1. Introduction
This Privacy Policy explains how IshaNova Concepts collects, uses, shares and protects your personal data when you visit ishanovaconcepts.com, buy a subscription licence for Praman, or contact us. We handle personal data in line with the Digital Personal Data Protection Act, 2023 and rules made under it, the Information Technology Act, 2000, and other applicable Indian law. By using our website or making a purchase, you agree to this Policy.
For the purposes of data protection law, IshaNova is the “Data Fiduciary” for the personal data described below.
2. Personal data we collect
| Category | Examples | How we get it |
|---|---|---|
| Contact and account details | Name, email address, mobile number, organisation name, designation | You provide it when you register, buy a licence or contact us |
| Billing details | Billing address, GSTIN (if you provide one), invoice history | You provide it at checkout |
| Transaction details | Plan purchased, amount, date, order ID, payment status, payment reference number | Generated at purchase; payment status is received from our payment gateway |
| Technical data | IP address, browser and device type, pages visited, log data, cookies | Collected automatically when you use the website |
Payment credentials. Card numbers, UPI IDs, net-banking and wallet credentials are entered on the secure page of our payment gateway and are processed by the gateway and your bank. We do not collect or store them. We receive only the payment result and a reference number.
3. Why we use your data
- To process your order, take payment, issue invoices and deliver your licence.
- To create and manage your account and provide customer support.
- To send service messages such as receipts, licence details, renewal reminders and important notices.
- To prevent fraud, secure our systems and enforce our terms.
- To meet legal, tax and accounting obligations.
- To improve the website and Praman, using aggregated or de-identified data where possible.
We process personal data with your consent, or for the “certain legitimate uses” permitted by law, such as performing a contract with you or complying with legal obligations. We send marketing messages only with your consent, and you can withdraw it at any time.
4. Who we share data with
We do not sell your personal data. We share it only as needed with:
- Payment gateway and banks — to process payments and refunds.
- Service providers — website hosting and cloud services, email and messaging providers, analytics, and accounting and invoicing tools, who act on our instructions and are bound by confidentiality.
- Professional advisers and authorities — auditors, lawyers, tax and other government authorities, courts and law-enforcement agencies, where we are legally required or to protect our legal rights.
- Successor entity — in a merger, acquisition or restructuring, subject to this Policy continuing to apply.
5. Cookies
We use cookies and similar technologies to keep the site working, remember your preferences, keep you signed in and understand how the site is used. You can control or delete cookies through your browser settings; some features may not work without essential cookies.
6. How long we keep data
We keep personal data only as long as needed for the purpose it was collected, and as required by law. Transaction, invoice and accounting records are kept for the period required under tax and company law (generally up to eight years). Account and support data are deleted or anonymised within a reasonable period after your licence ends and your account is closed, unless the law requires us to retain them.
7. Security
We use reasonable security safeguards, including encrypted (HTTPS) connections, access controls, and use of a PCI-DSS-compliant payment gateway. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the Data Protection Board of India of a personal data breach as required by law.
8. Where your data is stored
Your data is stored on servers located in India and in countries where our service providers have hosted from. Where data is transferred outside India, we do so only as permitted by law.
9. Your rights
Subject to applicable law, you have the right to:
- access a summary of the personal data we hold about you and how it is processed;
- correct, complete or update your personal data;
- request erasure of your personal data, where it is no longer needed and we are not required to retain it;
- withdraw consent at any time (this does not affect past processing);
- nominate another person to exercise your rights if you are unable to do so; and
- have your grievance addressed.
To exercise these rights, write to the Grievance Officer below. We may need to verify your identity first.
10. Children
Our website and Praman are intended for businesses and adults aged 18 and above. We do not knowingly collect personal data of children. If you believe a child has given us data, please contact us and we will delete it.
11. Third-party links
Our website may link to other sites, including our payment gateway. We are not responsible for their privacy practices; please read their policies.
12. Changes to this Policy
We may update this Policy from time to time. The “Last updated” date at the top shows the latest version. Material changes will be notified on the website or by email.
13. Grievance Officer and contact
| Grievance Officer | Mridul Thottoli, IshaNova Concepts (OPC) Private Limited |
|---|---|
| Address | ISHANOVA CONCEPTS (OPC) PRIVATE LIMITED B-403 WHISTLING WOODS OP, ROCKWELL, INT SCHOOL, RAJENDRA, NAGAR, RANAGAREDDY, TELANGANA, INDIA - 500075 |
| support@ishanovaconcepts.com | |
| Phone | +91 9966031110 |
| Response time | Acknowledgement within 48 hours; resolution within 30 days |
If you are not satisfied with our response, you may complain to the Data Protection Board of India, as provided under the Digital Personal Data Protection Act, 2023.