Verunify

VERUNIFY — PRIVACY POLICY

Effective Date: August 26, 2026 Last Updated: September 22, 2026

Aspirion Infotech Private Limited ("Verunify," "we," "us" or "our") operates the Verunify platform. Registered Office: Flat No. C/1/2103, Bharat EcoVistas, Thane, Maharashtra – 400612, India

1. Who we are

This Privacy Policy explains how Verunify collects, uses, stores, discloses and protects personal data when you use our website, application, Platform or services. Verunify is designed primarily for coaches, consultants, educators, creators, trainers and other professionals ("Members") who use the Platform to manage their businesses and interact with their own customers, students, leads and contacts.

2. Who this policy applies to

You may be:

  • a Verunify Member;
  • an employee or authorised user of a Member;
  • a customer or student of a Member;
  • a lead or contact captured by a Member;
  • a visitor to a Member's website or funnel;
  • a participant in a Member's webinar or event; or
  • a person whose information is processed through an integration connected by a Member.

3. Your relationship with Verunify

The legal role of Verunify and the relevant Member can differ depending on the particular processing activity. Where Verunify determines the purpose and means of processing personal data for its own purposes, Verunify may act as a Data Fiduciary under applicable Indian data-protection law. Where Verunify processes personal data solely on behalf of a Member according to the Member's instructions, Verunify may act as a Data Processor, with the Member generally responsible for determining the purposes of that processing. Accordingly, this Privacy Policy should not be interpreted as assigning one permanent legal role to Verunify or every Member for every processing activity.

4. Information we collect

We collect different information depending on whether you're a Member, a Member's contact/student, or a visitor. Members control many of the fields and information they collect from their own customers and contacts, and should avoid collecting sensitive or unnecessary information through Verunify forms or custom fields unless they have a legitimate and lawful reason to do so.

5. Member account data

When you create or use a Verunify account, we may collect:

  • name; email address; phone number; login and authentication information;
  • business name; business type; business niche; currency; timezone;
  • billing information; subscription information; account preferences;
  • support communications; information required for verification;
  • information relating to connected domains;
  • information relating to integrations you activate; and
  • other information you voluntarily provide.

Passwords are handled through our authentication infrastructure and are not intended to be stored by Verunify in readable form.

Business and verification information. Where required for a particular feature, we may collect business information such as business name, business address, website, GST information, business identifiers, professional or certification information, documents submitted for verification, and information necessary to establish eligibility for particular services. Where a Member submits a credential or certification document for verification, we use it for the stated verification purpose and apply access controls appropriate to the nature of the information.

Domain registration information. If you purchase or register a domain through Verunify, information required by the applicable registrar or registry may be collected and transmitted to the relevant domain provider, which may include registrant name, address, telephone number and email address. Domain-registration information may be subject to the privacy practices and disclosure requirements of the applicable registrar, registry and domain authority. Public availability of registration information depends on the domain extension, registrar policies and applicable privacy protections.

6. Member customer/student/contact data

A Member may use Verunify to collect and manage information about its customers, students, leads, subscribers and contacts. This information may include: name; email; telephone number; information submitted through forms; booking information; webinar registration information; course enrolment; course progress; messages; responses to surveys; tags and segmentation information; transaction-related information; preferences; information contained in custom fields; and other information the Member chooses to collect.

A Member is responsible for ensuring that it has an appropriate legal basis, notice and permissions for collecting and using such information. Where Verunify processes such information solely on behalf of the Member, Verunify does so as a service provider/Data Processor to the extent applicable — see Section 13 for how this works in practice.

7. Connected third-party accounts

You may choose to connect third-party services to Verunify, depending on the integration: email or SMTP services; WhatsApp or Meta services; SMS providers; Google services; calendars; Zoom; advertising accounts; AI services; payment gateways; domain services; and other supported integrations.

We process information from connected services only to the extent reasonably necessary to provide the feature you have requested, maintain the integration, provide support, maintain security or comply with law. Credentials and authentication tokens are protected using appropriate technical controls. You may disconnect integrations through the Platform where that functionality is available. Disconnecting an integration does not necessarily cause the third-party provider to delete information it already holds — you may need to contact that provider separately.

Google integrations (Calendar, YouTube) are subject to additional, Google-specific disclosures — see Section 8.

8. Google Account and Google API Data

8.1 Google OAuth connection

Verunify allows Members to optionally connect their Google Account to specific Verunify features using Google's OAuth authorization system. A Member may choose to connect Google services such as Google Calendar and YouTube.

