Section 1
1. Overview & Scope
Welcome to Nova Info Soft ("we", "us", "our", or the "Company"). We operate the website novainfosoft.com and provide software development, mobile application engineering, cloud infrastructure services, and proprietary business applications, including our Nova HRMS Platform, Collection Management System, and Home & Health Care Management Platform.
This Privacy Policy explains how we collect, store, process, transfer, and safeguard your personal details, business specifications, and operational information when you visit our website, submit project inquiries, engage our custom software engineering services, or use any of our software platforms.
Our Fundamental Promise: We never sell, lease, or monetize your personal information or proprietary business data to third-party data brokers or marketing agencies under any circumstances.
Section 2
2. Information We Collect
Depending on how you interact with our website and services, we collect information in the following categories:
A. Information You Voluntarily Provide
- Contact & Identity Details: Full name, corporate email address, contact phone number, company name, designation, and physical location submitted through our contact forms or consultation booking tools.
- Project & Technical Specifications: Project briefs, technical architectures, product requirements, wireframes, and business logic shared during scoping, estimation, and pre-sales consultations.
- Communication Records: Transcripts of emails, WhatsApp consultation messages, meetings, and feedback shared with our team.
B. Information Collected Automatically
- Device & Network Identifiers: IP addresses, browser user agent, operating system, screen resolution, and geographic region.
- Usage & Navigation Metrics: Pages visited, time spent per page, click paths, referring URLs, and error logs collected to diagnose performance bottlenecks and improve website stability.
C. Enterprise & SaaS Customer Data
When enterprises subscribe to or deploy our specialized software products (such as Nova HRMS or Collection Management), employee directories, attendance logs, and loan records are processed strictly under the client's administrative control as a Data Processor in accordance with our Master Services Agreement (MSA).
Section 3
3. How We Use Your Information
We collect and process your information exclusively for legitimate business, contractual, and technical purposes, including:
- Delivering Engineering Services: Scoping, architecting, building, testing, deploying, and maintaining custom web, mobile, and software solutions for your organization.
- Client Communications & Proposals: Responding to contact inquiries, sending detailed commercial proposals, project status updates, and milestone demonstrations.
- Customer Support & SLA Maintenance: Providing technical support, bug fixing, server monitoring, and continuous product upgrades.
- Billing & Account Administration: Generating invoices, processing milestone payments, and managing contractual documentation.
- Platform Security & Fraud Prevention: Protecting our systems against DDoS attacks, spam submissions, unauthorized access, and cyber vulnerabilities.
Section 4
4. Client Confidentiality & Non-Disclosure (NDA)
At Nova Info Soft, we recognize that your project ideas, source code, database architectures, and business workflows are invaluable intellectual assets.
Mutual NDA Protection: Before discussing sensitive technical requirements or receiving proprietary assets, we readily execute legally binding Mutual Non-Disclosure Agreements (NDAs) to protect all confidential material.
- All our software developers, system architects, and project managers work under strict confidentiality agreements.
- Code repositories, production credentials, and API tokens are restricted strictly on a need-to-know basis.
- Upon project handover and contract settlement, full ownership of custom developed code and assets is transferred entirely to the client.
Section 5
5. Security & Technical Safeguards
We employ industry-standard technical, organizational, and physical security measures to protect your data against accidental loss, unauthorized access, alteration, and disclosure:
- End-to-End Encryption: All web traffic is encrypted in transit using Transport Layer Security (TLS 1.2 / TLS 1.3) and secure cryptographic ciphers.
- Data At Rest Security: Stored databases and sensitive assets are secured behind strict firewall rules, with sensitive fields hashed or encrypted using industry-standard algorithms (AES-256 / SHA-256).
- Access Control & Auditing: Strict Role-Based Access Control (RBAC), multi-factor authentication (MFA) for development environments, and regular server access auditing.
- Secure Coding Standards: Development practices aligned with OWASP top 10 security guidelines to guard against SQL Injection, XSS, CSRF, and broken access controls.
Section 6
6. Third-Party Services & Cloud Infrastructure
We may engage vetted third-party vendors and cloud infrastructure providers to support our operations. These third parties are authorized to process data strictly on our behalf under enforceable data protection agreements:
- Cloud Hosting & Data Centers: Tier-3/Tier-4 cloud facilities (e.g., AWS, DigitalOcean, Google Cloud, cPanel Enterprise) with 24/7 physical security and automated backups.
- Communication APIs: Meta WhatsApp Cloud API / transactional email relays for delivering instant lead confirmations and operational notices.
- Payment Gateways: Secure PCI-DSS compliant banking channels and payment processors (e.g., Razorpay, Stripe) for milestone billing. We never store credit card or debit card numbers on our servers.
Section 7
7. Cookies & Analytics Technologies
Cookies are small text files placed on your browser to ensure website functionality and improve your browsing experience.
- Strictly Necessary Cookies: Required for CSRF token security, session preservation, and basic website navigation.
- Performance & Analytics Cookies: Used anonymously to understand visitor count, bounce rates, and popular services so we can enhance website responsiveness.
You can instruct your browser to refuse all cookies or indicate when a cookie is being sent. However, some functional parts of the website may require cookies to operate properly.
Section 8
8. Data Retention & Deletion
We retain personal information only for the duration necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is mandated or permitted by applicable law (such as tax, accounting, or regulatory requirements).
When data is no longer needed for business or legal purposes, we securely delete or anonymize it from our production servers and backup archives.
Section 9
9. Your Privacy Rights & Choices
Depending on your location and governing data protection laws, you may exercise the following rights regarding your personal data:
- Right to Access: Request a summary of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate, incomplete, or outdated personal details.
- Right to Erasure: Request the deletion of your personal data where retention is no longer legally necessary.
- Right to Withdraw Consent: Withdraw previously granted consent for marketing communications or data processing at any time.
To exercise any of these rights, please contact our privacy desk at Info@novainfosoft.com. We will process your verified request within 30 days.
Section 10
10. Compliance & Governing Law
This Privacy Policy is governed by and construed in accordance with the laws of India, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the principles of the Digital Personal Data Protection Act (DPDP Act).
For international clients located in the European Union (EU) or the United Kingdom (UK), we adhere to fundamental General Data Protection Regulation (GDPR) data handling and privacy standards.
Any disputes arising out of this policy shall be subject to the exclusive jurisdiction of the competent courts in Ahmedabad, Gujarat, India.
Section 11
11. Grievance Officer & Contact Us
In accordance with the Information Technology Act 2000 and the rules made thereunder, if you have any questions, grievances, or feedback concerning this Privacy Policy, please reach out to our designated Grievance Officer:
