Privacy Policy

Effective date: 10 August 2026 · Last updated: 10 August 2026

This Privacy Policy explains how Vandsat Ventures Private Ltd ("Incubexa", "we", "us") collects, uses, shares, retains and deletes information when you use the Incubexa web application (app.incubexa.com) and the Incubexa mobile apps for Android and iOS (together, the "Service"). Incubexa is white-label software that incubators, accelerators and innovation centres ("Incubators") use to run their programmes; if you use Incubexa as part of an Incubator, that Incubator is a joint controller of your data for its programme.

1. Information we collect

Information you provide

• Account & identity: your name, email address and/or mobile phone number, and language preference. Incubexa signs you in with a one-time password (OTP) sent to your email or phone — we do not store a password.
• Membership & role: your role (founder, mentor, investor, intern, incubator staff, E-cell member) and which Incubator(s) you belong to.
• Programme content: for founders, your startup profile / dossier (company, team, traction and financial details you enter) and documents you upload; for others, the profile and content relevant to your role.
• Communications: messages, applications, bookings and feedback you submit through the Service.

Information collected automatically

• Device push token: if you enable notifications on mobile, a push token (via Apple/Google) so we can deliver notifications. You can revoke this any time in your device settings or by signing out.
• Technical & usage data: log data such as IP address, device/OS type, and in-app activity needed to operate and secure the Service.

2. How we use your information

• To provide and operate the Service and your Incubator's programme.
• To authenticate you (OTP) and keep your account secure.
• To send transactional and programme notifications (in-app, email, WhatsApp, and mobile push) — see §5.
• To generate the statutory and programme reports your Incubator needs (e.g. GFR 12-A, DST, DPIIT, AIM).
• To maintain audit trails required for compliance, and to prevent fraud and abuse.

3. How we share your information

We do not sell your personal data. We share it only:

• With your Incubator and authorised users of your Incubator, as needed to run the programme.
• With service providers that process data on our behalf under contract, including: our email provider (Brevo/Sendinblue) for OTP and notification emails; the WhatsApp Business (Meta) platform for OTP/notifications where used; the Expo push service together with Apple Push Notification service (APNs) and Google Firebase Cloud Messaging (FCM) for mobile push; and our cloud hosting and storage infrastructure.
• For legal reasons — to comply with law, enforce our terms, or protect rights and safety.

4. Where your data is stored

Incubexa is operated for the Indian market and your data is hosted on infrastructure located in India. Some sub-processors named above may process limited data (such as delivery of an email or push message) outside India.

5. Notifications & push

We send notifications about activity relevant to you (e.g. application updates, offers, certificates, new applications). You control channels where offered (for example, the WhatsApp toggle in your profile), and you can turn off mobile push in your device's notification settings. Disabling a channel does not remove notifications from your in-app inbox.

6. Data retention & account deletion

We keep your information for as long as your account is active and as needed to provide the Service and meet legal, audit and statutory-reporting obligations.

Deleting your account

You can delete your account yourself at any time: in the app, go to Profile → Delete account (or web equivalent), or email us at the address below and we will action it. When you delete your account:

• your memberships are deactivated and you can no longer sign in;
• your login identifiers (email/phone) are removed from your record so they are no longer associated with you and become available for re-registration;
• your name is removed from your account record.

Because Incubators are subject to statutory reporting and audit requirements (e.g. DST/DPIIT/AIM), certain programme records your Incubator is legally required to retain may be kept in de-identified or archived form after deletion, in line with those obligations. Super-administrator platform accounts cannot be deleted in-app for safety reasons — contact us instead.

7. Security

We use industry-standard measures including encrypted transport (HTTPS), OTP-based sign-in with short-lived sessions, access controls scoped to your Incubator, and encrypted secure storage of session credentials on your device. No method of transmission or storage is 100% secure.

8. Children

The Service is intended for use by adults in a professional/educational incubation context and is not directed to children under the age required by local law. We do not knowingly collect data from them.

9. Your rights

Subject to applicable law (including India's DPDP Act 2023), you may request access to, correction of, or deletion of your personal data, and may withdraw consent. To exercise these rights, use the in-app controls or contact us below. If you use Incubexa through an Incubator, you may also contact that Incubator, which is a controller of your programme data.

10. Changes to this policy

We may update this policy from time to time. Material changes will be posted here with a new "Last updated" date.

11. Contact us

Vandsat Ventures Private Ltd (Incubexa)
Grievance/Privacy contact: support@incubexa.com
Registered office: A-67, Lower Ground Floor, Jamna Lal Bajaj Marg, near Sector 15 Metro Station, Sector 2, Noida, Gautam Buddha Nagar, Uttar Pradesh 201301, India