The connection is initiated by the Member. Verunify does not obtain access to Google services unless the Member expressly authorizes the requested permissions through Google's authorization screen.

8.2 Google Calendar data

Where a Member enables Google Calendar integration, Verunify may access Google Calendar data permitted by the specific OAuth scopes authorized by the Member.

Depending on the permissions granted and the features enabled, this may include calendar information such as calendars, events, event titles, dates, times, descriptions, attendees, locations, availability and related calendar metadata.

Verunify uses Google Calendar data only to provide the Calendar functionality requested by the Member, such as displaying relevant calendar information, creating or updating calendar events, synchronizing events, managing bookings or appointments, or otherwise performing an action expressly initiated or configured by the Member.

Verunify does not use Google Calendar data for advertising, behavioral profiling, selling data, or any purpose unrelated to providing the requested integration.

8.3 YouTube data

Verunify's YouTube features use YouTube API Services.

Where a Member chooses to connect YouTube, Verunify asks only for permission to upload videos to the Member's own YouTube channel (the youtube.upload permission). Verunify uses that permission solely to upload a video the Member has chosen to add to one of their own course lessons, and to receive the link to the video that was uploaded. Videos are uploaded as "Unlisted", so they do not appear in YouTube search.

Verunify does not read the Member's YouTube channel information, existing videos, playlists, comments, subscribers or analytics, and does not change or delete any existing video.

For this feature Verunify stores only the Member's encrypted OAuth token, so that it can upload on the Member's behalf, and the link to the video the Member uploaded, which is kept as part of the lesson it belongs to. The token is deleted when the Member disconnects Google in Verunify.

Verunify does not use YouTube data for advertising, behavioral profiling, selling data, training artificial intelligence or machine learning models, or any purpose unrelated to providing the requested integration.

Use of YouTube features is also subject to the YouTube Terms of Service and the Google Privacy Policy.

8.4 Limited use of Google user data

Verunify's use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements.

Google user data obtained through an authorized Google API connection is used only to provide or improve the user-facing functionality that the Member has requested and authorized.

Verunify does not sell Google user data. Google user data is not used for serving advertisements or for advertising profiling.

Verunify does not transfer Google user data to third parties except where necessary to provide the requested functionality, comply with applicable law, protect security, or as otherwise permitted under the applicable Google API Services User Data Policy. Where a third-party service is required to perform a requested integration function, only the information reasonably necessary for that function is transferred.

Verunify does not use Google user data for purposes that are unrelated to the functionality disclosed to the Member when authorization is requested.

Verunify does not use Google user data obtained through Google APIs to develop, improve, or train generalised (non-personalised) artificial intelligence and/or machine learning models. Where a Member separately enables AI-assisted functionality (see Section 18), that functionality operates independently of Google API data and does not incorporate Google user data into any generalised or non-personalised AI/ML model training or improvement process. Google user data may only be used, consistent with the Google API Services User Data Policy's Limited Use requirements, to provide or improve the specific user-facing Verunify features the Member has requested.

8.5 Storage and protection

Where technically necessary to provide an integration, Verunify may store OAuth access tokens, refresh tokens or other authorization credentials securely. Such credentials are protected using appropriate technical and organisational safeguards and are used only to maintain the authorized connection and provide the requested functionality.

Verunify does not store a Google Account password.

Google API data received by Verunify is retained only for as long as reasonably necessary to provide the requested functionality, maintain the integration, comply with applicable legal obligations, resolve disputes, prevent fraud or abuse, maintain security, or otherwise as permitted by applicable law and the Google API Services User Data Policy.

8.6 Disconnecting Google services

A Member may disconnect a Google integration through the Verunify Platform where the relevant functionality is available.

In addition to disconnecting through Verunify, a Member may revoke Verunify's access to their Google Account at any time through the Google security settings page at https://security.google.com/settings/security/permissions.

After an integration is disconnected or authorization is revoked, Verunify will stop making new API requests using that authorization, subject to limited processing necessary to complete an operation already initiated, maintain security, comply with law, or satisfy legitimate retention requirements.

Revoking access from Google does not necessarily cause Google to delete information previously received by Verunify. Information already stored by Verunify will be handled in accordance with this Privacy Policy and applicable deletion and retention requirements.

8.7 Scope minimisation

Verunify requests only the Google API permissions reasonably necessary for the specific functionality selected by the Member. Where Google provides a more limited permission that is sufficient for a particular feature, Verunify will seek to use the more limited permission.

The actual Google permissions requested may vary depending on the Google feature being enabled and may be displayed to the Member during the Google authorization process.

