Privacy Policy

Effective Date: 4 Sep 2025

This Privacy Policy (the “Policy”) describes how Rignova Cloud Private Limited (“Rignova,” “we,” “us,” or “our”) collects, uses, discloses, and protects the personal data of our Customers and their Users in connection with the Rignova Cloud SaaS platform (the “Service”).

By using our Service, you agree to the collection and use of your personal data as described in this Policy.

---

1. Scope and Applicability

This Policy applies to all personal data processed by Rignova in our capacity as a Data Fiduciary (for data we control, like account information) and as a Data Processor (for Customer Data we process on your behalf).

Given our global presence, we are committed to complying with applicable data protection laws, including but not limited to:

• India: The Digital Personal Data Protection Act, 2023 (DPDPA)
• European Union: The General Data Protection Regulation (GDPR)
• United States: The California Consumer Privacy Act (CCPA) and other state-specific laws.

2. Information We Collect

We collect different types of information depending on your interaction with our Service.

• 2.1. Customer and User Account Data: When you sign up for the Service, we collect personal data necessary to create and manage your Account. This may include:
  • Full name
  • Company name and contact information
  • Email address
  • Phone number
  • Billing and payment information
• 2.2. Customer Data (Processed on Your Behalf): As a multi-tenant platform, our primary function is to process data on behalf of our Customers. We do not own this data. This can include any data that you or your Users submit to the Service, such as:
  • Business operations data
  • Employee or client information
  • Notes, documents, and files
  • Any other data you choose to upload.
• 2.3. Log Data and Usage Information: When you use the Service, we automatically collect data about your use of the platform. This includes:
  • IP address
  • Browser type and version
  • Operating system
  • Pages or features of the Service you visit
  • Time and date of your access
  • Diagnostic and crash data.
• 2.4. Cookies and Tracking Technologies: We use cookies and similar technologies to enhance your experience, analyze trends, administer the Service, and track your movements. You can control the use of cookies through your browser settings, but this may limit your ability to use certain features of the Service.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To Provide and Maintain the Service: This is our primary purpose, which includes:
  • Creating and managing your Account.
  • Processing your payments.
  • Providing customer support.
  • Delivering a geo-distributed and reliable Service.
• To Improve the Service: We use usage data to understand how the Service is used, which helps us to improve features, functionality, and performance. We may use aggregated and anonymized data for this purpose.
• For Communication: We may use your contact information to send you transactional emails (e.g., billing, account notifications) and, with your consent, promotional and marketing communications.
• For Security and Fraud Prevention: We use log and usage data to monitor for and prevent fraudulent activity, unauthorized access, and security threats.
• To Comply with Legal Obligations: We may use your information to comply with legal processes, regulatory requirements, or to respond to lawful requests from public authorities.

4. How We Share and Disclose Information

We do not sell, rent, or trade your personal data. We may share your information only in the following circumstances:

• With Your Consent: We will share your information if we have your explicit consent to do so.
• With Third-Party Service Providers: We use third-party vendors and service providers to perform functions on our behalf. This includes hosting providers, payment processors, and analytics services. These providers are contractually obligated to protect your data and use it only for the purposes for which we disclose it to them.
• For Legal Reasons: We may disclose your information to a third party if we believe that disclosure is reasonably necessary to:
  • Comply with a legal process or government request.
  • Enforce our Terms and Conditions.
  • Protect the rights, property, or safety of Rignova, our Customers, or the public.
• In a Business Transaction: If Rignova is involved in a merger, acquisition, or sale of all or a portion of its assets, your information may be transferred as part of that transaction.

5. International Data Transfers

Our Service is geo-distributed, meaning Customer Data may be stored, processed, and accessed in various data centers globally to optimize service delivery. By using the Service, you consent to the transfer of your data to countries outside of your primary business location.

• GDPR Compliance: For data of EU residents, we ensure that transfers to countries outside the European Economic Area (EEA) are conducted using a valid legal mechanism, such as standard contractual clauses (SCCs) or other appropriate safeguards as required by GDPR.

6. Your Data Protection Rights

Depending on your jurisdiction, you may have specific rights regarding your personal data. We are committed to honoring these rights.

• Right to Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You can request that we correct any inaccurate or incomplete personal data.
• Right to Erasure ("Right to be Forgotten"): You have the right to request the deletion of your personal data under certain conditions.
• Right to Object: You may object to the processing of your personal data for marketing purposes.
• Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

To exercise any of these rights, please contact us at legal@rignova.com. We will respond to your request within the timeframes required by applicable law.

7. Data Security and Retention

We implement commercially reasonable technical and organizational security measures to protect your personal data against unauthorized access, use, alteration, and disclosure.

We retain your personal data for as long as your Account is active and for a reasonable period thereafter to comply with our legal obligations, resolve disputes, and enforce our agreements.

8. Responsibility for Customer Data

As a Data Processor, we process Customer Data strictly on your instructions as the Data Fiduciary. It is your responsibility to ensure that:

• You have a lawful basis to collect and process the personal data you upload to the Service.
• You have obtained all necessary consents from your Users as required by law.
• Your collection, processing, and use of Customer Data comply with all applicable laws and regulations.

9. Changes to This Privacy Policy

We may update this Policy from time to time. We will notify you of any material changes by posting the new Policy on this page and updating the "Effective Date." We encourage you to review this Policy periodically.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Rignova Cloud Private Limited
Email: legal@rignova.com
TREC-STEP Campus
Thuvakudi, Tiruchirappalli - 620015
Tamil Nadu, India