Privacy Policy

Vardan Soft Pvt Ltd (“Vardan Soft”, “we”, “us”, or “our”) is a private limited software development company registered in Nepal and based in Ramechhap, Nepal. We design and operate custom web applications, mobile applications, and AI-powered products.

We are the data controller responsible for the personal information described in this policy. You can reach us at any time at vardansoftpvtltd@gmail.com or on +977 9841307947.

This policy applies to vardansoft.com.np and to the applications operated by Vardan Soft Pvt Ltd that use our centralized account and sign-in service. Those applications currently include bolnepage (bolnepage.com), an AI assistant that helps businesses answer customer messages. Any additional product we launch under the same account system is covered by this policy, and we will update this section when that happens.

Where an individual product needs to describe additional processing specific to that product, it will publish a supplementary notice. In case of conflict, the product-specific notice governs for that product only.

3.1 Information you give us directly

When you contact us by email or through our website, or when you use one of our applications, you may give us information such as your name, email address, phone number, business name, and the contents of your message or the content you create in the product.

3.2 Information we receive from Google when you sign in

If you choose “Sign in with Google”, Google asks for your consent and then sends us a limited set of information about your Google Account. We request only the following, and nothing more:

• Your email address (scope https://www.googleapis.com/auth/userinfo.email) — the address associated with the Google Account you sign in with.
• Your basic profile information (scope https://www.googleapis.com/auth/userinfo.profile) — your display name, your profile picture, and your locale if Google provides it.
• Your Google account identifier (scope openid) — a stable, unique identifier that lets us reconnect you to the correct account on each sign-in.

We never receive and never ask for your Google password. We do not request access to Gmail, Google Drive, Google Calendar, Google Contacts, Google Photos, or any other Google service.

3.3 Information collected automatically

When you visit our website or use our applications, we automatically collect limited technical information such as your IP address, browser type and version, device type, operating system, referring page, the pages you view, and the date and time of your visit. We use this to keep the service secure, diagnose faults, and understand aggregate usage.

We use the information described above only for these purposes:

• To create your account, authenticate you, and keep you signed in across Vardan Soft applications.
• To display your name and profile picture inside the product so you and your teammates can tell who is signed in.
• To provide, operate, maintain, and improve the features of our applications.
• To send you essential service communications, such as security alerts, changes to our terms, and notices about your account. These are not marketing messages.
• To respond to your enquiries, provide customer support, and prepare proposals when you contact us about a project.
• To detect, investigate, and prevent fraud, abuse, security incidents, and other harmful or unlawful activity.
• To comply with our legal obligations and to establish, exercise, or defend legal claims.

We do not use your personal information for automated decision-making that produces legal or similarly significant effects about you.

This section describes specifically how we handle data received through Google APIs. It applies in addition to the rest of this policy.

5.1 How we use Google user data

We use the email address, basic profile information, and account identifier we receive from Google solely to create and secure your Vardan Soft account, to sign you in, to personalise your profile within the product, and to send you essential account and security notices. We use it for no other purpose.

5.2 What we never do with Google user data

• We never sell, rent, or trade Google user data.
• We never use Google user data for advertising, ad targeting, ad personalisation, or ad measurement.
• We never use Google user data to train, fine-tune, or improve any artificial intelligence or machine learning model, whether ours or a third party's.
• We never transfer Google user data to data brokers, information resellers, or any other party for their own independent purposes.
• We never allow humans to read your Google user data, except with your explicit consent for a specific issue you have raised with us, where it is necessary for security or to investigate abuse, or where we are legally required to do so.

5.3 Sharing of Google user data

We share Google user data only with the service providers strictly necessary to operate our sign-in service — for example our cloud hosting and database provider — and only so they can process it on our behalf, under contract, and under our instructions. We may also disclose it where we are required to by law, as described in section 7.

5.4 Retention and deletion of Google user data

We retain your Google user data only for as long as your Vardan Soft account remains active. If you delete your account, or ask us to delete it, we delete the associated Google user data from our production systems within 30 days and from our encrypted backups within a further 90 days. You may also revoke our access at any time from your Google Account permissions page; doing so stops any further flow of your Google data to us. Full instructions are on our data deletion page.

We do not sell your personal information. We share it only in the following limited circumstances:

• Service providers. With vendors who process data on our behalf to run the service — hosting, database, email delivery, error monitoring, and analytics providers. They may use the data only to perform services for us and are bound by confidentiality and data protection obligations.
• Legal and safety reasons. Where we reasonably believe disclosure is required by applicable law, regulation, legal process, or an enforceable governmental request, or is necessary to protect the rights, property, or safety of Vardan Soft, our users, or the public.
• Business transfers. If Vardan Soft is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will give you notice before your information becomes subject to a different privacy policy.
• With your consent. For any other purpose disclosed to you at the time we ask for your permission.

We keep personal information only for as long as we need it for the purposes set out in this policy. Account data is kept while your account is active and deleted on the timeline described in section 5.4. Enquiry and support correspondence is kept for up to 24 months so we can maintain a record of our dealings with you. Technical logs are kept for up to 12 months. We may retain information for longer where we are legally required to, or where it is necessary to resolve a dispute or enforce our agreements.

We apply technical and organisational measures appropriate to the risk, including encryption of data in transit using TLS, encryption of data at rest, restricted and role-based access to production systems, credential and secret management, regular patching of our infrastructure, and logging and monitoring of access to personal data.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant authorities as required by applicable law.

Subject to applicable law, you have the right to ask us to:

• Access the personal information we hold about you and receive a copy of it.
• Correct information that is inaccurate or incomplete.
• Delete your account and the personal information associated with it.
• Restrict or object to certain processing of your information.
• Receive your information in a portable, machine-readable format.
• Withdraw a consent you have given us, at any time, without affecting processing carried out before the withdrawal.

To exercise any of these rights, email vardansoftpvtltd@gmail.com. We respond to all requests within 30 days and we do not charge a fee. We may ask you to verify your identity — normally by replying from the email address on your account — before we act, so that we do not disclose your data to someone else.

Separately from any request to us, you can disconnect Vardan Soft from your Google Account at myaccount.google.com/permissions.

We use strictly necessary cookies and equivalent browser storage to keep you signed in, to remember your preferences, and to protect against cross-site request forgery. These are required for the service to function. Where we use analytics to understand aggregate usage, it is configured so that we do not build advertising profiles about you. You can block or delete cookies through your browser settings, but parts of the service may not work correctly if you block strictly necessary cookies.

We are based in Nepal and our service providers may store or process data in other countries, including in the United States and the European Union. Where we transfer personal information across borders, we take steps to ensure it continues to be protected in line with this policy, including by contracting with providers who commit to recognised safeguards such as the European Commission's Standard Contractual Clauses.

Our website and applications are intended for businesses and for people aged 16 and over. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

Our website and products may link to services we do not operate, including Google. This policy does not apply to those services, and we are not responsible for their practices. We encourage you to read the privacy policy of any third-party service you use. Google's own handling of your data is governed by the Google Privacy Policy.

We may update this Privacy Policy to reflect changes to our practices or for legal or regulatory reasons. When we do, we revise the “last updated” date at the top of this page. If the changes are material — for example if we begin requesting additional Google scopes or using your data for a new purpose — we will notify you by email or through a prominent notice in the product before the change takes effect.

If you have any question, concern, or complaint about this policy or about how we handle your personal information, contact us and we will do our best to resolve it:

• Vardan Soft Pvt Ltd, Ramechhap, Nepal
• Email: vardansoftpvtltd@gmail.com
• Phone: +977 9841307947