Privacy Policy

Skysavv OPC Private Ltd ("Skysavv", "we", "us", "our"), incorporated under the Companies Act 2013 with its registered office at Chembur, Mumbai – 400074, Maharashtra, India, operates the Skysavv platform and associated products including Paygent, Kosha, and ACOS AI (collectively, the "Services").

This Privacy Policy describes how we collect, use, share, and protect your personal data when you use our Services. It applies to all users of our website and platform, including users in India and the United States.

This policy is published in compliance with the Digital Personal Data Protection Act, 2023 ("DPDPA"), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), the Information Technology Act, 2000, and the California Consumer Privacy Act, 2018 ("CCPA") as applicable.

We collect the following categories of personal data:

• Account Information: Name, email address, and hashed password when you register.
• Usage Data: IP address, browser type, operating system, pages visited, time spent, and referring URLs collected automatically when you interact with our Services.
• Research and Platform Activity: Queries, documents uploaded, workflow sessions, and outputs generated via AI tools within the platform.
• Communications: Messages you send us via email, contact forms, or support channels.
• Payment Information: We do not store payment card details. All payment transactions are processed by Razorpay Software Pvt Ltd, an RBI-authorised Payment Aggregator. We receive only a transaction reference ID and payment status from Razorpay.
• Sensitive Personal Data (SPDI Rules 2011): To the extent financial credentials are involved during payment, they are processed exclusively by Razorpay and are never stored on Skysavv servers.

We process your personal data for the following purposes:

• To create and manage your account and provide access to the Services.
• To process payments and manage subscriptions through Razorpay.
• To improve, maintain, and debug our platform and AI models.
• To send transactional communications (account notices, billing receipts, service updates).
• To respond to support requests and communications.
• To comply with applicable laws, regulations, and legal processes.
• To detect, prevent, and address fraud, security breaches, or abuse.

We process your data only for the purposes described above and will not use it for incompatible purposes without obtaining fresh consent.

We do not sell your personal data. We may share your information with:

• Razorpay Software Pvt Ltd: For processing payments. Razorpay's handling of your data is governed by their own Privacy Policy and RBI regulations.
• Analytics Providers: We may use analytics services to understand usage patterns. These providers process data in accordance with their own privacy policies and are not permitted to use your data for their own purposes.
• Hosting and Infrastructure Providers: Third-party cloud services that host our platform infrastructure.
• Legal Authorities: When required by law, court order, or governmental authority in India or the United States.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All payment processing is performed by Razorpay Software Pvt Ltd, authorised by the Reserve Bank of India as a Payment Aggregator. Skysavv does not store, process, or transmit payment card data on its own servers.

In compliance with the RBI circular on Storage of Payment System Data (April 2018), all payment system data related to transactions on our platform is stored within India by Razorpay. Skysavv retains only transaction reference IDs and payment status for billing records.

By using paid features of our Services, you also agree to Razorpay's Terms of Service and Privacy Policy. We encourage you to review Razorpay's policies directly.

Your personal data is stored on servers located in India and/or the United States depending on the infrastructure provider. Payment data is stored exclusively in India per RBI requirements.

We implement reasonable technical and organisational security measures including:

• Encryption of data in transit (TLS 1.2 or higher) and at rest (AES-256).
• Access controls limiting data access to authorised personnel on a need-to-know basis.
• Regular security reviews of our systems and processes.

No method of transmission over the Internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

We retain your personal data for as long as your account is active or as necessary to provide the Services. Upon account deletion:

• Account and profile data is deleted within 30 days of your request.
• Billing and transaction records are retained for the period required under applicable Indian tax and accounting laws (typically 7 years under the Companies Act and GST legislation).
• Anonymised or aggregated data that cannot identify you may be retained indefinitely for analytical purposes.

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights with respect to your personal data:

• Right to Access (§11): Request a summary of the personal data we process and the purposes for which it is processed.
• Right to Correction and Erasure (§12): Request correction of inaccurate or incomplete data, or erasure of data no longer necessary for the purpose for which it was collected.
• Right to Grievance Redressal (§13): Lodge a grievance with us if you believe your rights have been violated. We will respond within the period prescribed under applicable law.
• Right to Nominate (§14): Nominate another individual to exercise your data rights in the event of your death or incapacity.
• Right to Withdraw Consent: Where processing is based on consent, withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at manoj@skysavv.com. We will respond within 30 days of receipt of your request.

If you are a California resident, you have the following rights under the California Consumer Privacy Act, 2018, as amended by the California Privacy Rights Act, 2020:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected, the sources, business purposes, and third parties with whom it is shared.
• Right to Delete: Request deletion of personal information we have collected, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: We do not sell or share your personal information for cross-context behavioural advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To submit a CCPA request, email manoj@skysavv.com with "CCPA Request" in the subject line. We will verify your identity and respond within 45 days.

Our Services are not directed to individuals under the age of 18 in India or under the age of 13 in the United States. We do not knowingly collect personal data from children under these ages. If you believe we have inadvertently collected such data, please contact us at manoj@skysavv.com and we will promptly delete it.

In compliance with DPDPA 2023, we do not process personal data of children without verifiable parental consent.

We use cookies and similar tracking technologies on our website. For detailed information about the types of cookies we use, how they work, and how you can manage them, please refer to our Cookie Policy.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on our website at least 14 days before they take effect. Continued use of our Services after the effective date constitutes acceptance of the updated policy.

In accordance with the Information Technology Act, 2000 and the DPDPA, 2023, if you have any grievance regarding our handling of your personal data, you may contact us at:

We aim to acknowledge grievances within 5 business days and resolve them within 30 days. If your grievance is not resolved to your satisfaction, you may approach the Data Protection Board of India established under the DPDPA, 2023.

This Privacy Policy is governed by the laws of India. Any disputes arising out of or in connection with this policy shall be subject to the exclusive jurisdiction of the courts in Mumbai, Maharashtra, India.