Privacy policy

Privacy Policy

At NovanceAI, we value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information in compliance with the Digital Personal Data Protection Act, 2023 (DPDPA) and other applicable laws.

1. Information We Collect

We collect personal data that is necessary to provide our services. This may include information that can identify you directly or indirectly.

2. How We Use Your Information

Your data is processed in a lawful, fair, and transparent manner. We use your information only for:

  • Providing and improving our services

  • Enhancing user experience

  • Meeting legal and regulatory requirements

We ensure that only the minimum required data is collected and used.

3. Data Protection Principles

We follow strict data protection principles:

  • Data is used only for specific and legitimate purposes

  • Data is kept accurate and up to date

  • Data is stored only for as long as necessary

  • Appropriate security measures are implemented to protect your data

4. Your Rights

You have the right to:

  • Access your personal data

  • Request correction or deletion of your data

  • Withdraw your consent at any time

  • Raise complaints regarding data usage

  • Nominate another person to exercise your rights if needed

We respond to requests promptly and resolve grievances within reasonable timelines.

5. Consent

We collect and process your personal data only with your clear and informed consent, unless otherwise permitted by law.
For users under 18 years of age, parental consent is required.

6. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse.

7. Data Storage and Transfer

Your data is primarily stored within India. In cases where data is transferred outside India, we ensure appropriate safeguards are in place.

8. Third-Party Services

We may use trusted third-party service providers (such as cloud infrastructure providers) to process data on our behalf. These providers are bound by strict data protection obligations.

9. Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee compliance and address any concerns related to your data.

10. Data Breach Notification

In the event of a data breach, we will notify affected users and relevant authorities as required by law.

11. Updates to This Policy

We may update this Privacy Policy from time to time. Any changes will be communicated through our platform.