Privacy Policy

Digital Personal Data Protection & Privacy Policy

Effective Date: October 2026 | Governing Law: Digital Personal Data Protection Act, 2023 (DPDP Act) & Information Technology Act, 2000 (India)

Technovia Technologies ("Technovia", "Company", "We", "Us", or "Our") is an emerging enterprise software engineering and SaaS product organization headquartered in Noida (Sector 63), Uttar Pradesh, with operations in Patna and Mumbai, India. We are deeply committed to safeguarding personal data and respecting user privacy in strict accordance with the statutory laws of the Republic of India.

1. Scope & Legal Applicability

This Privacy Policy governs the collection, processing, storage, and protection of digital personal data obtained through our website (technovia.in), client portals, project scoping channels, job application systems, and professional communication channels in compliance with:

• The Digital Personal Data Protection Act, 2023 (DPDP Act 2023)
• The Information Technology Act, 2000 (Sections 43A, 72A)
• The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules)
• The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021

2. Information We Collect (Data Principal Information)

We collect personal information solely for lawful, explicit, and pre-notified business purposes:

• Direct Inquiries & Quotations: Full Name, Corporate Email Address, Contact Telephone Number, Organization Name, Job Title, and Project Technical Requirements.
• Recruitment & Careers: Full Name, Email, Phone, Current City, Resume/Curriculum Vitae (PDF/DOCX), Experience Details, Portfolio/GitHub links, and Current Compensation Details.
• Technical & Session Telemetry: Anonymized IP addresses, browser specifications, operating system details, referring URLs, and CSRF authentication cookies required for session security.

3. Lawful Grounds & Purpose of Processing

We process personal data based on explicit consent or specified legitimate operational grounds under the DPDP Act:

• To respond to service inquiries, conduct project feasibility assessments, and issue formal technical quotations.
• To execute and manage Master Services Agreements (MSAs), Statements of Work (SOWs), and non-disclosure obligations.
• To evaluate candidate suitability for open vacancies and manage recruitment workflows.
• To verify system security, prevent denial-of-service (DoS) attacks, and maintain server infrastructure integrity.
• Zero Third-Party Brokerage: We strictly DO NOT sell, rent, trade, or monetize personal information to data brokers, ad networks, or telemarketers under any circumstance.

4. Data Storage, Security & Encryption Standards

In accordance with Rule 8 of the SPDI Rules and the DPDP Act, Technovia enforces enterprise-grade security safeguards:

• In-Transit & At-Rest Encryption: All public web traffic is secured with 256-bit TLS/SSL encryption. Database storage utilizes parameterized queries, password hashing (Argon2id/Bcrypt), and secure storage buckets.
• Role-Based Access Controls (RBAC): Employee access to applicant resumes and client inquiries is strictly restricted to authorized HR, engineering, and account managers.
• Audit Logging: All administrative modifications and system access records are logged with immutable audit trails.

5. Rights of the Data Principal (Your Rights)

Under the Digital Personal Data Protection Act, 2023, you hold the following unconditional statutory rights:

• Right to Access Information: Request a summary of the personal data being processed by Technovia and the identity of any authorized processing partners.
• Right to Correction & Erasure: Request the correction, updating, or complete deletion of inaccurate, outdated, or unnecessary personal data from our active storage.
• Right of Grievance Redressal: Submit a complaint regarding data processing directly to our designated Grievance Officer.
• Right to Nominate: Nominate another individual to exercise your data rights in the event of death or incapacity.
• Right to Withdraw Consent: Withdraw your consent for non-essential communications (such as newsletters) at any time via written notice or unsubscribe links.

6. Data Retention Period

We retain personal information only for as long as necessary to fulfill the specific operational purpose for which it was gathered, or to comply with statutory legal, taxation, and corporate audit obligations under the Indian Companies Act and Income Tax Act. Career applicant resumes are retained for up to 12 months for prospective vacancy matching before secure purge.

7. Statutory Grievance Redressal Officer (DPDP Compliance)

In accordance with Section 6(8) of the DPDP Act, 2023 and Rule 5(9) of the Information Technology Rules, 2011, Technovia has designated an official Grievance Redressal Desk to handle concerns, complaints, or rights requests: