Privacy Policy

SaaviGenAI LLP builds AI security products, including the SaaviAIDR platform. We also provide managed security services and AI training. This policy explains what personal data we collect when you visit www.saavigen.ai, contact us, attend our events or sign in to SaaviAIDR. It also explains how we use and protect that data.

We follow India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"), the Information Technology Act, 2000, and the rules made under them.

1. What this policy covers

• Our website, www.saavigen.ai
• Emails, calls, WhatsApp chats and meetings with us
• Our events, webinars and training sessions
• Sign-in and account data for SaaviAIDR

This policy does not cover data that our customers process through SaaviAIDR or our managed services as part of their own business, such as AI usage logs and security alerts. We handle that data on our customer's behalf, under our contract with them. If your employer uses SaaviAIDR, please ask your employer how they handle your data.

2. What we collect

Data you give us

• Contact details: name, work email, phone number, company and job title.
• Your messages: what you send us through our contact form, by email or on WhatsApp, including your requirements.
• Event and training details: registration details and attendance.
• Job applications: your CV and the details in it, if you apply to work with us.

Data collected automatically

• Technical data: IP address, browser and device type, pages visited, and the date and time of your visit. Our hosting provider records this in server logs to keep the website secure and working.
• Preferences: settings such as light or dark mode are saved in your own browser and are not sent to us.

Data from SaaviAIDR sign-in

• If you sign in with Google: your name, email address, profile picture and Google account ID.
• Account security data: multi-factor authentication settings, sign-in times, IP address and device details, used to protect your account.

We don't ask for sensitive data such as bank details, health information or government ID numbers through our website. Please don't send them to us.

3. How we use your data

• To reply to your questions and requests
• To provide the demos, proposals, services and training you ask for
• To create, secure and run your SaaviAIDR account
• To send you updates about our services and events, only if you have agreed to receive them. You can unsubscribe at any time.
• To keep our website and products secure, and to detect and prevent fraud and misuse
• To improve our website and services
• To meet our legal duties and enforce our agreements

We process your personal data with your consent, or for a "legitimate use" allowed by the DPDP Act. One example is when you give us your details for a specific purpose, such as filling in our contact form. Another is when the law requires us to process it.

What we never do

• We do not sell or rent your personal data.
• We do not use your personal data for third-party advertising.
• We do not use the personal data you send us through this website to train AI models.

4. Signing in with Google

When you sign in to SaaviAIDR with Google, we receive only your basic profile: your name, email address and profile picture. We use this only to identify you and to create and secure your account. We do not access your Gmail, Google Drive, contacts or any other Google data.

SaaviGenAI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can remove our access at any time in your Google Account, under Security → Third-party apps & services. If you do, you will no longer be able to sign in with Google.

5. Cookies and similar technologies

Our website does not use advertising or tracking cookies. It only uses what it needs to work, such as remembering your display preference in your browser. You can clear this at any time in your browser settings.

SaaviAIDR uses essential cookies to keep you signed in and to protect your account. The app cannot work without them.

Our website links to other sites, such as WhatsApp and LinkedIn. Their own privacy policies apply when you use them.

6. Who we share your data with

We share personal data only when needed, and only with:

• Service providers that help us run our business, such as website hosting, email and cloud infrastructure. They may use your data only to provide their service to us, under contract.
• Google, when you use Sign in with Google.
• WhatsApp (Meta), when you choose to chat with us on WhatsApp.
• Professional advisers, such as lawyers and auditors, under a duty of confidentiality.
• Authorities, when the law requires it, or to protect the rights, property or safety of SaaviGenAI, our customers or others.
• A buyer or successor, if our business is merged or sold. Your data would stay protected under this policy.

7. Transfers outside India

Some of our service providers store data outside India. We transfer personal data only to countries the Government of India has not restricted under the DPDP Act, and with suitable safeguards in place.

8. How long we keep your data

• Enquiries: for as long as needed to respond and follow up, and then up to 24 months from our last contact
• Customer and account data: for the length of our contract, and then as long as needed for legal, tax and accounting reasons
• Security logs: for as long as needed to protect our systems, and for any minimum period the law requires
• Marketing preferences: until you unsubscribe

After that, we delete or anonymise your data.

9. How we protect your data

Security is what we do. We protect your data with:

• encryption in transit (HTTPS) and encryption at rest where supported
• need-to-know access and multi-factor authentication
• monitoring and logging
• regular reviews of our security controls

No system is completely secure. If a breach affects your personal data, we will inform you and the Data Protection Board of India as the law requires.

10. Your rights

Under the DPDP Act, you have the right to:

• Access: get a summary of the personal data we hold about you, how we use it, and who we have shared it with
• Correct and update: fix data that is wrong or incomplete
• Erase: ask us to delete your data once it is no longer needed, unless the law requires us to keep it
• Withdraw consent: at any time, as easily as you gave it. This does not affect anything we did before you withdrew.
• Raise a grievance: complain to us about how we handle your data
• Nominate: name someone to exercise these rights for you in case of death or incapacity

To use any of these rights, email contact@saavigen.ai. We may need to confirm your identity first. We aim to respond within 30 days, and always within the time the law allows. If you are not satisfied with our response, you can complain to the Data Protection Board of India.

If you live outside India, you may have extra rights under your local law. Contact us and we will help.

11. Children

Our website and services are for businesses and professionals. They are not meant for anyone under 18, and we do not knowingly collect children's data. If you believe a child has given us personal data, contact us and we will delete it.

12. Photos and videos at our events

We may take photos and videos at our events and training sessions and share them on our website and social media. If you don't want to appear, tell our team at the event or email us, and we will remove the content where we can.

13. Changes to this policy

We may update this policy from time to time. When we do, we will change the "Last updated" date above. If a change is significant, we will put a notice on our website or email you.