Vexron privacy policy

This policy covers the Vexron app for Android (package com.cybs.vexron) and the Vexron web app it opens. Vexron is made by Cybs Innovations, Main Road, Near KBC Building, Champa, Chhattisgarh 495671, India. Email: info@cybsinnovations.com. Phone: +91 76971 34405.

Vexron is a work tool for plants and factories. It is not for personal use and not for children.

1. How Vexron works

When you open the app, you enter the address of your organisation's Vexron server, and the app then shows that server. Your organisation runs the server, either on its own premises or cloud, or we run it for them. Your organisation decides what Vexron is used for and controls the data on its server. Under India's Digital Personal Data Protection Act, 2023, your organisation is the data fiduciary for that data. Cybs Innovations makes the software and, where we run the server, processes data on your organisation's behalf.

2. Your account

You cannot sign up yourself. Your organisation's administrator creates your account. Vexron stores:

• your name and work email address
• your department, role and whether the account is active
• your password, stored as a one-way bcrypt hash, so it cannot be read back

You sign in with your email and password. Vexron keeps you signed in with a signed session token.

3. What you do in Vexron

Using Vexron creates records on your organisation's server, such as:

• machine, sensor and alert data from your plant
• work orders, technician notes and maintenance schedules
• questions you ask the AI assistant and its answers, saved as conversations
• files your organisation uploads so the assistant can answer from them
• an audit log of account and settings changes, showing who changed what

4. Phone permissions

• Camera: only to scan the QR codes on machine labels, when you tap scan. Vexron does not take or store photos.
• Microphone: only for the voice assistant, when you tap the microphone. Your phone's speech recognition service turns your speech into text. On most Android phones that service is Google's. Vexron does not record in the background.
• Notifications: to show machine alerts. You can turn them off in your phone settings.

Vexron does not ask for your location, contacts, photos, SMS or call logs.

5. What stays on your phone

• the server address you entered, and up to five recent ones
• if you add the home-screen widget, a sign-in token for it and a short summary to show
• files you choose to share, kept briefly in the app's temporary folder

This data is kept in the app's private storage. It is left out of Android cloud backups and device-to-device transfers. Signing out removes the widget and notification tokens. Uninstalling the app removes the rest.

6. Services that receive data

• Google Firebase Cloud Messaging delivers alert notifications. It receives your device's notification token and the alert title and text.
• The AI provider your organisation chooses. If your organisation uses a cloud AI service (OpenAI, OpenRouter or Google Gemini), your assistant question, the recent conversation and related plant documents are sent to that service to produce an answer. If your organisation runs the AI model on its own server, nothing is sent outside.
• Your phone's speech recognition service, when you use the voice assistant (see section 4).
• Alert and integration services your organisation turns on, such as SMS or WhatsApp alerts through Twilio, email alerts, a QR label service, weather data, PagerDuty or SAP. Each receives only what that alert or integration needs, such as the alert text and the phone number or email your organisation set up.

The Vexron app has no advertising, no analytics and no crash-reporting tools. We do not sell personal data.

7. Why we use it

• to sign you in and run Vexron for your organisation
• to send you machine alerts
• to answer your questions in the AI assistant
• to keep the system secure, including the audit log of changes

8. Where it is stored and how it is protected

Your data is stored on your organisation's Vexron server (see section 1). Passwords are stored as one-way hashes. Your organisation should give you an HTTPS server address so data is encrypted on the way. The app also accepts plain HTTP addresses, which some plants use on their own internal network.

9. How long it is kept

Your account details are kept while your account is active and are removed when the account is deleted. Plant records, work orders, assistant conversations and the audit log are your organisation's business records. They are kept for as long as your organisation keeps its Vexron records. Vexron has no automatic time limit that deletes them.

10. Deleting your account

See how to delete your Vexron account, including what is deleted and what is kept.

11. Your rights

You can ask to see, correct or delete your personal data, withdraw consent where it applies, nominate someone to act for you, and raise a complaint. Ask your organisation's Vexron administrator, or write to us. We reply within 30 days. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

12. Children

Vexron is for adults at work. It is not meant for anyone under 18, and we do not knowingly collect their data.

13. Changes to this policy

If we change how Vexron handles data, we will update this page and the date at the top before the change takes effect.

14. Grievance Officer and contact

Arin Dewangan, Founder and CEO, Cybs Innovations.
Email: info@cybsinnovations.com
Main Road, Near KBC Building, Champa, Chhattisgarh 495671, India