Last updated: June 2026
We collect information you provide directly (name, email, company) when you request a consultation, sign up for an account, or contact us. During engagements, we collect only the technical data necessary to perform the agreed scope of work.
Your data is used to deliver the services you've requested, communicate about ongoing engagements, and improve our platform. We do not sell client data to third parties.
Any client data accessed during a penetration test, VAPT, or audit is handled under a signed NDA, stored encrypted, and deleted according to the retention schedule agreed in your Statement of Work.
If you are located in the EU/EEA, you have the right to access, correct, or request deletion of your personal data. Contact hello@vajrex.com to exercise these rights.
We apply encryption in transit and at rest, role-based access controls, and regular internal audits to protect the data we hold — the same standard we deliver to our clients.
Questions about this policy can be sent to hello@vajrex.com.