Privacy Policy

1Introduction

AIQNova Private Limited (“AIQNova”, “we”, “us”, “our”) respects your privacy and is committed to protecting the personal data you entrust to us. This Privacy Policy applies to our website www.aiquantnova.com and to all software, applications, platforms, products and services we provide (collectively, the “Services”).

This Policy is published in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000 and rules made under them. By using our website or Services, you consent to the practices described here.

This Policy covers three groups:

• visitors to our website,
• businesses and individuals who engage AIQNova for software development and technology services,
• users of our digital products. Product-specific practices (such as document storage, DigiLocker fetch and sharing features) apply only where you use those products.

2Information We Collect

• Contact and account information: your name, mobile number and email address, collected when you correspond with us (for example by email or phone) or engage our services.
• Business and enquiry information: company name, designation, project requirements, budgets and related business details, where you engage or enquire about our software and technology services.
• Billing and engagement records: invoicing details, GSTIN and payment references for contracted services. Card and bank details are processed directly by our payment providers and are not stored by us.
• Device information and website usage: device model, operating system, browser version, IP address and pages visited, collected through cookies and similar technologies as described in Section 3.

Where you use our digital products, additional categories of data — such as documents and files you choose to store — are collected as described in the product-specific notices and disclaimers presented within those products, and are handled in accordance with Sections 6 to 9 of this Policy.

3Cookies, Website Analytics and Third-Party Links

When you browse www.aiquantnova.com, we use cookies and similar technologies as follows:

• Essential cookies — required for the website to function (for example, session management and security). These cannot be switched off.
• Analytics cookies — help us understand how visitors use the website (pages visited, approximate location, device type) so we can improve it. These are used only with your consent, which you can decline or withdraw through the cookie banner or your browser settings.
• No advertising cookies — we do not use cookies for third-party advertising or cross-site tracking.

Our website and Services may contain links to third-party websites (for example, government portals such as DigiLocker, or payment providers). We are not responsible for the content or privacy practices of those sites; their own policies apply once you leave our website.

4Purpose Limitation — How We Use Your Data

We use personal data only to operate our website and business: to respond to enquiries, deliver contracted services, raise invoices and process payments, provide support, keep our systems secure, and comply with law. Where you use our digital products, we additionally use data to provide those product features — such as storing your documents, sharing them when and with whom you instruct, and sending expiry and renewal alerts.

5Legal Basis and Consent

We process personal data on the basis of your consent, for the performance of a contract with you, and for other legitimate uses permitted under the DPDP Act. Consent is taken through a clear, affirmative action — when you register or submit a form, and separately before sensitive actions such as fetching a document from DigiLocker or sharing a document. Each consent is recorded with a timestamp in our consent logs so that we can demonstrate when and for what purpose it was given.

You may withdraw consent at any time through the privacy settings in the relevant Service or by writing to support@aiquantnova.com. Withdrawal may mean some or all of the Services can no longer be provided to you, and does not affect processing already carried out lawfully before withdrawal.

6Aadhaar and Sensitive Document Handling

Wherever our Services handle Aadhaar or similar sensitive identity documents:

• Full Aadhaar numbers are never stored on our servers. Uploads containing an Aadhaar number are automatically masked (hiding the first 8 digits) before storage.
• Documents from DigiLocker are fetched only with your explicit consent, through the official government APIs. We never see or store your DigiLocker or UIDAI credentials.
• We handle Aadhaar-related information consistent with the Aadhaar Act, 2016 and applicable UIDAI directions.

7DigiLocker Integration — How It Works

Where you choose to use the "Add from DigiLocker" feature, the following applies:

• You authenticate directly with DigiLocker. You are redirected to DigiLocker’s own secure login page (OAuth 2.0 with PKCE). Your DigiLocker username, password, MPIN and OTP are entered only on DigiLocker’s systems — they are never visible to, transmitted through, or stored by AIQNova.
• Consent is taken by DigiLocker. Before anything is shared with us, DigiLocker shows you a consent screen listing exactly which documents and profile details will be shared and for what purpose. We receive only what you approve, within the scopes approved for our application.
• What we receive. Issuer-signed documents (for example PDF/XML with the issuer’s digital signature) and limited profile information. Aadhaar is received in its masked/offline form; we do not receive or store your full Aadhaar number.
• Every fetch is logged. Each DigiLocker transaction is recorded in our audit logs with a timestamp and transaction reference, and appears in your in-app consent trail.
• Storage and deletion. Documents fetched from DigiLocker are stored encrypted like all your documents, and are deleted when you delete them or close your account, in line with Section 8.
• You can revoke access at any time — from your DigiLocker account settings or from within our Services. Revocation stops all future fetches; documents already saved in your vault remain until you delete them.

Our use of the DigiLocker APIs is authorised under and governed by our agreement with DigiLocker (Digital India Corporation / NeGD, Ministry of Electronics & IT), and we process documents fetched from DigiLocker in accordance with that agreement, the DPDP Act and this Policy.

8Storage, Security and Data Localisation

• Data is encrypted in transit (TLS 1.2 or higher) and at rest (AES-256).
• Data is hosted on servers located in India (AWS Asia Pacific – Mumbai region), consistent with Indian data-localisation expectations.
• Access to production systems is restricted, logged and reviewed, and our team is bound by confidentiality obligations.
• We retain personal data while your account or engagement is active. On account closure or completion of an engagement, personal data and documents are deleted within 30 days, except limited records we must keep under law (for example, tax and audit records).

9Sharing Your Data — Only on Your Instruction

Where our Services include sharing features, your documents are shared only when you instruct it, through time-limited expiry links that you create and control. No one else — including AIQNova staff — accesses the contents of your documents except as needed to operate the Services or as required by law.

To run the Services we use the following processor, bound by contract to our security and confidentiality standards:

• Cloud hosting: Amazon Web Services (AWS) — encrypted hosting and storage.

We may also disclose data where required by a court, government authority or applicable law, or to a successor entity in a merger or business transfer, subject to this Policy.

10Your Rights Under the DPDP Act

• Access a summary of the personal data we hold about you and how it is processed.
• Request correction, completion or updating of your data.
• Request erasure of your data and documents.
• Withdraw your consent at any time.
• Nominate another individual to exercise your rights in the event of death or incapacity.
• Raise a grievance with us and, if unresolved, approach the Data Protection Board of India.

To exercise any right, use the options within the relevant Service or write to support@aiquantnova.com.

11Grievance Officer

12Children

Our website and Services are intended only for users aged 18 years and above. We do not knowingly collect data from anyone under 18; if we learn we have, we will delete it.

13Data Breach Notification

If a personal data breach occurs, we will notify the Data Protection Board of India and affected users without undue delay, in the form and manner required under the DPDP Act, and take prompt steps to contain and remedy the breach.

14Changes to This Policy

We may update this Policy from time to time. The “Last updated” date above will change, and material changes will be notified on our website, within the relevant Service, or by email before they take effect. Continued use after the effective date constitutes acceptance.