8.8 Related policies

The YouTube Terms of Service are available at https://www.youtube.com/t/terms. The Google Privacy Policy is available at https://policies.google.com/privacy.

9. Technical and security information

Depending on how you interact with the Platform, we may temporarily process technical information such as IP address, browser type, device information, operating system, request metadata and security events.

IP addresses may be processed transiently for rate limiting, bot detection, abuse prevention and security purposes. Where an IP address is not required to be retained for a legitimate security, legal or operational purpose, Verunify does not intentionally retain it in its primary application database.

Infrastructure, error-monitoring and security systems may independently record limited technical information in logs where reasonably necessary to operate, secure and troubleshoot the Platform. Retention of such information depends on the applicable system and its operational requirements.

10. Cookies and local storage

Verunify may use cookies and similar technologies necessary to: maintain login sessions; protect accounts; remember settings; maintain security; support functionality; and understand limited technical behaviour necessary to operate the Platform.

Our core application does not use advertising cookies for our own advertising purposes. Member-published pages may contain third-party cookies or tracking technologies configured by the relevant Member (see Section 17).

You may control cookies through your browser settings, although disabling essential cookies may affect Platform functionality.

11. Payment information

When you purchase Verunify services or when a Member uses payment functionality, payment processing may be performed by third-party payment providers such as Razorpay or Cashfree (see Section 15 for how responsibility is allocated between Verunify and those providers).

Verunify does not ordinarily store full payment-card numbers, CVV information or other payment credentials that are intended to be handled directly by the payment provider. We may receive information such as: payment status; amount; currency; transaction identifier; order identifier; refund status; payment method category; and other information necessary to reconcile or operate the payment feature.

12. How we use personal data

Depending on the context, Verunify may use personal data to: create and administer accounts; authenticate users; provide the Platform; provide requested features; process subscriptions and payments; operate integrations; provide customer support; send service communications; prevent fraud and abuse; maintain security; troubleshoot errors; monitor system performance; comply with legal obligations; enforce agreements; resolve disputes; maintain records; improve reliability and functionality; provide requested marketing or advertising services; administer domains; process communications requested by Members; and perform other purposes disclosed at or before collection.

Notwithstanding the foregoing, any Google user data obtained through a Google API connection is used solely as described in Section 8 (Google Account and Google API Data) and its Limited Use disclosure, and is not used for marketing, advertising, or any purpose beyond providing or improving the specific functionality the Member has authorized.

We do not sell personal data.

Where applicable, personal data is processed in accordance with Indian data-protection law, including the Digital Personal Data Protection Act, 2023 and applicable rules and regulations. Depending on the processing activity and applicable law, Verunify may process personal data based on consent, certain lawful uses recognised under applicable data-protection law, contractual or service requirements, legal obligations, security and fraud-prevention requirements, or other lawful grounds available under applicable law. Where consent is required, we will seek consent in an appropriate manner and provide information about the purpose of processing.

13. Member instructions / processor relationship

A Member may use Verunify to collect, store, organise and process personal data relating to the Member's customers, students, leads and contacts.

In such circumstances, the Member determines the purposes for which the information is collected and the business activities for which it is used. Verunify processes the information to provide the Platform and according to the Member's configuration and instructions, subject to applicable law.

The Member is responsible for providing appropriate privacy notices, obtaining required consent or establishing another lawful basis for collection and use, responding to requests that concern processing controlled by the Member, and ensuring that information submitted to Verunify is lawful and appropriate.

Verunify may independently process limited information relating to Member contacts where necessary for security, fraud prevention, service operation, legal compliance, billing, support or other purposes for which Verunify itself determines the processing.

Member instructions to third parties. Where a Member connects a third-party service or instructs Verunify to transmit information to a third party, Verunify may process and transfer the information necessary to perform that instruction. The Member is responsible for ensuring that the requested transfer is lawful and appropriate. Examples include: sending a contact to an email platform; sending a message through WhatsApp; creating a Google Calendar event; creating a Zoom meeting; sending information to an advertising platform; sending information to an AI service; or processing a payment through a payment gateway. Once information is transferred to a third party, that party's own privacy policy may apply.

14. Third-party providers we share data with

We may disclose personal data to service providers and third parties where reasonably necessary to operate the Platform, including:

Authentication and infrastructure — Supabase or equivalent authentication/database infrastructure; Cloudflare and related infrastructure services; hosting and storage providers.

Communications — WhatsApp/Meta; SMS providers such as MSG91; email providers; other communication providers.

Productivity and integrations — Google; Zoom; calendar providers; domain registrars; advertising platforms; AI providers; other providers selected by a Member.

Security and operations — monitoring and error-reporting providers such as Sentry; fraud-prevention providers; security providers; professional advisers where reasonably necessary.

Third-party providers may process personal data under their own privacy policies and contractual arrangements. Where Verunify acts as a Data Processor for a Member, such providers may process the relevant information as subprocessors or service providers engaged to provide the Platform, subject to applicable law and contractual arrangements.

Verunify does not sell personal data for money or provide personal data to data brokers for their independent commercial use — this does not prevent disclosures necessary to provide requested services, operate integrations, process payments, provide advertising services requested by a Member, comply with law, prevent fraud, protect rights and security, or complete a corporate transaction.

15. Payment service providers — Razorpay/Cashfree

Verunify may use payment service providers including Razorpay and Cashfree. When you make or receive a payment through a payment service provider, that provider may independently collect and process personal data, payment information, device information and transaction information in accordance with its own terms, privacy policy and applicable law.

Verunify receives only the information reasonably necessary to operate the relevant payment functionality, reconcile transactions, provide transaction status, administer refunds where applicable, provide support, prevent fraud and comply with legal obligations.

Verunify does not ordinarily store full payment-card credentials such as complete card numbers or CVV information.

The applicable payment provider remains responsible for the processing it performs within its own systems.

16. International data transfers

Some service providers used by Verunify may process personal data outside India. Where personal data is transferred outside India, Verunify will do so subject to applicable law, contractual arrangements and applicable restrictions concerning cross-border transfers.

17. Advertising and tracking

Verunify's core application does not rely on advertising pixels for its ordinary dashboard operation. However, Members may publish websites, landing pages, funnels or other pages through Verunify, and may choose to configure third-party tracking technologies, including advertising pixels. If you visit a Member's page containing such technology, the relevant third party may collect information according to its own policies and the Member's configuration. Verunify does not control the independent processing performed by such third parties.

Verunify may also process information necessary to provide advertising-management services requested by Members. Where a Member connects an advertising account or instructs Verunify to transmit customer or audience information to an advertising platform, the Member is responsible for ensuring that the transfer and advertising activity comply with applicable law and platform policies. Verunify does not guarantee advertising performance.

18. AI processing

Certain Verunify features may use artificial intelligence or third-party AI services. Where AI processing is used, information may be transmitted to the relevant AI service to provide the requested feature. Members should not submit highly sensitive personal information to AI functionality unless they have a lawful basis and the feature is intended to process such information. AI-generated output may be inaccurate and should be reviewed before use.

19. Data retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, unless a longer period is required or permitted by law. The Digital Personal Data Protection Act, 2023 requires erasure when data is no longer necessary for the specified purpose or when required by law, subject to applicable legal retention — the periods below are Verunify's indicative retention framework applying that principle, not periods the Act itself mandates as fixed numbers.

Indicative statutory and operational retention periods:

  • General account and business records: up to 8 years, where required for corporate, accounting, contractual, dispute-resolution or other applicable legal purposes.
  • GST-related records: up to 6 years, or such longer period as applicable law may require.
  • Payment, KYC and financial-crime-related records: 5–10 years, where required under applicable payment, KYC, RBI, PMLA or other regulatory requirements.
  • Security, audit and technical logs: retained only for the period reasonably necessary for security, troubleshooting, fraud prevention and legal purposes.
  • Coach-uploaded course video and published page content: retained for up to 24 months following removal or deletion, after which it is permanently deleted, unless the content or associated information is subject to an active complaint, dispute, suspected fraud or misuse, legal claim, regulatory inquiry, law-enforcement request, or other legal or compliance matter, in which case it may be preserved for as long as reasonably necessary to investigate, respond to, resolve, or comply with obligations arising from that matter.
  • Other personal data: deleted, anonymised or otherwise rendered inaccessible when no longer required for the stated purpose, subject to backups and legal retention obligations.

We do not promise that every item of data is immediately and permanently erased when an account is deleted, because technical backups and legally required records may need to be retained for a limited period.

Where Verunify becomes aware of a complaint, dispute, suspected fraud or misuse, legal claim, regulatory inquiry, law-enforcement request, or other potential legal or compliance issue concerning a Member, account, transaction or content, Verunify may place relevant information under a legal or compliance hold and preserve it beyond its normal retention period for as long as reasonably necessary to investigate, respond to, resolve, or comply with obligations arising from that matter. Such information may be preserved using secure third-party storage providers where appropriate.

