Cookie Policy

Last updated 4 September 2026

This Cookie Policy explains how Anekam Datanet Technologies Pvt. Ltd. uses cookies, local storage and similar technologies on vapusdata.com and on the interfaces of the VapusData Platform, VapusFin, Nabhik AI, AI Studio and the AI Data Agents. It is written to meet the strictest of the regimes that apply to us — the EU GDPR and the ePrivacy Directive, the UK GDPR and PECR, the Digital Personal Data Protection Act in India, the LGPD in Brazil, PIPEDA in Canada and the CCPA as amended by the CPRA in California — so the same rules are applied to every visitor, wherever they are.

1. Scope & who is responsible

Anekam Datanet Technologies Pvt. Ltd., the company behind VapusData, is the controller for the personal data described here and can be reached at [email protected]. This policy covers our public website and the sign-in surfaces of the products listed above.

It sits alongside our Privacy Policy, which describes everything else we do with personal data, and our Terms & Conditions. Where a customer runs the platform inside its own cloud account or data centre, that deployment is governed by the agreement with that customer; this policy describes the properties we operate.

One standard is applied everywhere. We do not vary the level of protection by the country a visitor happens to be in, so the consent model described below is the one every visitor gets.

2. What cookies and similar technologies are

A cookie is a small text file a site asks your browser to store and send back on later visits. Similar technologies do the same job by other means: local storage and session storage keep values in the browser rather than sending them with each request, and pixels, tags and SDKs load a small resource that lets a server record that something happened.

The law in most of the world treats all of these the same way, so this policy does too. Wherever it says "cookie", read it as covering local storage, session storage, pixels and any other technology that reads from or writes to your device.

First-party cookies are set by vapusdata.com itself. Third-party cookies are set by another organisation whose code we have allowed to run on the page.
A session cookie is deleted when the browser closes. A persistent cookie stays until its stated expiry, or until you delete it.
Deleting cookies in your browser also deletes the record of the choice you made here, so you will be asked again on your next visit.

3. The categories we use

Every cookie on our properties belongs to exactly one of three categories. Only the first is set before you have made a choice; nothing in the other two loads until you switch it on.

Strictly necessary

Required for the site and the products to work: authentication and session integrity, security and abuse prevention, load balancing, and remembering the cookie choice itself. These cannot be switched off, because switching them off breaks sign-in or leaves the service open to abuse. They are set without consent, which the ePrivacy Directive and its equivalents expressly permit for this purpose.

vapus_consent — first-party, expires after twelve months. Records which categories you allowed, when, and which version of this policy you were shown. It exists so that we can prove your choice and so that you are not asked on every page.
vapus-theme — first-party browser storage, no expiry. Remembers whether you chose the light or dark appearance. It is read only by your own browser and is never sent to us.
Session, security and load-balancing cookies set by our hosting and CDN providers for the duration of a request or a session, used to route traffic and to block automated abuse of the contact form.

Analytics

Aggregate measurement of which pages are read and which links are followed, so we know what to write next. No analytics cookie is written and no analytics script is loaded until you allow this category. We use analytics to understand the audience of the site in aggregate — never to build a profile of an individual, and never to make a decision about a person.

Marketing

Advertising and conversion measurement set by third parties, used to understand which campaigns lead to an enquiry. No marketing tag is loaded until you allow this category. We do not use cookies to build advertising profiles of the people who use the platform itself.

4. Third-party cookies

Where an analytics or marketing provider is used, its script is mounted only after consent for that category has been given, and it is removed from the page when consent is withdrawn. Until then, the provider receives nothing at all — not an IP address, not a page view, not a request.

Third-party providers act as processors on documented terms, or as independent controllers where the law characterises them that way, and their own notices govern what they do with what they collect. Content embedded from another site — a video, a map, a form — can set its own cookies once it loads, and is treated as a non-essential technology under the category it belongs to.

The current list of providers, and the countries their processing takes place in, is maintained in our Privacy Policy under third-party integrations and sub-processors, so there is one list to keep accurate rather than two.

5. Legal basis & regional rights

Strictly necessary cookies are set because they are indispensable to a service you asked for. Everything else is set on the basis of your consent, freely given by an affirmative act, and it may be withdrawn at any time without detriment.

Consent is asked for before anything non-essential loads, is granular by category, and is as easy to refuse as to accept — "Reject all" sits beside "Accept all", in the same style, and no box arrives pre-ticked. Continuing to scroll or browse is not treated as consent.

EU & UK: cookies are governed by the ePrivacy Directive and PECR, with the GDPR and UK GDPR standard of consent applied to any personal data they involve.
India: processing of personal data is carried out on the basis of the notice and consent required by the Digital Personal Data Protection Act, 2023.
Brazil & Canada: the LGPD and PIPEDA standards of meaningful, informed consent are applied to non-essential cookies.
California & other US states: we do not sell or share personal information as those terms are defined by the CCPA/CPRA. Refusing the marketing category has the effect of an opt-out of sharing for cross-context behavioural advertising, and we honour Global Privacy Control signals sent by your browser as such a request.
Nobody is refused access to the site, offered a worse service, or shown a different price for declining non-essential cookies.

6. Managing or withdrawing your choice

Your choice is recorded for twelve months and can be changed at any moment from the Cookie settings link in the footer of every page, or from the button below. Withdrawal takes effect immediately: the scripts you had allowed are removed from the page and are not loaded again.

If we add a category or make a material change to how we use these technologies, the stored record is invalidated and you are asked again rather than carried over on an answer you gave to a different question.

Browsers offer their own controls — blocking all cookies, blocking third-party cookies, or clearing what is stored — and those controls override anything set here. Blocking the strictly necessary set will stop parts of the site and the products from working.

7. How long cookies last

Session cookies are discarded when you close the browser. The record of your consent lasts twelve months, after which you are asked again. Any analytics or marketing cookie is retained for no longer than its stated lifetime, and never for longer than is necessary for the purpose it was set for.

Deleting cookies for this site, or using private browsing, removes the record of your consent along with everything else, and the banner will appear on your next visit.

8. Changes to this policy

This policy is reviewed whenever the technologies on our properties change, and at least once a year. The date at the top of the page is the date of the last review, and a material change is accompanied by a fresh request for consent rather than a quiet edit.

9. Contact us

Questions about this policy, or a request to exercise any right described in it, can be sent to [email protected] and will be answered within the period the applicable law allows. If you are in the EU, the UK, Brazil or India, you also have the right to complain to your national supervisory authority.