Privacy Policy
Last Updated: 28 October 2026
Scyverge Labs Private Limited ("Scyverge", "we", "us", or "our") respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store, share, and protect personal data when you visit our website at https://scyverge.com, submit an enquiry, or communicate with us.
Scyverge determines the purposes and means of processing personal data covered by this policy and acts as a Data Fiduciary under India's Digital Personal Data Protection Act, 2023 ("DPDPA"), where applicable.
This policy primarily covers our website and business enquiries. Separate contractual privacy and data protection terms may apply when we provide services to clients.
1. Personal Data We Collect
Information You Provide
When you contact us through our website, we collect the following information:
- Full Name: To identify you and address your enquiry.
- Company Name: To understand the organization you represent.
- Business Email Address: To respond to your enquiry and communicate with you.
- Phone Number: To contact you by telephone when appropriate.
Where our contact form includes additional fields, such as an area of interest or enquiry message, we also process the information you provide through those fields.
We may retain correspondence and other information you voluntarily share during subsequent communications.
Technical and Website Information
When you visit our website or submit an enquiry, our website infrastructure may process technical information such as:
- IP addresses.
- Browser and device information.
- Website request and server logs.
- Security session identifiers.
- Form security and abuse-prevention information.
We use this information to operate our website, maintain security, prevent misuse, and protect against unauthorized or automated submissions.
Please do not submit passwords, payment-card information, government identification numbers, confidential security assessment data, or other sensitive information through our general contact form.
2. How We Use Your Personal Data
We process personal data for the following purposes:
Responding to Enquiries
We use the information you submit to:
- Respond to your questions and requests.
- Understand your organization's cybersecurity requirements.
- Discuss relevant Scyverge services.
- Arrange consultations or meetings requested by you.
- Maintain correspondence relating to your enquiry.
Where consent is required, we obtain it through an appropriate consent mechanism before processing your enquiry.
Website Operations and Security
We process limited technical information to maintain website functionality, prevent spam, detect suspicious activity, and protect our systems.
Legal and Regulatory Obligations
We may process or retain information where necessary to comply with applicable laws, respond to lawful requests, or establish, exercise, or defend legal claims.
Marketing Communications
Submitting a contact enquiry does not automatically subscribe you to promotional communications.
Where consent is required for marketing, we will obtain it separately. You may opt out of marketing communications by following the instructions provided or contacting us.
We do not sell personal data or use website enquiry information for automated decision-making or profiling that produces legal or similarly significant effects.
3. Consent and Cookies
Contact Form Consent
Where we rely on consent, we request it through an appropriate consent mechanism.
You may withdraw your consent at any time by contacting legal@scyverge.com.
Withdrawal does not affect processing lawfully carried out before withdrawal. We will stop processing based on the withdrawn consent, subject to applicable legal requirements and any other lawful grounds for retaining information.
Cookies and Browser Storage
Our website uses essential cookies and browser storage to support website functionality, security, and form submissions.
Our current website configuration includes:
Cookie Notice Acknowledgement
The scyverge_consent local-storage entry records the date on which a visitor acknowledges the cookie notice. The acknowledgement is recognized for 180 days.
Local storage is not an HTTP cookie and is not automatically transmitted with website requests.
Security Session Cookie
The scyverge_session cookie supports contact form security through a randomly generated session reference. It does not contain the information entered into the contact form.
The website is configured to use appropriate security attributes for this cookie, including HttpOnly, SameSite, and Secure where applicable.
Our website does not currently use analytics, advertising, or behavioral tracking cookies.
If our use of cookies or tracking technologies changes, we will update the relevant disclosures and implement any required consent mechanisms.
For more information, please refer to our Cookie Policy, available through our website.
You may manage cookies and browser storage through your browser settings. Disabling essential cookies may affect certain website features, including contact form submissions.
4. Third-Party Service Providers and Subprocessors
Scyverge uses trusted third-party service providers to operate our website, manage business communications, and support our operations.
These providers may process limited personal data as necessary to deliver their services.
Our Service Providers
The information accessible to each provider depends on the services used and the configuration of our systems.
Where providers process personal data on our behalf, we seek to ensure that appropriate confidentiality, security, and contractual safeguards apply.
Some third parties may process information independently for purposes permitted by their own legal obligations and service terms.
We may also disclose information to professional advisers, regulators, or competent authorities where necessary and legally permitted.
We do not sell enquiry information to advertisers or share it with social media platforms merely because our website contains links to those platforms.
Changes to Service Providers
We may update our service providers as our operational requirements evolve.
Where changes materially affect the processing of personal data, we will update this policy or provide additional information as required by applicable law.
5. International Data Processing
Scyverge operates from India.
Our hosting, email, and technology providers may process or store certain information in India or other countries where they operate.
Where personal data is transferred or processed internationally, we will take appropriate measures to protect the information and comply with applicable data protection laws, including any relevant restrictions on international transfers.
You may contact us for further information about the processing locations and safeguards applicable to your personal data.
6. Data Retention
We retain personal data only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy or comply with applicable legal requirements.
Contact Form Enquiries
We aim to retain contact form submissions, enquiry emails, and related correspondence for no longer than 24 months from the original enquiry, unless:
- The information is no longer needed and can be deleted earlier.
- A continuing business relationship requires further retention under applicable terms.
- Applicable law requires or permits additional retention.
- Information is reasonably necessary for a legal claim or dispute.
Where an enquiry results in a client engagement, relevant records may be handled under the applicable contractual and retention requirements.
Website Security Information
Temporary security sessions and abuse-prevention information are retained for limited periods appropriate to their security purposes.
Our current website configuration uses security sessions valid for up to 30 minutes and abuse-prevention counters operating in 15-minute windows. Temporary security information is stored on the server and expired records are periodically removed.
Browser storage may remain on a visitor's device until it expires, is replaced, or is removed through browser settings.
When personal data is no longer required, we take reasonable steps to delete or securely dispose of it, subject to applicable legal and technical requirements.
7. Data Security
We implement reasonable technical and organizational safeguards designed to protect personal data against unauthorized access, disclosure, alteration, loss, or misuse.
Depending on the systems involved, these measures may include:
- Access controls and restricted permissions.
- Secure transmission of information.
- Server-side input validation.
- Form submission and abuse-prevention controls.
- Appropriate authentication and session management.
- Security monitoring and incident response procedures.
- Restricted access to business correspondence.
We periodically review our security practices and update safeguards where appropriate.
However, no website, transmission method, or electronic storage system can be guaranteed to be completely secure.
Visitors should not submit passwords, confidential credentials, or sensitive security assessment information through the general enquiry form.
8. Personal Data Breach Notification
If a personal data breach occurs, we will assess the incident, take appropriate steps to contain it, investigate its impact, and reduce the risk of further harm.
Where required by applicable law, including relevant provisions of the DPDPA and its rules when in force, we will notify the appropriate regulatory authorities and affected individuals within the applicable timeframes.
Notifications will include the information required by applicable law, which may include the nature of the incident, its potential consequences, protective measures, and relevant contact details.
9. Your Privacy Rights
Subject to applicable laws and their commencement, individuals may have rights relating to their personal data, including the right to:
- Request information about personal data being processed.
- Request correction, completion, or updating of inaccurate or incomplete personal data.
- Request erasure of personal data, subject to lawful retention requirements.
- Withdraw consent where processing is based on consent.
- Raise privacy grievances.
- Nominate another individual to exercise applicable rights in circumstances provided by law.
We will assess and respond to requests in accordance with applicable legal requirements.
These rights may be subject to lawful exceptions, limitations, and verification requirements.
10. Privacy Requests, Consent Withdrawal and Grievances
To exercise your privacy rights, withdraw consent, request deletion, or raise a concern about how we handle personal data, contact:
Email: legal@scyverge.com
Please include sufficient information for us to understand your request, such as the business email address used when contacting Scyverge.
We may request additional information where reasonably necessary to verify your identity and prevent unauthorized disclosure.
Please do not send identity documents unless specifically requested through an appropriate secure channel.
Grievance Handling
We aim to acknowledge privacy grievances within seven business days and resolve them within 30 days, subject to the nature and complexity of the request.
Where applicable law requires a shorter period or a different procedure, we will follow that requirement.
Where statutory grievance mechanisms apply, individuals may have the right to approach the relevant data protection authority after following the grievance process required by law.
11. Children's Privacy and External Websites
Children's Privacy
Our website and services are intended for businesses and professional users.
We do not knowingly solicit personal data from individuals under 18 years of age.
If you believe a child has submitted personal data through our website, please contact us so that we can review the matter and take appropriate action.
External Websites
Our website may contain links to third-party websites, including social media platforms.
These websites operate independently and may have their own privacy policies and data processing practices.
Scyverge is not responsible for the privacy practices of third-party websites that we do not operate or control.
We encourage visitors to review the privacy policies of external websites before sharing personal information.
12. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our website, business operations, service providers, or applicable legal requirements.
The latest version will be published on this page with an updated revision date.
Where required by applicable law, we will provide additional notice or obtain fresh consent before processing personal data for a new purpose.
We encourage visitors to review this page periodically.
13. Contact Us
If you have questions, concerns, or feedback regarding our privacy practices or wish to exercise your data rights under the DPDPA, please contact us at legal@scyverge.com. Our team is committed to protecting your data privacy and will take prompt action to address any valid concerns.