20. Account deletion

Members may request deletion or closure of their account through available account functionality or by contacting Verunify. Deletion may be subject to: outstanding legal obligations; payment disputes; fraud investigations; legal claims; statutory record-retention requirements; backup systems; or other lawful reasons for retention.

Where deletion is completed, information that is not required to be retained will be deleted, anonymised or otherwise rendered inaccessible according to our applicable retention procedures.

21. Deletion and access to Member services

If you request deletion of personal data associated with your relationship with a Member, deletion may require Verunify to remove or disable the account, enrolment, booking or other records that allow you to access that Member's paid courses, content, services or bookings.

Once the applicable personal data has been deleted, Verunify may no longer be able to provide access to those services because the information required to authenticate your entitlement or enrolment may no longer exist.

Deletion of personal data does not by itself create a right to a refund from Verunify. Any refund relating to a Member's course, programme, booking, subscription or other offering is governed by the agreement and refund policy between you and the Member, unless Verunify is expressly the seller of that particular transaction.

We will communicate this consequence where reasonably practicable before completing a deletion request that would materially affect access.

(See also Terms of Service, Section 27 — Deletion and Access to Services — the same consequence, stated contractually.)

22. Rights of Data Principals

Subject to applicable law, individuals may have rights concerning their personal data, including rights to: obtain information concerning processing; access personal data; correct or update inaccurate information; request erasure; withdraw consent where processing is based on consent; exercise grievance-redressal rights; and exercise other rights available under applicable law.

The DPDP framework provides mechanisms for exercising rights and requires Data Fiduciaries to publish the means by which individuals may make such requests.

23. Requests concerning Member-controlled data

If your personal data was collected by a Verunify Member, you should generally first contact that Member because the Member may determine why your information was collected and how it is used. However, if your request concerns processing performed directly by Verunify, you may contact us using the privacy contact details provided below. Where appropriate, we may forward or coordinate a request with the relevant Member.

We may require reasonable information to verify the identity and scope of a request. A request relating to one Member relationship does not automatically delete information associated with a different Member relationship — if you are a contact of more than one Member, each relationship is a separate record (see Section 21 for what a deletion request affects).

24. Security

We use reasonable technical and organisational measures designed to protect personal data, which may include: encryption of sensitive credentials; access controls; database-level access restrictions; authentication controls; secure transmission; monitoring; backups; logging; infrastructure security controls; and role-based access where appropriate.

No system is completely secure. Accordingly, we cannot guarantee that unauthorised access, loss or compromise will never occur.

25. Data breaches

If Verunify becomes aware of a personal-data breach requiring notification under applicable law, we will take appropriate steps required by applicable law, including assessment, containment, remediation and notification where required. Where Verunify acts as a processor for a Member, we may notify or assist the relevant Member as required under applicable law or contractual arrangements.

26. Children's data

Verunify's Member accounts are intended for persons aged 18 or above. Members must not knowingly use Verunify to unlawfully collect or process children's personal data. Where children's personal data is processed, the relevant Member remains responsible for complying with applicable requirements concerning children. Verunify may restrict or remove processing where it becomes aware of unlawful processing involving children.

27. Corporate transactions

If Verunify undergoes a merger, acquisition, restructuring, financing, sale of assets or similar transaction, information associated with the relevant business may be transferred as part of that transaction, subject to applicable law.

28. Legal and regulatory disclosures

We may disclose information where reasonably necessary to: comply with law; respond to lawful government requests; comply with court orders; prevent fraud; investigate security incidents; protect users; protect Verunify's rights; or enforce our agreements.

29. Grievance and privacy contact

For questions, complaints, privacy requests or data-protection matters, contact: Aspirion Infotech Private Limited, Flat No. C/1/2103, Bharat EcoVistas, Thane, Maharashtra – 400612, India Privacy / Data Protection Contact: contact@verunify.com Grievance Contact: contact@verunify.com

Where required by applicable law, Verunify will designate and publish the contact details of the relevant person or Data Protection Officer.

We will establish and maintain procedures for handling applicable personal-data requests and grievances. We may request sufficient information to authenticate the requester and determine the relevant account or Member relationship. Requests will be handled within the time period required by applicable law.

30. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The "Last Updated" date will identify the latest version. Where a material change requires notice under applicable law, we will provide appropriate notice through the Platform, email or another legally appropriate method.

31. Contact

Aspirion Infotech Private Limited, Flat No. C/1/2103, Bharat EcoVistas, Thane, Maharashtra – 400612, India Email: contact@verunify.com