Privacy policy

Navodyx IP is operated by Navodyx Solutions Private Limited, Hyderabad, India. For the operational data your factory enters into the system, your company is the data fiduciary and we act as the data processor on your instructions. For our own website visitors and account holders, we are the data fiduciary.

• Account information: name, work email, mobile number, role, department and the company you belong to.
• Operational data you enter: production, stock, quality, maintenance, purchase, dispatch and accounting records, along with attachments and photographs your team uploads.
• Employee-related records where your company chooses to use the HR and payroll features: attendance, wages and statutory identifiers.
• Technical records needed to run and secure the service: sign-in times, IP address, device and browser type, and audit entries of actions taken.
• Support correspondence you send us.

We do not buy personal data, and we do not run advertising or third-party tracking on the application.

• To provide the service your company has subscribed to, including reports, documents and the assistant.
• To keep the service secure, prevent misuse and investigate incidents.
• To meet legal and statutory obligations, including tax and labour records your company must keep.
• To support you when you raise a request, and to notify you about changes to the service.

We do not use your operational data to train artificial intelligence models, and we do not share it with other customers.

Operational records are retained for as long as your company's subscription is active, and afterwards for the period agreed in your contract, so that statutory and audit obligations can be met. Retention schedules are configurable per data category inside the system, and administrators can see them. Audit and security logs are kept for a minimum of 180 days.

• Our sub-processors — cloud hosting, database, email delivery and AI model providers — under written agreements limited to serving you. The current list is available on request.
• Our support staff, only with time-bound access that is logged and shown to you on screen while it is active.
• Government or judicial authorities, only where the law compels us and, where permitted, after informing you.

Under the Digital Personal Data Protection Act, 2023 you may ask for access to your personal data, correction of anything inaccurate, erasure where retention is no longer required, and a summary of how it is processed. You may also nominate someone to exercise these rights on your behalf. If you use Navodyx IP through your employer, please raise the request with your company administrator first; we will act on their instruction.

To reach us directly, write to privacy@navodyx.com. We respond within 30 days.

Security measures are described in our security overview. If a personal data breach occurs, we notify affected customers and the Data Protection Board as required, and CERT-In within the timelines set by its 2022 directions.

If we change this policy in a way that materially affects you, we will inform account administrators by email before the change takes effect.