Privacy Policy

At M/s Anant Nova ("Company", "We", "Us", or "Our"), represented by its founding partners Aaditya Chaudhary and Mohammad Nafis Ansari, we respect and protect the confidentiality of personal and business information entrusted to us by clients, users, and ecosystem collaborators.

This Privacy Policy sets forth our transparent data handling principles, explaining how we collect, use, process, secure, and retain your data when you interact with our website, platforms, software applications, or ecosystem delivery services.

This Privacy Policy is formulated, published, and enforced pursuant to:

• Section 43A and Section 72A of the Information Technology Act, 2000 (as amended).
• Rule 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
• The provisions, accountability standards, and data fiduciary guidelines of the Digital Personal Data Protection (DPDP) Act, 2023 of the Republic of India.

In our capacity as a Business & Technology Execution Ecosystem, we collect and process information strictly across three principal domains:

• Dual-End Administrative Access: To ensure uninterrupted development, automated testing, and ongoing continuous deployment, server credentials and administrator logins shall remain securely held at both ends (Anant Nova and the designated Client representative).
• Strict Prohibition on Arbitrary Data Access: Anant Nova explicitly covenants that its engineers, partners, and representatives shall never access, copy, harvest, download, or alter live production server data, customer databases, or transactional records unnecessarily. Access to live server environments will take place strictly during mutually agreed maintenance windows, scheduled code deployment runs, critical security patch updates, or upon the Client's explicit written direction.

• Purging of Operational Client Records: Raw operational documents, temporary business records, test datasets, and customer lists supplied solely for system testing and integration will not be retained long-term. Such temporary data is securely expunged and permanently purged from active environments within thirty (30) calendar days following final project acceptance and handover.
• Technical & Source Code Archival: Anant Nova securely archives custom source codes, repository versions, architectural schemas, and project configurations indefinitely within our encrypted private development infrastructure. This archival retention is strictly maintained to support the Client with emergency disaster recovery, bug isolation, security patch applications, and future feature upgrades.

• Zero Unauthorized Commercial Sale: Anant Nova maintains a strict zero-tolerance policy regarding data monetization. We do not sell, rent, trade, or distribute your personal data, business proprietary ideas, or contact details to third-party marketing companies, advertisers, or commercial data brokers.
• Need-to-Know Ecosystem Delivery: In delivering managed Tier 2 services (e.g., specialized print vendors, packaging manufacturers, bulk communication gateways), data disclosure is strictly restricted on a need-to-know basis and executed only upon prior Client approval.
• Statutory & Legal Compulsion: We may disclose data without prior notice only if compelled by a valid subpoena, court order, or official directive from an authorized statutory law enforcement authority under Indian law.

To demonstrate our technical capabilities to prospective clients, Anant Nova reserves the right to present completed websites, visual interfaces, public web URLs, and case study overviews across our digital portfolio and promotional channels.

Anant Nova implements industry-standard administrative, physical, and technical safeguards, including:

• SSL/TLS Encryption for all data in transit across web portals and APIs.
• Encrypted Development Environments with localized environment variables and secret managers.
• Access Controls with Multi-Factor Authentication (MFA) enforced across internal infrastructure and code repositories.
• Segmented Repositories & Zero-Trust Boundaries preventing cross-project code contamination.

While no digital infrastructure is entirely invulnerable, we conduct continuous monitoring to prevent unauthorized access, alteration, or disclosure, and maintain an active incident response procedure.

In accordance with the Digital Personal Data Protection Act, 2023, Clients and data principals retain the right to:

1. Request Access: Obtain a transparent summary of personal data processed by us and the processing activities undertaken.
2. Request Correction & Updating: Direct the correction, completion, or updating of inaccurate or misleading personal data.
3. Request Erasure: Request the deletion and erasure of personal data that is no longer necessary for the contractual purpose or statutory compliance.

This Privacy Policy shall be governed by and interpreted under the substantive laws of the Republic of India.

Any disputes arising out of data privacy practices, processing, or confidentiality breaches shall be resolved via arbitration under the Arbitration and Conciliation Act, 1996, seated in Mumbai, Maharashtra, India. The competent courts in Mumbai, Maharashtra, India, shall hold exclusive territorial jurisdiction.

Pursuant to Rule 5(9) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules and the DPDP Act, 2023, you may address inquiries, privacy grievances, or statutory requests to our designated desk: