Privacy Policy

Last Updated: September 14, 2026

ExecutionZ™ ("ExecutionZ", "we", "us", or "our") is an intelligence and execution advisory platform founded by Sivakumar Anirudhan and operated by VS Online Services Private Limited ("VSOS", "Company"), a company based in Chennai, Tamil Nadu, India. Under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and its Rules, VSOS acts as the Data Fiduciary in respect of the personal data described in this Policy.

This Privacy Policy explains how we collect, use, store, disclose, and protect information provided through our website, our diagnostic platform, our advisory services, and related business activities.

By using our website, platform, or services, you acknowledge that you have been provided with this Privacy Policy and that your Personal Data will be processed in accordance with this Policy and applicable law. Where processing is based on consent, we will obtain such consent in the manner required by applicable law. If you do not agree to the applicable terms or do not provide consent where consent is required, certain features or services may not be available to you.

1. Scope of This Policy

This Policy applies to:

Visitors to our marketing website
Users who create an account on, or otherwise use, our diagnostic platform
Clients engaged through advisory, consulting, coaching, or diagnostic engagements
Anyone who submits business, financial, or personal information to us through forms, uploads, email, or scheduling tools

2. Notice and Itemized Purposes of Collection

In accordance with the DPDP Act, this section sets out, in itemized form, the categories of personal data we collect and the specific purpose for which each category is collected. Section 3 below lists the categories in detail; the table shows how each maps to a purpose.

Category of Data	Primary Purpose
Name, email, phone, company name	Account creation, communication, and service delivery
Business/financial data and documents you upload	Generating your diagnosis, assessment output, or advisory deliverable
Payment details (processed by our payment gateway)	Processing payment for purchased Services
Device, browser, and usage data	Platform security, performance, and improvement
Cookies and similar technologies	Session management, preferences, and analytics (see Section 12)

Where we intend to use your personal data for a purpose beyond those listed above, we will provide you fresh notice and, where required by law, obtain your consent before doing so.

3. Information We Collect

3.1 Information You Provide Directly

Name, email address, and phone number
Company name, designation, and industry
Account credentials and profile information (when you register on our platform)
Business information submitted through diagnostic questions, structured assessments, or advisory intake forms
Financial and operational documents you choose to upload (for example, profit and loss statements, balance sheets, and related business records) for the purpose of generating a diagnosis or assessment output
Payment-related information processed through authorized third-party payment providers
Communications with us, including support requests, emails, and meeting/scheduling details
Feedback, testimonials, or survey responses you choose to provide

You should not provide information that is not reasonably necessary for the relevant service or purpose. Where you submit information relating to another individual, you represent that you are authorised to provide such information and that the disclosure is lawful.

3.2 Information Collected Automatically

Device information (browser type, operating system, device identifiers)
IP address and approximate location
Pages visited, features used, session duration, and referral source
Cookies and similar tracking technologies (see Section 12)

3.3 Information From Third Parties

If you sign in using a third-party authentication provider (for example, Google), we receive basic profile information (such as your name and email address) as permitted by that provider and your settings
Confirmation and transaction details from payment processors once a payment is completed

We may also receive information provided by authorised representatives, business partners, or service providers where such disclosure is lawful.

4. Consent Framework

We process your personal data on the basis of your consent, except in the limited circumstances the DPDP Act permits us to rely on "deemed consent" — for example, where you have voluntarily provided your data to us for a specified purpose and have not indicated you do not consent (such as submitting an enquiry form), or where processing is necessary to comply with a legal obligation, respond to a medical emergency, or is otherwise permitted under the DPDP Act.

Where we rely on your consent, we will seek it through a clear affirmative action (for example, ticking a box, creating an account, or submitting a form) at or before the time of collection.
You may withdraw consent at any time, with the same ease with which it was given, by writing to us at the contact details in Section 17. Withdrawal does not affect the lawfulness of processing carried out before withdrawal, and may affect our ability to continue providing the Service to which the consent related.
Where you engage us for a paid diagnosis, assessment, or advisory engagement, your submission of information necessary to deliver that engagement is treated as consent for processing reasonably necessary to fulfil it, consistent with Section 3 above.

