Everything, on the record.

Privacy Policy

1. Introduction & Scope

This Privacy Policy governs how Inventum Technologies Private Limited ("Inventum," "we," "us") collects, uses, and processes personal data under:

• India's Digital Personal Data Protection Act, 2023 (DPDP Act)
• India's IT (Reasonable Security Practices) Rules, 2011
• EU General Data Protection Regulation (GDPR) where applicable

2. Data We Collect

• Account data: name, email, phone, organisation name, billing address
• Usage data: pages visited, features used, session timestamps (no third-party analytics)
• Payment data: processed by payment gateway; we store only masked card details and transaction references
• Support data: content of support tickets and correspondence

3. Legal Basis for Processing

• Contract performance — delivering the subscribed service
• Legitimate interests — security, fraud prevention, service improvement
• Legal obligation — tax records, regulatory compliance
• Consent — where explicitly obtained (e.g., marketing communications)

4. Purpose of Processing

• Provision and operation of the UnifyNEXT platform
• Billing, invoicing, and payment processing
• Customer support and incident response
• Security monitoring and abuse prevention
• Legal and regulatory compliance

5. Data Retention

Account data is retained for the duration of the contract plus 3 years for statutory purposes. Transaction records are kept for 7 years as required by Indian tax law. Support records are kept for 2 years.

6. Data Sharing

We share data only with:

• AWS (Amazon Web Services) — cloud infrastructure; servers located in Mumbai (ap-south-1)
• AWS SES — transactional email delivery
• Payment gateways as required to process transactions
• Law enforcement or regulators when legally required

We do not sell, rent, or trade personal data. No advertising networks, analytics platforms, or social media pixels are used.

7. Data Security

Data is transmitted over TLS 1.2+. Access to production systems is restricted to authorised personnel. We do not claim ISO 27001 or SOC 2 certification.

8. Your Rights

Under DPDP Act and GDPR you may request: access to your data, correction of inaccurate data, deletion of your data, restriction of processing, and portability. Contact: privacy@inventum.net

Grievance Officer: Inventum Technologies Private Limited, New Delhi, India. Response within 30 days.

9. Cookies & Tracking

This platform sets only strictly necessary session cookies required for authentication. No advertising cookies, analytics cookies, or third-party tracking scripts are loaded.

10. Children's Privacy

Our services are not directed at children under 18. We do not knowingly collect data from minors.

11. Data Breach Notification

In the event of a personal data breach, we will notify affected users within 72 hours (GDPR) or 30 days (DPDP Act) of becoming aware, where technically feasible.

12. Changes

Material changes will be notified by email 30 days in advance. Continued use after the effective date constitutes acceptance.

13. Contact

Inventum Technologies Private Limited · privacy@inventum.net · New Delhi, India

Terms & Conditions

1. Agreement to Terms

By accessing or using UnifyNEXT ("Service"), you agree to these Terms. If you are entering into this agreement on behalf of an organisation, you represent that you have authority to bind that organisation.

2. Description of Services

UnifyNEXT is an ISP billing and network management SaaS platform. Features available depend on the subscribed plan.

3. User Accounts

• You are responsible for maintaining the confidentiality of your credentials
• You must notify us immediately of any unauthorised access
• One account per organisation; sharing credentials between organisations is prohibited

4. Acceptable Use

You must not use the Service to: violate applicable law; infringe intellectual property rights; transmit malware or spam; attempt to gain unauthorised access to any system; resell the Service without written authorisation.

5. Intellectual Property

The platform, including all software, designs, and documentation, remains the exclusive property of Inventum Technologies. Your data remains your property. You grant us a limited licence to process your data solely to deliver the Service.

6. Fees & Payment

• Fees are as specified in your subscription plan
• Payment is due within 15 days of invoice date
• Late payments accrue interest at 1.5% per month
• We reserve the right to suspend access for overdue accounts after 30 days' notice

7. Service Availability

We target 99.5% monthly uptime for paid plans, excluding scheduled maintenance (notified 48 hours in advance) and events beyond our reasonable control.

8. Warranties & Disclaimers

The Service is provided "as is." We do not warrant that it will be error-free or uninterrupted. We disclaim all implied warranties to the extent permitted by law.

9. Limitation of Liability

Our total aggregate liability shall not exceed the fees paid by you in the 12 months preceding the claim. We are not liable for indirect, incidental, or consequential damages.

10. Termination

Either party may terminate with 30 days' written notice. We may terminate immediately for material breach or non-payment. Upon termination, your data will be available for export for 30 days.

11. Governing Law

These Terms are governed by the laws of India. Disputes are subject to the exclusive jurisdiction of courts in New Delhi.

Cookie Policy

What We Use

The UnifyNEXT platform uses only strictly necessary cookies required for authentication and session management. No advertising, analytics, or tracking cookies are set.

What We Do Not Use

• No advertising or retargeting cookies
• No analytics cookies (Google Analytics, Mixpanel, etc.)
• No social media pixels
• No cross-site tracking
• No third-party scripts loaded from external domains

Your Choices

Because we only use strictly necessary cookies, a consent banner is not required under applicable law. You may clear cookies at any time through your browser settings; doing so will log you out.

Data Processing Agreement

1. Parties

This DPA is between the Customer ("Controller") and Inventum Technologies Private Limited ("Processor") and forms part of the Terms & Conditions.

2. Scope of Processing

Inventum processes personal data on behalf of the Controller solely to deliver the UnifyNEXT platform services as described in the Terms.

3. Controller Obligations

• Ensure a valid legal basis exists for all personal data provided to us
• Ensure data subjects have been informed of processing as required by applicable law
• Notify us immediately of any data subject rights requests

4. Processor Obligations

• Process data only on documented instructions from the Controller
• Ensure personnel authorised to process data are bound by confidentiality
• Assist the Controller in fulfilling data subject rights requests
• Delete or return all personal data upon termination of services
• Notify the Controller without undue delay upon becoming aware of a personal data breach

5. Sub-processors

We use the following sub-processors:

We will notify you 30 days before adding new sub-processors. You may object within that period.

6. Security Measures

• TLS 1.2+ encryption in transit
• Access controls restricting data to authorised personnel
• Regular backups stored in the same AWS region
• Incident response procedures with defined escalation paths

7. Data Transfers

Personal data is stored in India (AWS Mumbai). We do not transfer personal data outside India except as required by applicable law or as explicitly requested by the Controller.

8. Audit Rights

The Controller may request a written summary of our security practices once per year. We will respond within 30 days. We do not provide third-party audit reports as we do not hold ISO 27001 or SOC 2 certification.

9. Breach Notification

We will notify the Controller within 72 hours of becoming aware of a personal data breach affecting their data, providing: the nature of the breach, categories and approximate number of data subjects affected, likely consequences, and measures taken.

10. Term & Termination

This DPA remains in effect for the duration of the subscription. Upon termination, we will delete or return Controller data within 30 days, unless retention is required by law.

11. Governing Law

This DPA is governed by the laws of India. Disputes are subject to the courts of New Delhi.