Privacy Policy

1. Who We Are

V A D A Business Services Private Limited (CIN: U70200DL2024PTC435283), operating the Driskover platform and CaseRadar product at www.driskover.com, is the Data Fiduciary (under the Digital Personal Data Protection Act, 2023) and Data Controller (under the GDPR, where applicable) for the personal data described in this Privacy Policy.

Registered address: 310, GDITL Northex Tower A-09, Netaji Subhash Place, Pitampura, New Delhi – 110034, India
Contact: support@driskover.com

2. Scope

This Privacy Policy applies to personal data collected through: (a) the website www.driskover.com and its sub-domains; (b) contact and demo request forms; (c) pre-contractual and contractual business relationships; and (d) your use of any Services provided by VADA.

This Policy does not apply to: (a) data VADA processes as a service provider on behalf of its Clients (which is governed by the relevant client agreement); or (b) publicly available court and tribunal records, which are government records and not personal data controlled by VADA.

3. Personal Data We Collect

We do not knowingly collect or process sensitive personal data (as defined under the DPDP Act, 2023 and GDPR) unless strictly necessary and with explicit consent.

4. Purposes and Legal Bases for Processing

5. Cookies and Tracking

We use cookies and similar technologies. Please refer to our Cookie Policy for full details. Analytics cookies (Google Analytics 4) are only placed after you provide explicit consent via our cookie banner. Essential cookies are always active.

6. Data Sharing and Disclosure

We do not sell your personal data. We may share personal data in the following limited circumstances:

• Service Providers: With trusted third-party service providers who process data on our behalf (e.g., email delivery via Resend, payment processing via Razorpay, analytics via Google Analytics), subject to data processing agreements and appropriate safeguards;
• Legal Obligation: Where required by applicable law, court order, or regulatory authority;
• Business Transfers: In connection with a merger, acquisition, or sale of assets, subject to the incoming party assuming obligations under this Policy;
• With Your Consent: For any other purpose with your prior written consent.

We do not share personal data with advertisers or data brokers.

7. International Transfers

VADA's primary data storage is in India (AWS Mumbai / ap-south-1 region). Where data is transferred to processors outside India (e.g., Google Analytics, which may process data in the United States), such transfers are subject to Standard Contractual Clauses or equivalent safeguards as required under the DPDP Act, 2023 and applicable law.

8. Data Retention

9. Your Rights

Subject to applicable law and verification of identity, you have the following rights with respect to your personal data:

• Right to Access: Request a copy of personal data we hold about you;
• Right to Correction: Request correction of inaccurate or incomplete data;
• Right to Erasure: Request deletion of your personal data, subject to legal retention obligations;
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent, without affecting prior processing;
• Right to Grievance Redressal: Lodge a complaint with VADA's grievance officer or with the Data Protection Board of India (once established);
• Right to Data Portability: Request your data in a structured, machine-readable format (where technically feasible);
• Right to Object: Object to processing based on legitimate interests (GDPR, where applicable).

To exercise any of the above rights, contact us at support@driskover.com. We will respond within 30 days of a verified request. We reserve the right to verify your identity before processing any request and to decline requests that are legally exempt, manifestly unfounded, or excessive.

10. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, and disclosure. These include: HTTPS/TLS encryption in transit; access controls; server-side input validation; security headers; and periodic security reviews.

No method of transmission over the internet or electronic storage is completely secure. While we employ industry-standard safeguards, we cannot guarantee absolute security. In the event of a personal data breach, we will notify affected individuals and relevant authorities as required by applicable law.

11. Children

The Services are not directed at children under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at support@driskover.com and we will delete such data promptly.

12. Grievance Officer

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, the name and contact details of the Grievance Officer are:

13. Changes to This Policy

We may update this Privacy Policy from time to time. The revised Policy will be posted on this page with an updated effective date. Where changes are material, we will take reasonable steps to notify you. Your continued use of the Services after any update constitutes acceptance of the revised Policy.