5. How We Use Information

We may use collected information to:

Create and manage your account and provide access to our platform
Generate business diagnoses, assessment outputs, benchmarks, and recommendations based on the information and documents you submit
Provide advisory, consulting, coaching, and execution-support services
Process payments and manage billing
Respond to enquiries, support requests, and provide customer service
Maintain, secure, and improve our platform, algorithms, and user experience
Personalize the diagnostic experience and recommendations to your business context
Send service-related communications, including updates about your account, assessments, or engagements
Send marketing or promotional communications where you have consented to receive them, and provide an option to opt out at any time
Detect, investigate, and prevent fraud, abuse, or security incidents
Comply with applicable legal, regulatory, tax, and accounting obligations

Unique to ExecutionZ

6. Use of Artificial Intelligence and Third-Party AI Processing

Our platform uses a combination of rule-based logic and third-party artificial intelligence models and services (including large language model providers such as Anthropic, ChatGPT, and Gemini) and, where applicable, proprietary or internally developed LLMs and AI technologies, to support the analysis, processing, personalization, and delivery of certain services, including analyzing the business and financial information you submit and generating a diagnosis, assessment output, benchmarks, and recommendations. The specific AI provider or combination of providers used for a given request is part of our proprietary methodology and is not disclosed.

What is shared and why. Information you submit for this purpose is transmitted to our third-party AI service provider(s) solely to process your request and generate output for you. It is not used by us to publicly identify you, and is not shared with unrelated third parties for their own independent purposes.

Retention by AI providers. Our AI service provider(s) may retain the data submitted to them for a limited period as required for abuse monitoring, safety, and legal compliance under their own terms, typically ranging from a short retention window to a longer period where legally required; they do not retain it indefinitely for unrelated purposes. Current retention practices of our AI provider(s) are available on request.

No training on your data. We do not knowingly permit your confidential business data to be used to train publicly available third-party AI models. Where a provider's own terms would otherwise permit model training on submitted data, we take reasonable steps to disable or opt out of such use where technically and contractually available to us.

Human review and safeguards. We may involve a human reviewer in the diagnostic workflow, in which case a member of our team may review your submitted information and the generated output before it is delivered to you

Nature of outputs. Outputs generated by our platform are advisory in nature and are not a substitute for independent professional, legal, financial, or accounting advice. See our Terms & Conditions for further detail on the nature and limitations of AI-generated outputs.

We may use AI-generated outputs as part of our internal methodology, product development and service improvement, provided such use is carried out in accordance with applicable law and reasonable measures are taken to prevent identification of individuals or businesses where appropriate.

We will not knowingly use AI systems to make decisions producing legal or similarly significant effects concerning an individual unless such processing is lawful and appropriate safeguards are in place.

7. Confidentiality of Business and Financial Data

We understand that business, financial, and operational information shared with us may be commercially sensitive. Information submitted through our platform, assessments, advisory engagements, workshops, or consulting activities is treated as confidential and is used solely for delivering our services and for internal analysis to improve our methodology, unless disclosure is:

Required by law, regulation, or a valid legal process
Authorized by you in writing
Already publicly available through no fault of ours
Necessary to protect our rights, property, or the safety of others, or to investigate fraud or security issues

Disclosure may also be made to authorised service providers, advisors, personnel, or contractors where reasonably necessary for providing the Services, provided they are subject to appropriate confidentiality obligations.

Where we use anonymized or aggregated data (for example, industry-level benchmarks derived from multiple clients) for research, product improvement, or marketing purposes, such data is stripped of information that could reasonably identify you or your company.

8. How We Share Information

We do not sell your personal information. We may share information with:

Service providers and processors who process information on our behalf under contractual confidentiality and data protection obligations (see Section 9)
Advisors, consultants, employees, and authorised team members directly involved in delivering your assessment, diagnosis, or advisory engagement, on a need-to-know basis
Legal, regulatory, governmental, or law-enforcement authorities where required or permitted by applicable law, court order, or governmental request
Professional advisers, including lawyers, accountants, and auditors, where reasonably necessary
Successors or transaction parties in the event of a merger, acquisition, restructuring, financing, or sale of assets, subject to this Policy or a substantially similar one and appropriate confidentiality and data protection safeguards
Other parties with your explicit consent or otherwise authorised by you

We require service providers processing Personal Data on our behalf to maintain appropriate confidentiality, security, and data protection safeguards consistent with applicable law and the nature of the processing.

