Legal

Privacy Policy

Effective Date: March 25, 2026

1. Introduction

PrivEzi Solutions Pvt. Ltd. ("PrivEzi", "we", "us", or "our") is committed to protecting the privacy and personal data of all individuals who interact with our platform, website, and services. This Privacy Policy explains how we collect, use, store, share, and protect your personal data in accordance with India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000, the General Data Protection Regulation ("GDPR") where applicable, and other relevant data protection laws.

By accessing or using our website (privezi.ai), platform, or services, you consent to the practices described in this Privacy Policy. If you do not agree, please discontinue use of our services.

2. Data Fiduciary Information

PrivEzi Solutions Pvt. Ltd. acts as the Data Fiduciary (as defined under the DPDP Act) for personal data collected through our website and platform. For any questions or concerns regarding this policy, please contact our Data Protection Officer at: [email protected].

Registered Address: WeWork Embassy Tech Village, Outer Ring Road, Bengaluru, Karnataka 560103, India.

3. Personal Data We Collect

Information you provide directly: Name, email address, phone number, job title, company name, company size, and any message or inquiry you submit through our forms, demo requests, or contact pages.

Information collected automatically: IP address, browser type and version, operating system, device identifiers, pages visited, time spent on pages, referral URLs, and clickstream data through cookies and similar tracking technologies.

Information from third parties: We may receive data from business partners, marketing platforms, or publicly available sources to supplement the information you provide.

4. Purpose and Legal Basis for Processing

We process your personal data for the following purposes: (a) To provide, maintain, and improve our platform and services; (b) To respond to your inquiries, demo requests, and support tickets; (c) To send you product updates, newsletters, and marketing communications (with your consent); (d) To comply with legal obligations under the DPDP Act, IT Act, and other applicable regulations; (e) To detect, prevent, and address fraud, abuse, security issues, and technical problems; (f) To conduct analytics and research to improve user experience.

The legal basis for processing includes: consent provided by you, performance of a contract, compliance with legal obligations, and legitimate interests pursued by PrivEzi that do not override your fundamental rights.

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your data with: (a) Service providers and sub-processors who assist in operating our platform (cloud hosting, analytics, email delivery) under appropriate data processing agreements; (b) Professional advisors such as lawyers, auditors, and accountants where necessary; (c) Law enforcement or regulatory authorities when required by law or to protect our legal rights; (d) Business transferees in the event of a merger, acquisition, or asset sale, with prior notice to affected individuals.

All third-party service providers are contractually bound to process your data only for specified purposes and in compliance with applicable data protection laws.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Specifically: (a) Account and inquiry data is retained for the duration of our business relationship plus 3 years; (b) Marketing consent records are retained for 5 years from the date of consent; (c) Website analytics data is anonymized after 26 months; (d) Legal and compliance records are retained as required by the DPDP Act and other applicable laws.

Upon expiration of the retention period, your data will be securely deleted or anonymized.

7. Your Rights as a Data Principal

Under the DPDP Act and applicable laws, you have the following rights: (a) Right to Access: Request confirmation of whether your personal data is being processed and obtain a summary of such data; (b) Right to Correction: Request correction of inaccurate or incomplete personal data; (c) Right to Erasure: Request deletion of your personal data, subject to legal retention requirements; (d) Right to Withdraw Consent: Withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal; (e) Right to Grievance Redressal: Lodge a complaint with our Data Protection Officer or the Data Protection Board of India.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days of receiving your request.

8. Data Security

We implement industry-standard technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include: encryption of data in transit (TLS 1.2+) and at rest (AES-256), access controls and role-based permissions, regular security assessments and penetration testing, employee training on data protection and security awareness, incident response procedures and breach notification protocols.

While we take all reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

9. Cross-Border Data Transfers

Your personal data may be transferred to and processed in countries outside India, including for cloud hosting and analytics services. Such transfers are made in compliance with the DPDP Act and applicable data transfer mechanisms, including adequacy decisions, standard contractual clauses, or your explicit consent.

We ensure that all cross-border transfers are subject to appropriate safeguards to protect your personal data.

10. Children's Data

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without verifiable parental consent, we will take steps to delete such data promptly. If you believe a child has provided us with personal data, please contact us at [email protected].

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. We will notify you of material changes by posting the updated policy on our website with a revised effective date. We encourage you to review this page periodically.

Continued use of our services after the updated policy is posted constitutes your acceptance of the changes.

12. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us at: Email: [email protected] | Address: PrivEzi Solutions Pvt. Ltd., Mumbai, Maharashtra, IN, New York 10154, US