Privacy Policy

1. Introduction

Nivyaan Labs ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or engage our services. This policy is compliant with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 of India, the Digital Personal Data Protection Act, 2023 (DPDPA), and applicable international data protection regulations including the General Data Protection Regulation (GDPR).

2. Information We Collect

We may collect the following categories of information:

• Personal Identification Information: Name, email address, phone number, and business details provided voluntarily when you contact us, book a discovery call, or engage our services.
• Technical Information: IP address, browser type, operating system, device information, and browsing patterns collected automatically through cookies and similar technologies.
• Communication Data: Records of correspondence when you contact us via WhatsApp, email, or other communication channels.
• Project Data: Business requirements, project specifications, and related documents shared during our engagement.

3. Purpose and Legal Basis for Processing

We process your personal data for the following lawful purposes:

• To provide and deliver our MVP development services as contracted.
• To respond to your inquiries, schedule discovery calls, and communicate project updates.
• To send service-related notifications and, with your consent, promotional communications.
• To improve our website, services, and user experience through analytics.
• To comply with applicable legal obligations and protect our legitimate interests.

4. Consent

By using our website and services, you consent to the collection and use of your information as described in this Privacy Policy, in accordance with Section 43A of the Information Technology Act, 2000 and the DPDPA, 2023. You may withdraw your consent at any time by contacting us. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal. For users in the European Economic Area, we rely on consent, legitimate interest, or contractual necessity as the legal basis for processing, as applicable.

5. Data Storage and Security

We implement reasonable security practices and procedures as mandated under the IT (Reasonable Security Practices) Rules, 2011, including encryption, access controls, and secure storage systems. Your data is stored on secure servers and we take all reasonable steps to protect your information from unauthorized access, alteration, disclosure, or destruction. Despite our efforts, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal data only for as long as is necessary to fulfill the purposes outlined in this policy, or as required by applicable law. Project-related data is retained for the duration of our engagement and a reasonable period thereafter for legal and business purposes. Upon request, we will delete or anonymize your personal data unless retention is required by law.

7. Data Sharing and Disclosure

We do not sell, trade, or rent your personal data. We may share your information in the following circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our website and delivering services, subject to confidentiality agreements.
• Legal Requirements: When required by law, court order, or governmental authority under Indian law or applicable foreign jurisdiction.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity.

8. Cross-Border Data Transfers

If your personal data is transferred outside India, we ensure that adequate safeguards are in place in compliance with the DPDPA, 2023 and applicable regulations. For transfers to countries outside the EEA, we rely on approved mechanisms such as Standard Contractual Clauses or adequacy decisions as required under GDPR.

9. Your Rights

Under the DPDPA, 2023 and GDPR (where applicable), you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data, subject to legal retention requirements.
• Right to Grievance Redressal: Lodge a complaint with the Data Protection Board of India or your local supervisory authority.
• Right to Withdraw Consent: Withdraw your consent for data processing at any time.
• Right to Data Portability: Receive your personal data in a structured, commonly used format (GDPR).

10. Cookies and Tracking Technologies

Our website may use cookies and similar tracking technologies to enhance your browsing experience and gather analytics data. You can control cookie preferences through your browser settings. Disabling cookies may affect certain features of the website.

11. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without verifiable parental consent, we will take steps to delete that information promptly, in compliance with the DPDPA, 2023 and other applicable laws.

12. Grievance Officer

In accordance with the Information Technology Act, 2000 and the DPDPA, 2023, the details of the Grievance Officer are as follows:

13. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Changes will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically. Continued use of our website and services after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

15. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising under this policy shall be subject to the exclusive jurisdiction of the courts in India.