information provided when registering for a InstaVC meeting, webinar, InstaVC Room, or recording, which may include name and contact information, responses to registration questions, and other registration information requested by the host.
• Account Information: Information associated with an account that licenses InstaVC products and services, which may include administrator name, contact information, account ID, billing and transaction information, and account plan information.
• Contact Information: Contact information added by accounts and/or their users to create contact lists on InstaVC products and services, which may include contact information a user integrates from a third-party app, or provided by users to process referral invitations.
• Profile and Participant Information: Information associated with the InstaVC profile of a user who uses InstaVC products and services under a licensed account or that is provided by an unlicensed participant joining a meeting, which may include name, display name, picture, email address, phone number, job information, stated locale, user ID, or other information provided by the user and/or their account owner.
• Settings: Information associated with the preferences and settings on a InstaVC account or user profile, which may include audio and video settings, recording file location, screen sharing settings, and other settings and configuration information.

Limited Information from InstaVC Email and Calendar Services

InstaVC Email refers to InstaVC’s native email service and emails sent from InstaVC’s native email service. InstaVC Email is designed to be end-to-end encrypted by its service provider by default for emails sent and received directly between active InstaVC Email users. Support for end-to-end encryption requires InstaVC Email users to have added a device to their InstaVC Email account with the associated email address and to use a supported client.

When an email is end-to-end encrypted, only the users, and, depending on their settings, account owners, or designated account administrators control the encryption key and therefore access to the email content, including body text, subject line, attachments and custom labels applied to messages by users in their inboxes.

In all cases, InstaVC may have access to email metadata used for basic email delivery—specifically, email addresses in the form ID, and the number and size of attachments. From use of InstaVC’s native calendar service, InstaVC receives information regarding meeting invitations, body text, sender and recipients, and other calendar information.

Communications with InstaVC

Information about your communications with InstaVC, including relating to support questions, your account, and other inquiries.

Information Collected Automatically

• Device information: We may collect information about the device you use to access our Services, such as the operating system and browser type.
• Usage information: We may collect information about how you use our Services, such as the features you access and the pages you visit.
• Content and Context from Meetings, Webinars, Messaging, and Other Collaborative Features: Content generated in meetings, webinars, or messages that are hosted on InstaVC products and services, which may include audio, video, in-meeting messages, in-meeting and out-of-meeting whiteboards, chat messaging content, transcriptions, transcript edits and recommendations, written feedback, responses to polls and Q&A, and files, as well as related context, such as invitation details, meeting or chat name, or meeting agenda.
• Usage Information Regarding Meetings, Webinars, Messaging, Collaborative Features and the Website: Information about how people and their devices interact with InstaVC products and services, such as: when participants join and leave a meeting; whether participants sent messages and who they message with; performance data; mouse movements, clicks, keystrokes or actions (such as mute/unmute or video on/off), edits to transcript text, where authorized by the account owner and other inputs that help InstaVC to understand feature usage, improve product design, and suggest features.
• Information from other sources: Users can access email and calendars from third-party services through their InstaVC client, if they choose to integrate them.

Who Can See, Share, and Process My Personal Data When I Join Meetings and Use Other InstaVC Products and Services?

When you send messages or join meetings and webinars on inMeet, other people and organizations, including third parties outside the meeting, webinar, or message, may be able to see content and information that you share:

Account Owner

An account owner is the organization or individual that signs up for a inMeet account. Typically, an account owner designates one or more people (called an “administrator”) to manage their account and can grant privileges to users on the account. Depending on their license with inMeet, the account owner can authorize additional users on their account, and the account owner can create and/or access the profile information for all users on their account. The account owner and their users can invite others (including guests not on their account and unlicensed participants) to meetings or webinars hosted on their account.

inMeet gives account owners controls and features that they can use to determine whether certain types of content, such as recordings or inMeet Team Chat messages, can be created or sent, and what third-party apps can be used, for meetings and webinars hosted on their account. Depending on their settings, account owners and the users they designate can access personal data for participants who join meetings and webinars on their account or send messages to users on their account. Specifically, account owners may have access to:

