Privacy Policy
How CYVERNA collects, uses, and protects your personal data. Aligned with India's DPDP Act 2023 and GDPR.
1. Who We Are
CYVERNA (O) Private Limited is the data controller for personal data collected through cyverna.in, our products, and our service engagements. Our registered office is in Hyderabad, Telangana, India.
2. Information We Collect
We collect the following categories of information:
- Contact information you provide via forms (name, email, phone, company, message).
- Engagement data necessary to deliver our services — collected under signed agreements.
- Usage data from our website (page views, referring source, device type) for analytics.
- Communication records when you contact us via email, phone, WhatsApp, or our chat platforms.
3. How We Use Your Information
We use personal data to:
- Respond to enquiries and provide free consultations.
- Deliver services under signed agreements.
- Send transactional communication and service updates.
- Improve our products and website experience.
- Comply with legal obligations.
We do not sell your personal data. We do not use your data for advertising profiling.
4. Lawful Basis for Processing
We process personal data under the following lawful bases per the DPDP Act 2023 and GDPR (where applicable): your consent; the necessity of performing a contract with you; our legitimate interest in operating our business; and compliance with legal obligations.
5. Data Security
We implement strict technical and organisational measures: AES-256 encryption at rest, TLS in transit, role-based access controls, multi-factor authentication for our team, and regular security audits. Our security practices align with ISO 27001.
6. Data Retention
We retain personal data only as long as needed for the purposes described, or as required by law. Contact form submissions are retained for up to 3 years to support ongoing client relationships. Engagement data is retained per the relevant SOW.
7. Sharing With Third Parties
We share personal data only with carefully selected processors (e.g., hosting providers, email service providers, analytics tools) under strict data processing agreements. We do not sell or rent your data. We may disclose data when legally compelled (court order, regulatory request).
8. International Transfers
Some service providers operate outside India. Where data is transferred internationally, we ensure appropriate safeguards (standard contractual clauses, vendor compliance certifications) are in place.
9. Your Rights
Under the DPDP Act 2023 you have the right to:
- Access your personal data we hold.
- Request correction of inaccurate data.
- Request erasure of your data (subject to legal retention requirements).
- Withdraw consent at any time.
- File a grievance with our Data Protection Officer.
To exercise any of these rights, email info@cyverna.in.
10. Cookies
Our website uses cookies for analytics and functionality. See our Cookie Policy for details and how to opt out.
11. Children's Data
We do not knowingly collect data from children under 18. If you believe a child has submitted data to us, please contact us and we will delete it.
12. Changes to This Policy
We may update this policy periodically. Material changes will be communicated via the website. The 'Last updated' date above always reflects the current version.
13. Contact & Grievance Officer
Grievance Officer: Dr. Sauraabh Bhatnagar, Chairman & CEO
Email: info@cyverna.in
Phone: +91 95193 05567
Address: Hyderabad, Telangana 500081, India