Privacy Policy

Niravana is an AI agency and digital studio based in Hyderabad, Telangana, India. We build websites, AI products, and automation for startups and enterprises.

This policy explains what personal data we collect through niravana.in, how we use it, and what rights you have over it. It also covers how we handle data belonging to our clients and their users during a project.

For anything in this policy, write to us at info@niravana.ai.

We collect only what we need, and we tell you why.

• —Information you give us: name, email address, company, phone number, and whatever you write in the message field when you submit our contact form or book a call.
• —Project information: material you share with us during an engagement — brand assets, documents, credentials, access to systems, and content for the product we are building.
• —Usage data: pages visited, time on page, referring site, approximate location, browser and device type, collected through analytics.
• —Technical logs: IP address, request time, and user agent, recorded automatically by our hosting provider for security and diagnostics.

• —To reply to your enquiry, prepare a proposal, and run a project we have agreed to deliver.
• —To send you project updates, invoices, and service communications.
• —To understand which pages and content are useful, so we can improve the site.
• —To keep our systems secure and to detect abuse.
• —To meet legal, tax, and accounting obligations in India.
• —We do not sell your personal data. We do not share it for anyone else’s advertising.

Under India’s Digital Personal Data Protection Act, 2023, we process your personal data on the basis of the consent you give when you submit a form or engage us, and on the basis of legitimate uses permitted by the Act — including performing a contract you have entered into with us and complying with law.

Where the GDPR applies because you are in the European Economic Area or the United Kingdom, we rely on your consent, the performance of a contract, and our legitimate interest in operating and improving our business.

You can withdraw consent at any time. Withdrawing it does not affect processing already carried out, and may mean we can no longer deliver a service you asked for.

When we build AI products, we often handle data that belongs to our clients or to their users. That data is theirs, not ours. We act as a processor on their instructions, under the engagement agreement signed with them.

• —We do not use client data to train our own models, and we do not repurpose it for other clients.
• —Where a project sends data to a third-party model provider, we configure the integration to use commercial endpoints that exclude the data from provider training, and we tell the client which providers are involved before we build.
• —We apply data minimisation and PII redaction at the boundary layer, so personal data is not sent to a model unless the use case genuinely requires it.
• —Access to client environments and credentials is limited to the people on that project, and revoked when the engagement ends.

We use a small number of trusted providers to run this site and our business. Each one only receives the data it needs to perform its function.

• —Hosting and delivery — Vercel, which processes request logs and serves the site.
• —Analytics — Google Analytics, which measures site usage. It sets cookies and processes usage data.
• —Email and communication — the providers we use to receive your enquiry and correspond with you.
• —AI model providers — engaged on a per-project basis, disclosed to the client, and governed by the applicable data processing terms.

This site uses cookies that are strictly necessary for it to function, and analytics cookies that help us understand how the site is used.

You can block or delete cookies in your browser settings. Blocking necessary cookies may stop parts of the site from working. If you are in a region that requires prior consent for analytics cookies, analytics is loaded only after you consent.

• —Enquiries that do not become projects: up to 24 months, then deleted.
• —Client and project records: for the duration of the engagement and for as long afterwards as Indian tax and contract law requires.
• —Analytics data: according to the retention period configured in Google Analytics.
• —Server logs: a short rolling window kept by our hosting provider for security purposes.

We use encrypted connections (HTTPS) across the site, restrict access to project systems on a need-to-know basis, and require authentication on the tools that hold client data.

No system is perfectly secure. If a breach occurs that is likely to affect you, we will notify you and the Data Protection Board of India as the DPDP Act requires.

Under the DPDP Act 2023, and under the GDPR where it applies to you, you have the following rights over your personal data.

• —Access — ask what personal data of yours we hold and how we process it.
• —Correction — have inaccurate or incomplete data corrected, completed, or updated.
• —Erasure — ask us to delete your data where we no longer need it and no law requires us to keep it.
• —Withdraw consent — at any time, as easily as you gave it.
• —Nominate — nominate another person to exercise these rights on your behalf in the event of your death or incapacity.
• —Grievance redressal — raise a complaint with us and receive a response, before escalating to the Data Protection Board of India.
• —To exercise any of these, email info@niravana.ai. We will respond within the time the law allows.

Some of our providers store or process data outside India. Where that happens, we only use providers that offer contractual protections consistent with the DPDP Act and, where relevant, the GDPR’s transfer requirements.

This site and our services are meant for businesses, and are not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, write to us and we will delete it.

We may update this policy as our services, our providers, or the law changes. The effective date at the top always reflects the current version. Material changes will be announced on this page.

For any question, request, or complaint about privacy, contact us at info@niravana.ai and we will route it to the person responsible for data protection.

Niravana, My City Residency, Sri Sai Nagar, Pragathi Nagar, Hyderabad, Telangana 500090, India.

If you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India.