1. Who we are
Cache Technologies and Communications Pvt Ltd, trading as ValorMax ("ValorMax", "we", "us"), is the data controller for personal data processed through the ValorMax website and application (the "Service").
2. Personal data we collect
- Account data: name, email address, login credentials.
- Profile and wallet data: cards you add, loyalty programs, transaction notes, milestone preferences.
- Support communications: messages you send to support.
- Usage and telemetry: pages viewed, features used, errors, device identifiers, IP address, approximate location, browser/OS metadata.
- Marketing data: waitlist email and preferences.
Payment card details are collected and processed by our Merchant of Record, Paddle.com, and never reach our servers.
3. Purposes and legal bases
- Provide the Service (creating accounts, running the optimizer, syncing wallets) — performance of a contract.
- Security and fraud prevention — legitimate interests and legal obligation.
- Product improvement and analytics — legitimate interests.
- Customer support — performance of a contract and legitimate interests.
- Marketing emails and waitlist — consent, which you may withdraw at any time.
- Compliance with law — legal obligation.
4. How we share data
- Service providers / subprocessors: hosting, database, email, analytics, error monitoring, customer support tooling.
- Merchant of Record — Paddle: we share order data with Paddle.com for the sale of subscriptions, billing, tax compliance, invoicing, and subscription management.
- Professional advisers: legal, accounting, and auditors under confidentiality.
- Authorities: where required by law, regulation, or valid legal process.
- Corporate transactions: in connection with a merger, acquisition, or asset sale, subject to equivalent protection.
We do not sell personal data.
5. International transfers
Personal data may be processed outside India, including in the EEA, UK, and United States. Where data leaves the EEA or UK, transfers are protected by appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
6. Data retention
We retain personal data only as long as needed for the purposes described, to meet legal or accounting obligations, or to resolve disputes. Account data is retained for the life of the account and deleted or anonymised within 90 days of account closure, except where longer retention is legally required.
7. Your rights
Subject to applicable law (including GDPR for EEA/UK users and India's DPDP Act 2023), you have the right to:
- access and obtain a copy of your personal data;
- request correction of inaccurate data;
- request erasure ("right to be forgotten");
- restrict or object to processing;
- data portability;
- withdraw consent at any time;
- lodge a complaint with a supervisory authority.
We aim to respond within one month. Contact us at privacy@cache-tech.com.
8. Security
We use appropriate technical and organisational measures including encryption in transit, encryption at rest for sensitive fields, access controls, least-privilege roles, audit logging, and regular vulnerability review.
9. Cookies
We use essential cookies to keep you signed in and to remember preferences. We may use analytics cookies (in aggregate, no advertising IDs) to understand usage. You can manage cookies in your browser settings.
10. Changes
We will post updates to this notice on this page and, for material changes, notify you by email or in-app.
11. Contact
Cache Technologies and Communications Pvt Ltd — privacy@cache-tech.com.