• Account Usage: Information about how users and their devices interact with their account, which may include who sent messages to their users in chat, email addresses, IP addresses, device information, and other information about who joined meetings or webinars on their account.
• Participant List: Information about the participants in a inMeet meeting, webinar, or chat, which may include name, display name, email address, phone number, and participant or user ID.
• Registration Information: Information provided during registration for a webinar, meeting, inMeet Room, or recording hosted by the account.
• inMeet Team Chat and Out-of-Meeting Collaborations: If enabled on their account, account owners and those they authorize can see information about who sent and received InstaVC Team Chat messages.
• In-Meeting/Webinar Messages: Depending on their settings, account owners can see sender and receiver information, along with the content of messages sent to and from users on their account.
• Recordings: Account owners can watch the content of recordings of meetings and webinars hosted on their account.
• Polling, Q&A, and Feedback: Account owners can see information about who provided responses to their polls, Q&A, or post-meeting or webinar feedback requests, including name and contact information, together with the responses or feedback.
• inMeet Email and inMeet Calendar Content: Depending on their settings, account owners and designated account administrators can access email and calendar content sent to and from users on their inMeet Email or inMeet Calendar accounts, even if those inMeet Emails are encrypted.

Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods depend on deployment model, customer instructions, and legal requirements. Data is securely deleted, anonymized, or aggregated when no longer required.

User Rights (DPDP & Global)

Depending on jurisdiction, including under the DPDP Act, individuals may have rights to access, correct, delete personal data, withdraw consent, or seek grievance redressal. Requests may be subject to identity verification and lawful limitations.

California & Other U.S. State Privacy Rights

California residents and residents of other U.S. states may have additional privacy rights. Please see our California Privacy Notice for further details.

International Data Transfers

inMeet is used globally. Personal data may be processed or stored outside your country of residence. Appropriate safeguards are implemented in accordance with applicable data protection laws.

Therefore, by using InstaVC products and services or providing personal data for any of the purposes stated above, you acknowledge that your personal data may be transferred to or stored in the United States, India, as well as in any other countries outside the EEA, Switzerland, and the UK. Such countries may have data protection rules that are different and less protective than those of your country.

We protect your personal data in accordance with this Privacy Statement wherever it is processed and take appropriate contractual or other steps to protect it under applicable laws. Where personal data of users in the EEA, Switzerland, or the UK is being transferred to a recipient located in a country outside the EEA, Switzerland, or the UK which has not been recognized as having an adequate level of data protection, we ensure that the transfer is governed by the European Commission’s standard contractual clauses. Please contact us if you would like further information in that respect.

Security Practices and Compliance Alignment

InstaVC maintains a comprehensive information security program aligned with SOC 2 Trust Services Criteria and ISO/IEC 27001 principles, including encryption, access controls, monitoring, incident response procedures, employee training, vendor risk management, and periodic security assessments. No system can be guaranteed to be completely secure.

Children’s Privacy

inMeet is intended for enterprise and professional use and is not directed at children under sixteen (16) years of age. InstaVC does not knowingly collect personal data from children.

What Personal Data Does InstaVC Collect From Students?

Personal data is any information from or about an identified or identifiable person, including information that InstaVC can associate with an individual person.

We may collect, or process on behalf of schools or other organizations providing educational services, the following categories of personal data when a student uses or interacts with InstaVC Products to receive educational services, such as when they join their classroom or meet with their teacher on InstaVC:

• Profile and Participant Information: Name, profile picture, contact information, and any other information a school or educational organization allows students to add to their profile or to add when registering for meetings, recordings or webinars hosted on the school or organization’s account.
• Contacts and Calendar Information: Contact lists the school or educational service adds or allows students to use on their account (such as names and email addresses for other students in the school), as well as calendar information added to the account (such as a class schedule or upcoming school events).
• Settings: Preferences and settings students set when using an educational account, such as microphone, audio and video settings, and screen sharing settings.
• Device Information: Information about the computers, phones, and other devices students use when joining meetings or webinars or sending messages using InstaVC Products, including device features (like microphone or camera versions and IDs), IP address (which may be used to infer general location at a city or country level) and WiFi information.
• Meeting, Webinar, and Messaging Content: If the school or educational organization chooses to record meetings or webinars to InstaVC Cloud, InstaVC will store these recordings on behalf of the school or organization. The recordings may contain a student’s voice and image, messages, Q&A, or other content (such as a presentation or whiteboard) shared by a student during a meeting or webinar. InstaVC employees do not access this content unless the school or educational service directs us to do so, or as required for legal, security, or safety reasons.
• Product Usage: Information about how students and their devices interact with InstaVC Products, such as when they join and leave a meeting, whether they send messages and with whom they message, mouse movements, clicks, keystrokes, or actions (such as mute/unmute or video on/off), and other inputs that help InstaVC understand feature usage, improve product design, and suggest features.

How Do We Use Student Personal Data?

InstaVC uses personal data collected from students to conduct the following activities:

• Provide Educational Products and Services: To provide products, features, and services for schools and other organizations to use when providing educational services to children, including customizing the product and safety features and settings for a school environment. This may also include using personal data for customer support, which may include accessing audio, video, files, and messages, at the direction of the school or organization.
• Product Research and Development: To develop, test, and improve InstaVC Products that are used in educational settings.
• Authentication, Integrity, Security, and Safety: To authenticate accounts and activity, detect, investigate, and prevent malicious conduct or unsafe experiences, address security threats, protect school and public safety, and secure InstaVC Products.
• Legal Reasons: To comply with applicable law or respond to valid legal process, including from law enforcement or government agencies, to investigate or participate in civil discovery, litigation, or other adversarial legal proceedings, and to enforce or investigate potential violations of our Terms of Service or policies.
• InstaVC may use advanced tools to automatically scan content such as virtual backgrounds, profile images, and files uploaded or exchanged through chat, for the purpose of detecting and preventing violations of our terms or policies and illegal or other harmful activity, and its employees may investigate such content where required for legal, safety, or security reasons.

How Do We Share Student Personal Data?

InstaVC does not disclose student’s data to third parties, except for:

• Service Providers: We share data with service providers who help us provide InstaVC Products and technical infrastructure.
• Legal, Security, or Safety Reasons: We may disclose data when required for legal, security, or safety reasons.
• InstaVC Affiliates: We may share data with other InstaVC affiliates (such as InstaVC Unified Communications Pvt Ltd.) to enable additional products and features for use by schools and educational organizations.

What Student Information Do Schools See And Share On InstaVC Products?

Depending on their policies, settings, and how they use InstaVC Products to provide educational services, the school or organization providing educational services may be able to see or share the following personal data from students who join meetings or webinars on their account. The school or other organization’s use and disclosure of student information is subject to their own policies, not InstaVC’s. InstaVC does not enable children to make personal information publicly available through the use of InstaVC Products.

• Student Usage and Content: Depending on their settings, the school or other organization providing educational services – and the people they designate – can access:
  • Information about how students and their devices interact with the school or educational organization’s account.
  • Information about the participants who joined classrooms or meetings on their account (including participant name, display name, email address, and participant ID).
  • The content of recordings hosted on their account, as well as a transcript of audio (if enabled).
  • Information provided in response to polls, Q&A, or other content shared during classrooms, webinars, and meetings on their account.
• Teachers, Hosts, and Participants: Teachers, hosts, and other participants in a classroom or meeting may be able to see students’ email, display name, profile picture, and content shared during a meeting or webinar. Depending on settings, they may also be able to record or save:
  • Classroom or meeting content.
  • Audio transcripts, messages sent to everyone or directly to them.
  • Files, whiteboards, or other information shared during a classroom or educational meeting.
• Third-Party Apps: Schools or educational organizations may choose to install third-party apps to add features or educational services. These apps may access personal information about students and other users on their account.
  • InstaVC does not pre-install apps on educational accounts.
  • Third-party apps will not access personal information unless the school or organization approves a specific app.
  • Personal information shared by schools and organizations with third-party apps is governed by the school’s policies and the app developers’ terms and privacy policies, not InstaVC’s.
• Parental Consent for Third-Party Apps (U.S. Only): In the United States, before installing third-party apps for children under 13:
  • Schools or educational organizations must obtain parent or guardian consent to the third-party app’s data practices.
  • By installing the app, the school or educational organization agrees to obtain consent and discloses students' personal information to the app.

