Privacy Policy

01Who we are

This service is operated by VLR Nordic Private Limited ("VLR Nordic", "we", "us"), a company incorporated in India (CIN U62013AP2026PTC125976), with its registered office in Guntur, Andhra Pradesh, India. For the personal data described here, VLR Nordic acts as the data fiduciary (the entity that decides how and why your data is processed) under India's Digital Personal Data Protection Act, 2023 ("DPDP Act").

Postvik is our AI social-media manager. A client sends content and instructions through a Telegram chat; our system helps draft captions and prepare images, the client approves each post, and Postvik then publishes it to the social accounts the client has authorised.

Questions about this policy or your data go to info@vlrnordic.com.

02What this policy covers

This policy covers the personal data we handle when you use Postvik as a client, and data we collect through our website at vlrnordic.com. Where we act only as a processor on a client's behalf (for example, handling content that a client's own customers appear in), the client is the fiduciary for that data and their own privacy notice also applies.

03What we collect

To run the service, we collect and store:

• Photos and images you upload for use in your posts.
• Post text — captions, drafts, briefs, and the messages you send us.
• Your Telegram identity — your Telegram user ID and display name, used to recognise you and route your jobs.
• Job history — a record of the posts we've drafted, edited, and published for you.
• Learned brand & preference notes — the notes our system keeps about your voice, colours, industry, and preferences so future posts sound like you.
• Contact & account details you give us to set up and support your account (such as name, email, and the social accounts you connect).

We do not intentionally collect sensitive personal data (such as health, financial, or biometric data). Please don't send it to us through Postvik.

04How we use it

We use your data only to provide and improve the service you've hired us for:

• To draft captions and prepare images for your posts.
• To publish approved posts to the platforms you've authorised.
• To learn your brand voice and preferences so results improve over time.
• To operate, support, secure, and bill for the service.

We do not sell your personal data, and we do not use your photos, captions, or brand notes to train models we offer to other clients.

05Consent & legal basis

We process your data on the basis of your consent and to perform the service agreement between us. By using Postvik you consent to the processing described here. You can withdraw consent at any time by contacting us — after which we'll stop processing your data and, on request, delete it (see Your rights and our Data Deletion page). Withdrawing consent doesn't affect processing we already did lawfully, and it may mean we can no longer provide the service.

06Where your data is stored

Your data is stored on a server that VLR Nordic controls, hosted with Hetzner in Germany.

07Who we share it with

We share data only with the service providers ("processors") we need to run Postvik, and with the platforms you authorise us to publish to. We don't sell data or share it for anyone else's advertising.

Each of these providers processes data under its own privacy policy. Once a post is published to a platform you authorised, that platform's terms and privacy policy govern the published content.

08Your rights

Under the DPDP Act, as a data principal you have the right to:

• Access — get a summary of the personal data we hold about you and how we process it.
• Correction — have inaccurate or incomplete data corrected or updated.
• Erasure — have your personal data deleted when it's no longer needed or you withdraw consent.
• Withdraw consent — as easily as you gave it.
• Grievance redressal — raise a complaint with us and get a response.
• Nominate — nominate someone to exercise your rights if you die or become incapacitated.

To exercise any of these, email info@vlrnordic.com or message the Postvik bot. For deletion specifically, follow the steps on our Data Deletion page.

09How long we keep it

We keep your data for as long as you're an active Postvik client, and for up to 90 days after our engagement ends (so your account can be reactivated and any handover completed). After that we delete it. You can ask us to delete your data sooner at any time — we action deletion requests within 30 days (see Data Deletion).

We may retain a limited set of records for longer where the law requires it — for example, invoices and tax records kept to meet accounting and statutory obligations.

10How we protect it

We take reasonable technical and organisational measures to protect your data: access to the server is restricted and authenticated, data in transit is encrypted (HTTPS/TLS), and platform credentials and API keys are kept in access-controlled configuration, never in public code. No system is perfectly secure, but we work to limit who can reach your data and what a single failure could expose, and we'll notify you and the relevant authority of a personal-data breach as required by law.

11Children

Postvik is a business tool and is not directed at children. We don't knowingly process the personal data of anyone under 18 without verifiable parental or guardian consent. If you believe a child's data has reached us, contact info@vlrnordic.com and we'll delete it.

12Changes to this policy

We may update this policy as the service and the law evolve. When we do, we'll change the date at the top of the page and, for material changes, tell active clients directly. This version was last updated8 July 2026.

13Contact & grievances

For any privacy question, request, or complaint, contact us — we'll acknowledge and respond within a reasonable time.

• Email — info@vlrnordic.com
• Post — VLR Nordic Private Limited, Guntur, Andhra Pradesh, India (CIN U62013AP2026PTC125976)
• Bot — message the Postvik Telegram bot you use for the service