Privacy Policy — Exuverify Private Limited

1. Who we are (the Data Fiduciary)

This website, exuverify.com, is operated by Exuverify Private Limited ("Exuverify", "we", "us", or "our"), a company incorporated in India. For the purposes of the DPDP Act, Exuverify Private Limited is the Data Fiduciary that determines the purpose and means of processing your personal data.

Legal entity: Exuverify Private Limited
Registered office: O-511, Eye of Noida, Sector 140A, Noida 201304, Uttar Pradesh, India
Contact: info@exuverify.com · +91 90499 94081

2. Data Protection Officer & grievance contact

We have appointed a Data Protection Officer (DPO) as the point of contact for any question, request, or grievance about how your personal data is handled. You can reach the DPO at any time:

Data Protection Officer: Tarun Gupta
Email: tarun@exuverify.com
Postal: Data Protection Officer, Exuverify Private Limited, O-511, Eye of Noida, Sector 140A, Noida 201304, India

We aim to acknowledge every grievance within 72 hours and resolve it within the timelines prescribed under the DPDP Act and its Rules. If your grievance remains unresolved after you have exhausted our redressal process, you may escalate it to the Data Protection Board of India under Section 13(2) of the DPDP Act.

3. What personal data we collect

We collect only the personal data we need for the purposes described below:

Contact & enquiry data — your name, work email, company name, and the message you send us through our contact form or by email.
Phone number — if you choose to call us or share it in an enquiry.
Technical & usage data — with your consent, cookies and similar technologies may collect your device/browser type, approximate location (from IP), and pages viewed, to help us understand and improve the site.

3a. Children's data — this is an adult, business service

Exuverify is a business-to-business (B2B) service intended for professional users aged 18 and over. Our website and services are not directed at, marketed to, or intended for use by children (individuals under the age of 18). We do not knowingly collect the personal data of children, and we do not carry out any behavioural monitoring of, or targeted advertising directed at, children.

As required by Section 9 of the DPDP Act, if we ever became aware that we had inadvertently collected the personal data of a child without verifiable consent of a parent or lawful guardian, we would delete it promptly. If you believe a child has provided us personal data, contact our DPO at tarun@exuverify.com and we will remove it.

4. Why we process your data (purposes)

To respond to your enquiry — we use your name, email, company, and message only to reply to the request you submit and to follow up about it.
To provide and improve our services — where you engage us for security, IT, or DPDP compliance work.
To improve the website — analytics cookies (only if you consent) help us see which content is useful.
To meet legal obligations — where the law requires us to retain or disclose certain records.

We rely on your consent as the lawful basis for processing under Section 6 of the DPDP Act, except where a "legitimate use" under Section 7 applies (for example, responding to a request you voluntarily initiate).

5. Cookies and consent

We do not set non-essential cookies (such as analytics or marketing cookies) until you give consent through our consent banner. The banner lets you accept or reject each category of cookie independently, and you can change or withdraw your choice at any time using the "Manage consent" / "Cookie preferences" link in the footer of every page. Withdrawing consent is as easy as giving it, and does not affect the lawfulness of processing carried out before withdrawal.

6. Your rights as a Data Principal

Under the DPDP Act you have the following rights. To exercise any of them, email our DPO at tarun@exuverify.com with your request; we will verify your identity and respond within the statutory timeline.

Right to access (Section 11) — obtain a summary of the personal data we process about you and the processing activities involved.
Right to correction and updating (Section 12) — have inaccurate or incomplete personal data corrected, completed, or updated.
Right to erasure / deletion (Section 12(b)) — request deletion of your personal data where it is no longer needed for the purpose it was collected, subject to any legal-retention obligations we must comply with.
Right to grievance redressal (Section 13) — a readily available means of registering a grievance with us (see Section 2 above), and to escalate to the Data Protection Board if unresolved.
Right to nominate (Section 14) — nominate another individual to exercise your rights on your behalf in the event of your death or incapacity. To record a nominee, contact our DPO.

7. How we share data & cross-border transfers

We do not sell your personal data. We share it only with:

Processors acting on our behalf — service providers (for example, hosting, email, and our own ProtectComply consent platform) who process data under contract and only on our instructions.
Authorities — where disclosure is required by law.

Some of our service providers may process personal data on servers located outside India. Where that happens, the transfer is made in accordance with Section 16 of the DPDP Act and subject to any restrictions notified by the Central Government, with appropriate contractual safeguards in place. We keep the list of such recipients and regions current and will disclose the categories on request.

8. How long we keep data

We retain personal data only for as long as necessary to fulfil the purpose it was collected for, or as required by applicable law. When data is no longer required, we delete or anonymise it.

9. How we protect data

We apply reasonable security safeguards — including encryption in transit (HTTPS), access controls, and the minimisation of what we collect — to protect personal data against unauthorised access, disclosure, or loss, as required by Section 8(4) of the DPDP Act.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by the "Last updated" date above. Please review this page periodically.

11. Contact us

For any privacy question, request, or grievance, contact our Data Protection Officer, Tarun Gupta, at tarun@exuverify.com, or write to Exuverify Private Limited, O-511, Eye of Noida, Sector 140A, Noida 201304, India.