How To Review And Delete Student Information

A school or other educational organization may review and delete a student’s information, if in compliance with any applicable law, from their administrator dashboard. If you are a parent or student, please contact your school or other educational organization to access any personal information, limit a student’s access to InstaVC Products features or services, or delete personal information or the student’s entire profile. A school or other educational organization may also take steps to prevent a student from receiving educational services through the use of InstaVC Products on its account in the future, such as by deleting the student’s profile from the school or other educational organization’s account and limiting the student’s access to use of InstaVC.

Limitation of Responsibility

To the maximum extent permitted by law, InstaVC disclaims responsibility for personal data controlled by customers, data stored in customer-managed environments, inaccurate or unlawful data provided by users, misuse of the Services, or regulatory obligations specific to customer industries. Nothing in this Privacy Policy expands InstaVC’s liability beyond applicable contracts.

Governing Law and Jurisdiction

This Privacy Policy shall be governed by the laws of India.Courts located in Hyderabad, Telangana, India, shall have exclusive jurisdiction, unless otherwise required by law.

ANNEXURE:

Jurisdiction-Specific Provision

California Privacy Rights Act

This CPRA Privacy Policy describes InstaVC's practices regarding the collection, use, and disclosure of the personal information of California residents, describes the rights of California residents under the California Consumer Privacy Act (“CPRA”), and explains how California residents may contact InstaVC to exercise those rights.

This CPRA Privacy Policy .

No Sale of Personal Data:

InstaVC has not sold Personal Data in the preceding twelve (12) months.

Right To Opt-Out Of The Sale Of Personal Data:

InstaVC does not sell your personal data.

If in case, InstaVC ever changes its policy and chooses to sell Personal Data, you would have the right to opt-out of the sale of your Personal Data by clicking on the Do Not Sell or Share My Personal Information.

Sensitive Data:

We do not generally seek to collect sensitive data through this site or otherwise. In the limited cases where we do seek to collect such data, we will do this in accordance with California Privacy Rights Act (“CPRA”) requirements. If in case, InstaVC ever chooses to use Sensitive Personal Data, you would have the right to limit the use of your sensitive personal data by clicking on the Limit the Use of My Sensitive Personal Information.

The term “sensitive data” refers to the various categories of personal data identified by CPRA as requiring special treatment, including in some circumstances the need to obtain explicit consent from you. These categories include racial or ethnic origin, political opinions, religious, philosophical, or other similar beliefs, membership of a trade union, physical or mental health, biometric or genetic data, sexual life or orientation, or criminal convictions and offences (including information about suspected criminal activities).

Security:

We take reasonable measures to protect the information that we collect from you. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be posted with a revised “Last Updated” date. Continued use of the website or Services constitutes acceptance of the updated policy.

Contact & Grievance Redressal

Email: privacy@instavc.com

Email Communications

We may use your contact information to send you newsletters, product updates, promotional offers, and service-related communications. All marketing emails we send will:

• Be sent only to individuals who have opted in or otherwise provided consent.
• Include a visible unsubscribe link so you can opt out at any time.
• Include a visible link to this Privacy Policy in the email footer.

Transactional or service-related communications (such as account notifications, security alerts, or billing notices) may still be sent even if you opt out of marketing emails.