Privacy Policy

1. Introduction

Welcome to Infiverix. We are a SaaS platform built to help Indian startups manage DPDP Act compliance. Because data privacy is literally our business, we practice what we preach. We only collect what we need, we secure it heavily, and we never sell your data to third parties.

2. Data We Collect & How We Use It

When you use Infiverix, we collect the following:

• Account Information: Your name, email, and company domain to provision your workspace. Used for platform access and billing.
• End-User Data (Processed on your behalf): Email addresses of your customers who submit requests via the Infiverix widget. We process this strictly as a Data Processor to fulfill your DPDP Act obligations.
• Audit Logs: Timestamps and cryptographic hashes of resolved tickets to maintain your 30-day SLA compliance dashboard and generate immutable JSON audit receipts.
• Telemetry Data: Platform usage metrics to monitor bugs and uptime.

3. Artificial Intelligence (AI) Usage

Infiverix utilizes artificial intelligence and machine learning technologies to streamline compliance workflows, such as generating Privacy Notices and summarizing legal changes.

4. Sub-Processors & Third-Party Sharing

To operate our service securely, we use carefully vetted third-party sub-processors. We do not sell your data. We only share the minimum data necessary with:

• Clerk: Used exclusively for secure account authentication and session management.
• Resend: Used exclusively for sending transactional OTP verification emails to you and your users.
• Amazon Web Services (AWS): Used for secure, localized data hosting and infrastructure.

5. Data Storage & Security

Data Localization: All core database records and audit logs are securely stored on our AWS infrastructure located exclusively in the Mumbai (ap-south-1) region to comply with Indian data localization preferences.All core database records and audit logs are stored on AWS Mumbai Server keeping your data within India.

We employ strict tenant isolation mechanisms (Row-Level Security) to ensure your data is entirely siloed from other users on the platform.

6. Your Rights under the DPDP Act

As an Indian citizen, you have the right to:

• Access the personal data we hold about you.
• Correct any inaccuracies in your data.
• Right to Erasure: You can request the permanent deletion of your account and associated personal data at any time via your dashboard settings or by contacting us.

7. Jurisdictional Scope & Limitation

Infiverix is an Indian company that operates exclusively under the jurisdiction of the Digital Personal Data Protection (DPDP) Act, 2023 enacted by the Parliament of India.

Infiverix does not operate under, comply with, or make any representations regarding compliance with any international data protection regulations, including but not limited to:

• The European Union's General Data Protection Regulation (EU GDPR)
• The UK General Data Protection Regulation (UK GDPR)
• The California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA)
• The Personal Information Protection and Electronic Documents Act (PIPEDA, Canada)
• Any other foreign, international, or extra-territorial data protection framework

Our services, data processing infrastructure, and compliance tooling are designed solely for Indian Data Fiduciaries operating within the territory of India. If you are a business operating outside India, or if your primary user base is outside India, Infiverix is not the appropriate compliance solution for your needs.

All disputes arising out of or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts in Ahmedabad, Gujarat, India.

8. Contact Us

If you have any questions about this policy or your data, you can reach our Grievance Officer:
support@infiverix.com