Privacy Notice

1. Who we are

Xveave Technologies Private Limited ("Xveave", "we", "us", or "our"), a company incorporated in India and based in Bengaluru, is the Data Fiduciary responsible for the personal data described in this notice. This means we decide why and how your personal data is processed.

This notice applies to personal data we collect through this website, xveave.com, including our contact form and any email you send us.

2. The personal data we collect

We collect only the information you choose to give us. When you use our contact form, we collect:

• Your name
• Your company (optional)
• Your email address
• Your message — the details you share about what you are trying to do

If you email us directly, we receive whatever information you include in that email. We do not require you to create an account, and we do not ask for sensitive financial, government-ID, or special-category data — please do not send such information through the form.

Like most websites, our hosting infrastructure may automatically record limited technical information (such as IP address, browser type, and pages requested) in standard server logs, used only to keep the site secure and running.

3. Why we use your data, and our lawful basis

We use the personal data you provide to:

• respond to your enquiry and any follow-up questions;
• provide the information, materials, or walkthrough you request;
• discuss whether and how we might work together; and
• keep records of our correspondence with you.

Under the Digital Personal Data Protection Act, 2023, we process this data on the basis of the consent you give when you submit the contact form or contact us, and to take steps at your request. We do not use your data for automated profiling or advertising.

4. We do not sell your data

We do not sell, rent, or trade your personal data. We do not share it for anyone else's marketing.

5. Who may process it on our behalf

We may share your data with a small number of trusted service providers (Data Processors) who help us operate — for example, our website hosting and email providers. They may process your data only on our instructions, only for the purposes above, and under obligations of confidentiality and security. We do not transfer your data to any country restricted by the Central Government.

6. How long we keep it

We keep your personal data only for as long as needed to respond to you and to maintain a reasonable record of our correspondence — and no longer than 24 months after our last contact with you, unless a longer period is required to comply with law or to establish or defend a legal claim. After that, we delete or anonymise it. You may ask us to erase it sooner (see section 8).

7. How we protect it

We apply reasonable security safeguards appropriate to the nature of the data, including access controls and encryption in transit, to protect against unauthorised access, disclosure, or loss. No method of transmission over the internet is completely secure, but we take steps to protect your information and to notify the Data Protection Board of India and affected individuals in the event of a personal data breach, as required by law.

8. Your rights as a Data Principal

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access — obtain a summary of the personal data we hold about you and how we process it;
• Correction and completion — have inaccurate or incomplete data corrected, completed, or updated;
• Erasure — ask us to delete your personal data where it is no longer needed for the purpose it was collected;
• Grievance redressal — have your concerns addressed by us in the first instance (see section 11);
• Nomination — nominate another individual to exercise these rights on your behalf in the event of your death or incapacity; and
• Withdraw consent — at any time (see section 9).

To exercise any of these rights, email us at info@xveave.com. We will respond within the timelines required under applicable law.

9. Withdrawing your consent

You can withdraw your consent at any time by emailing info@xveave.com. Withdrawing is as easy as giving consent. When you withdraw, we will stop processing your data for the purposes you consented to, unless we are required or permitted by law to retain it. Withdrawal does not affect the lawfulness of processing carried out before you withdrew.

10. Children's data

This website and our services are intended for business and professional audiences and are not directed at children. We do not knowingly collect the personal data of anyone under 18 without verifiable consent from a parent or lawful guardian. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Contact us and our Grievance Officer

If you have any questions about this notice or how we handle your data, or if you wish to raise a grievance, please contact our Grievance Officer:

Grievance Officer
Xveave Technologies Private Limited, Bengaluru, India
Email: info@xveave.com

We will acknowledge and work to resolve your grievance within the timelines prescribed under the DPDP Rules. If you are not satisfied with our response, you may lodge a complaint with the Data Protection Board of India after exhausting this grievance mechanism.

12. Changes to this notice

We may update this notice from time to time to reflect changes in our practices or in the law. When we do, we will revise the "Last updated" date above. Please review this page periodically.