Privacy Policy

Who this covers

Prive Secure, also operating as PriveSecure, builds NyayaMitra, Astro Mitra, PriveSecure Certify, AICP, KaaryaSatya Verify, NyayaMitra for Business and the PriveSecure Platform. This policy applies across all of them unless a specific product tells you otherwise at the point you use it.

What we collect, by product

• NyayaMitra: your phone number, for OTP sign-in; the questions and documents you bring to the AI chat, which are sent to the AI models answering you; your plan and payment status if you upgrade.
• Astro Mitra: birth details and questions you provide for a reading, once the product is live.
• PriveSecure Certify: never the content of your documents. Certifying a file computes a cryptographic hash and a signature on your device; only that hash, the signature, and basic metadata such as timestamp and certifier identity ever reach our servers.
• KaaryaSatya Verify: candidate details submitted by our enterprise customers, only after consent is captured in one of two DPDP-compliant modes, and only for the purpose of the verification requested.
• AICP: usage and billing metadata from the AI systems our enterprise customers connect, not the content of their AI conversations.
• Contact form: whatever you type into it, your name, email, and message.

Why we use it

To provide the product you asked for, to bill you where a plan requires it, to respond when you contact us, and to improve accuracy across our AI products. We do not sell your data, and we do not build advertising profiles from it.

Who we share it with

• AI providers: NyayaMitra cross-checks answers across multiple AI models. Your query text is sent to those providers to generate a response.
• Payments: Razorpay processes payments on our behalf; we do not store your full card details ourselves.
• Verification rails: KaaryaSatya checks run through licensed third-party verification providers and EPFO data sources, governed by the consent captured for that check.

We do not sell any of this data to anyone else.

How long we keep it

Our default retention period is 15 days. For enterprise customers, retention windows can be configured per contract, and data may be kept longer where required by law.

Your rights

Under India's Digital Personal Data Protection Act, you can ask us what we hold about you, ask us to correct it, ask us to delete it, and withdraw consent at any time. Contact our Grievance Officer below to exercise any of these.

Security

Encrypted in transit and at rest. Role-based access internally. Full audit logs on anything touching personal data. PriveSecure Certify's on-device hashing means document content is never something we could lose, because we never receive it in the first place.

Children

Our products are built for adults making legal, financial and business decisions. They are not directed at children, and we do not knowingly collect data from anyone under 18.

Changes to this policy

We update the date at the top when this changes. Material changes to how we use your data will be communicated before they take effect.

Grievance Officer

Our Grievance Officer, as required under the Digital Personal Data Protection Act, is Anupam Baidya. You can reach him directly at anupambaidya@gmail.com.

Governing law

This policy is governed by the laws of India. Prive Secure is a unit of Prathibha's Make My Designz LLP, Bangalore, India.