PRIVORA
Legal
Privacy Policy
CYBOT-X Technologies Private Limited processes personal data to operate Privora, bill customers, and secure the platform — not to sell your data.
Controller
CYBOT-X Technologies Private Limited (GSTIN: Pending CA confirmation) is the controller for marketing-site and account data. For tenant compliance content you upload, you are typically the controller and we act as a processor under your instructions and our DPA where executed.
What we collect
- Account identity: name, email, organisation, role
- Billing: address, GSTIN / tax IDs, invoices, Cashfree (and Razorpay when enabled) payment references
- Product telemetry needed to run, bill, and secure the service
- Support correspondence and demo requests
- Optional marketing analytics only after you accept on our consent banner
Legal bases
Contract performance (providing Privora), legitimate interests in securing and improving the service, legal compliance (tax, fraud prevention), and — with consent where required — limited marketing. We do not sell personal data.
Retention (matches product jobs)
- Gap Scanner public logs: 90 days (enforced by retention purge job)
- Marketing leads: up to 365 days unless a longer period is required by law or an open dispute
- Account and billing records: retained as required for tax, dispute, and security obligations
Subprocessors
Payment processing (Cashfree; Razorpay when enabled), hosting, email delivery, observability, and AI assistance providers process data only under contract. Enterprise customers may request the current subprocessors list and DPA template from support@cybot-x.com.
Your rights against Privora
Subject to law, you may request access, correction, or deletion of personal account data; we may refuse or limit requests that undermine security, fraud prevention, or mandatory retention. Use the public DSAR intake where published, or email support@cybot-x.com.
Grievance officer
Grievance Officer: Pending designation. Contact support@cybot-x.com with subject “Privacy grievance”. Named designation will be updated when finalized by the company.
Security
We apply administrative and technical controls appropriate to a multi-tenant compliance product (including MFA for privileged roles, audit logging, and TLS). No method of transmission or storage is perfectly secure; you remain responsible for account credentials and tenant configuration.