9. Third-Party Service Providers

We engage the following categories of third-party service providers (each acting as a data processor on our behalf, bound by contractual confidentiality and data protection obligations) to operate our website, platform, and services:

Function	What They Process
Cloud hosting, application infrastructure, and database services	Account data, submitted business/financial data, diagnostic outputs
Authentication (including third-party sign-in providers)	Name, email, basic profile information
Payment processing	Payment and transaction details
AI-assisted analysis and content generation	Business/financial data submitted for a diagnosis, on a per-request basis (see Section 6)
Email communications and transactional messaging	Name, email, message content
SMS and WhatsApp-based verification	Phone number, verification codes
Scheduling and meeting management	Name, email, meeting details
Website analytics	Device, browser, and usage data (see Section 12)
Customer support tools	Name, email, support request content
Cybersecurity, monitoring, and technical support services	Device, browser, usage, and security-related data as needed to detect and respond to threats

These providers process information solely on our instructions and in accordance with their own privacy policies and applicable law, and may be located in India or other jurisdictions. A current list of material service providers is available upon reasonable request, subject to security, confidentiality, and commercial considerations. We take reasonable steps to work with providers that maintain appropriate security and confidentiality standards.

10. Payment Processing

Payments are processed through authorized third-party payment gateways. ExecutionZ does not store complete credit card, debit card, banking, UPI, or other payment credentials on its own servers; these are handled directly by our payment processors in accordance with applicable payment industry security standards.

11. Cookies and Tracking Technologies

Our website and platform may use cookies, local storage, and similar technologies, including pixels and software development kits (SDKs), to keep you signed in, remember preferences, understand usage patterns, and improve performance. These may include:

Essential cookies necessary for core website and platform functionality (for example, staying logged in, maintaining your session during a diagnostic)
Functional / preference cookies that remember your settings and choices
Analytics cookies (for example, website analytics tools) that help us understand how visitors use our website and platform — pages visited, time spent, and referral source — so we can improve performance and content
Third-party cookies set by embedded services such as authentication, payment, or scheduling providers
Other permitted tracking technologies used to improve our Services and measure the effectiveness of communications, where permitted by applicable law

We do not use cookies to sell your personal information. You may disable cookies through your browser settings; however, some features of our website or platform may not function properly as a result. Where required by applicable law, we will obtain your consent before placing or using non-essential cookies or tracking technologies, and provide a mechanism to withdraw that consent at any time.

12. Data Storage and International Transfers

Information may be stored and processed on servers located in India or other countries where our infrastructure and service providers operate from time to time. The DPDP Act permits the transfer of personal data outside India except to countries specifically restricted by the Central Government; we do not currently transfer data to any such restricted country. Where information is transferred outside India, we take reasonable steps to ensure it continues to receive an appropriate level of protection, consistent with applicable law and our contractual arrangements with service providers.

If you are accessing our Services from the United Arab Emirates, your information may be transferred to, stored, and processed outside the UAE, including in India and other countries where our infrastructure and service providers operate. Where applicable UAE data protection requirements apply to such processing, we will process and transfer Personal Data in accordance with those requirements and any applicable cross-border transfer mechanisms. By submitting your information to us, you consent to any such transfer, storage, and processing outside the UAE for the purpose of receiving our Services.

More generally, in addition to Indian law, we take reasonable steps to comply with any additional data protection law that becomes applicable to a specific engagement based on your location, as further described in our Terms & Conditions.

13. Data Security

We implement reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, misuse, disclosure, alteration, or destruction, including access controls, encryption in transit, and restricted internal access to sensitive business and financial data. See our Data Security page for further detail.

However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

Breach notification. In the event of a personal data breach that we determine is likely to affect you, we will notify you and the Data Protection Board of India without undue delay, and provide such information about the breach as is reasonably available to us at the time, in accordance with the DPDP Act and applicable Rules. This is a good-faith commitment to notify as soon as reasonably practicable once a breach is confirmed, rather than a guarantee of any specific timeline, given the investigative work often required to confirm a breach's scope.

14. Data Retention

We retain personal data only for as long as we reasonably consider necessary to provide the Services, comply with our legal, tax, and regulatory obligations, resolve disputes, and enforce our agreements. On expiry of that period, we delete, anonymize, or securely archive the relevant data.

We reserve the right, at our discretion, to modify our retention practices at any time, including shortening the period for which any category of data is retained. We are not obligated to retain any data indefinitely, and shall not be liable for any loss arising from the deletion of data in accordance with this Section. Certain information may remain in routine backups or archival systems for a limited period before being securely overwritten or deleted.

Free Scan users, trial users, and other non-paying visitors. We do not commit to a fixed retention period for information collected from users who have not made a paid purchase, including Free Scan users, beta or trial participants, and general website visitors. We retain such information only for as long as we reasonably consider necessary to provide the relevant free feature or respond to your enquiry, and may delete it at any time at our discretion. We may, at our sole discretion, terminate accounts (whether or not a paid purchase has previously been made) that show no login or platform activity for an extended period and delete their associated data; we are under no obligation to do so within any particular timeframe, and an inactive account may remain as-is for an extended period without action on our part, in accordance with our Terms & Conditions.

If we discontinue the platform or a Service. We are not obligated to operate our servers or platform indefinitely. If we discontinue the platform, or a specific Service, in whole or in part, we will make reasonable efforts to notify affected paying clients in advance and provide a reasonable opportunity to export Your Content before it becomes inaccessible, as described in our Terms & Conditions. Data that is not exported within the notified window may be permanently deleted.

15. Your Rights

Subject to applicable law, including the DPDP Act, you have the right to:

Access a summary of the personal information we hold about you and the processing activities carried out on it
Correction and updating of inaccurate or incomplete information
Erasure of your information, where it is no longer necessary for the purpose it was collected and legally permissible
Withdraw consent for processing based on consent, without affecting processing carried out prior to withdrawal (see Section 4)
Grievance redressal by contacting our Grievance Officer (see Section 17) and, if unresolved, by approaching the Data Protection Board of India
Nominate another individual to exercise your rights in the event of your death or incapacity
Request information regarding the processing of your Personal Data

To exercise any of these rights, please contact us using the details in Section 17. We may need to verify your identity or authority before acting on a rights request. We will acknowledge your request within a reasonable time and, in any case, aim to respond within 30 days. This is a good-faith service target; an isolated delay caused by circumstances beyond our reasonable control will not, by itself, constitute a breach of this Policy, and we will respond as soon as reasonably possible once we become aware of it. Where a request cannot be fulfilled, we will, to the extent required by law, provide an explanation for the refusal.

16. Children's Privacy

Our website, platform, and services are intended for business and professional use by adults. We do not knowingly collect personal information from children in circumstances where such collection is prohibited by applicable law. If we become aware that we have inadvertently collected Personal Data from a child in violation of applicable law, we will take reasonable steps to delete such information.

17. Grievance Officer

In accordance with applicable Indian law, including the DPDP Act and applicable rules and regulations, the following Grievance Officer may be contacted for any questions, concerns, or complaints regarding this Privacy Policy or the handling of your information:

Sivakumar Anirudhan
Founder, ExecutionZ™
VS Online Services Private Limited
Email: siva@VSOnlineServices.com
Phone: +91 87545 08440

Complaints and requests may be submitted using the above contact details. We will acknowledge grievances within a reasonable time and, in any case, aim to respond within 30 days. This is a good-faith service target, not an unconditional guarantee; an isolated delay caused by circumstances beyond our reasonable control will not, by itself, constitute a breach of this Policy, and we will respond as soon as reasonably possible once we become aware of it. Where applicable law provides for escalation to the Data Protection Board of India or another data protection authority, you may exercise such right in accordance with the applicable procedure.

If we are required to appoint a dedicated Data Protection Officer under the DPDP Act (for example, if we are classified as a Significant Data Fiduciary), we will do so and publish their contact details on this page.

18. Contact Us

For privacy-related questions, requests, or complaints, please contact:

ExecutionZ™
Founded by Sivakumar Anirudhan
Operated by VS Online Services Private Limited
Email: siva@VSOnlineServices.com
Phone: +91 87545 08440

19. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or the services we offer. The "Last Updated" date at the top of this page indicates when this Policy was last revised.

For changes that do not materially alter how we collect, use, or share your personal data, continued use of our website, platform, or Services after the update constitutes acceptance of the revised Policy.
For changes that materially expand the purposes for which we process your personal data, or materially change your rights under this Policy, we will provide advance notice (such as an email or an on-platform notification) before the change takes effect and, where required by the DPDP Act, seek your fresh consent before relying on the new purpose.

Your continued use of the website or Services following an updated Policy does not, by itself, constitute consent to processing where applicable law requires separate consent.