Legal

Privacy Policy

Effective date: 1 May 2025

Synvolve Intellis Private Limited (“Riya”, “we”, “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect information in relation to the Riya platform. It applies to platform operators (our customers) and, where applicable, their end-users.

This policy is aligned with India's Digital Personal Data Protection Act (DPDPA) 2023.

1. Information We Collect

Account & Registration Data: When you create a workspace, we collect your name, email address, company name, and billing information. This is necessary to provide and invoice the Service.

Usage Data: We collect data on how you interact with the platform — pages visited, features used, agent configurations, and API call logs. This helps us improve the Service and diagnose issues.

Conversation Data: Conversations handled by agents you deploy are logged and stored encrypted in your tenant's isolated data store. You, as the platform operator, are the data controller for your end-users' conversation data.

Knowledge Base Content: Documents you upload (PDFs, URLs, text) are stored and processed to power your agents' retrieval capabilities. This content remains yours.

Technical Data: IP addresses, browser type, device identifiers, and session identifiers collected automatically for security, fraud prevention, and platform stability.

2. How We Use Your Information

To provide, maintain, and improve the Riya platform.
To process billing and send invoices.
To send service notifications, product updates, and security alerts.
To respond to support requests and troubleshoot issues.
To monitor for abuse, fraud, and policy violations.
To comply with legal obligations under applicable Indian law.

We do not use your tenant's conversation data or uploaded documents to train any shared or public AI models. AI inference runs on your data solely to serve your configured agents.

3. Data Sharing

We do not sell your personal data. We may share data with:

Infrastructure providers (cloud hosting, database services) under strict data processing agreements, with data residency in India.
Payment processors for billing purposes only — limited to what is necessary to complete the transaction.
Legal authorities where required by law, court order, or to protect the rights and safety of users or the public.

4. Data Retention

Account data is retained for the duration of your subscription and for 30 days after termination, during which you may request a data export. Conversation logs are retained per your configured retention setting (default: 90 days). Billing records are retained for 7 years as required by Indian tax law.

5. Security

We implement industry-standard security measures including: AES-256 encryption at rest, TLS 1.3 in transit, per-tenant data isolation, role-based access controls, and regular security assessments. While we strive to protect your data, no method of transmission over the internet is 100% secure.

6. Your Rights

Under applicable law, you have the right to:

Access personal data we hold about you.
Request correction of inaccurate data.
Request erasure of your data (subject to legal retention obligations).
Export your conversation and configuration data.
Withdraw consent where processing is based on consent.

To exercise these rights, contact us at privacy@synvolveintellis.com.

7. Cookies

We use essential cookies for authentication and session management, and analytics cookies (anonymised) to understand platform usage patterns. You can disable non-essential cookies via your browser settings; this will not affect your ability to use the core platform.

8. Third-Party Integrations

The Riya platform integrates with third-party AI inference providers to power agent capabilities. These integrations are governed by their own privacy policies. We do not send personally identifiable information (PII) to third-party AI services without data processing agreements in place. Conversation data sent for inference is anonymised where technically feasible.

9. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. Continued use of the Service after the effective date of changes constitutes your acceptance of the updated policy.

11. Contact

For privacy-related questions or to exercise your rights, contact our Data Protection contact at privacy@synvolveintellis.com.

You also have the right to lodge a complaint with India's Data Protection Board once operational under the DPDPA 2023.