Privacy Policy

This privacy policy (hereinafter “Privacy Policy”) governs the collection, use, storage, disclosure, transfer or processing of personal information by NirvanaAISutra (hereinafter “Nirvana” OR “we” or “us”) or other software and application, in relation to the services offered on our platform.

Any external links to other websites are clearly identifiable as such, and we are not responsible for the content or privacy policies of the other websites. We recognize the importance of privacy and are committed to safeguard the personal information shared with us. We make it our priority to ensure that the users’ (hereinafter “you” or “your”) personal information remains secure and confidential and is used only for the intended purpose. This Privacy Policy details our practices regarding personal information collected, in compliance with the Digital Personal Data Protection Act, 2023 and the corresponding rules and General Data Protection Regulation (hereinafter all rules are collectively referred as “Data Protection Laws”).

By using our services and accepting the terms of this Privacy Policy, you consent to our data practices as described herein.

Introduction

Purpose: This Privacy Policy explains our practices regarding the collection, processing, and sharing of personal information provided by you through the website. This Privacy Policy is intended to ensure that your personal information is handled in a transparent and secure manner in compliance with the Data Protection Laws.

Scope: This Privacy Policy applies to personal information collected through our website and any related services provided by Nirvana. This also includes information gathered from users during the course of accessing our services, submitting information, interacting with our features, or engaging with our platform.

Nirvana may change or amend this Privacy Policy from time to time to incorporate necessary future changes. The use of data by Nirvana shall always be in adherence to this Privacy Policy The updated Privacy Policy will be posted on our website, and we will notify you of any material changes.

Our services are intended for all age groups, including minors, teenager (individuals under the age of eighteen (18)) and adults. When the user is a minor or teenager, we don’t directly collect the data from them instead it is collected through consent provided by their parents or guardian.

Please read through this Privacy Policy to better understand what data we use and how we use your data for each of the above classifications.

Collection of Data.

Identifiable Information. We collect personal data that can be used to identify you, such as: name, email address, contact number, gender, location, date of birth, medical data and other identifying and sensitive personal details that you voluntary provide (“Personal Data”). This data is collected at one instances: when you directly access the Nirvana website, you can log in directly to our platform. Here also, our interface will prompt you to verify your identity via an OTP sent to your contact number. Once the OPT verifies you, you will proceed to access our website. After your registered contact number is verified, you are required to submit your Personal Data that can be used to identify you while accessing the services provided by us.

Non-identifiable Information. As you use the website or services as provided by us, our back-end server may automatically log the standard data provided by your browser. This data is considered “non-identifiable data,” as it does not personally identify you on its own. It includes, but is not limited to: browser type, IP address, geo-location data, etc. We also collect information to understand your preferences based on the responses provided by you for the questions asked while accessing our website or Services.

Third party data sharing clause.

Purpose of Data Collection and Processing.

We collect and process personal Data for the following purposes:

• To process solely for legitimate business and operational purposes;
• Analyse the collective information provided by you to provide
• To create a database for the purpose of analysing consumer behaviour wellness services, including behavioural assessments, psychiatrist consultations, and guided wellness practices.
• To offer an improved user experiences – we use the information (both Personal Data and non-identifiable data) to assist us to improve and optimize our services and to personalize and customize your experience;
• Communication, marketing, and promotional activities – we may use information to deliver and personalize our communication with you.

Legal Basis for Data Processing

Consent: Your consent is the primary legal basis for processing your Personal Data. By using our platform, you provide explicit consent for the collection and processing of your Personal Data.

Contractual Necessity: In some cases, we may process your data to fulfil our contractual obligations to you, such as providing services, or delivering customer support.

Legal Obligations: We may be required to process your data to comply with applicable laws, regulations, court orders, or government requests.

Legitimate Interests: We may process your data for legitimate business interests, such as improving our services, enhancing security, or conducting business analytics, provided such processing does not override your fundamental rights.

Sharing User Data.

We may share your Personal Data with trusted third-parties service providers, healthcare professionals, regulatory authorities, and affiliated partners, strictly for legitimate business and legal purposes.

We may share your Personal Data for medical and wellness services, with psychiatrists, healthcare professionals, and certified wellness practitioners to facilitate consultations and treatment plans.

We may share your payment processing data to secure third-party payment gateways, ensuring compliance with financial regulations.

We may share your non identifiable data for analytical and platform improvement purposes with data scientists and technology partners who assist in optimizing user experience.

We may disclose your Personal Data to comply with legal obligations, including: (i) responding to legal requests from governmental authorities; or (ii) complying with any judgment or decree or order issued under any law or any judgment or order relating to claims of contractual or civil nature under any law for the time being in force outside India.

We may share your Personal Data in the event of medical emergency involving a threat to life or in the event of an immediate threat to life.

We may share your Personal Data in the event wherein it is required to apply appropriate measures to provide medical treatment or health services for you.

We shall share your information with the authorities, as and when required, to ensure safety, or provide assistance or services during any disaster, or any breakdown of public order.

Data Security and Retention

We implement appropriate technical and organizational measures to protect your Personal Data from unauthorized access, misuse, loss, or alteration. This includes firewalls, and secure server protocols.

We retain your Personal Data for as long as necessary to fulfil the purposes outlined in this Privacy Policy or as required by law. Once your data is no longer required, it will be securely deleted or anonymized.

In the event of data breach, we will promptly notify you and the appropriate authorities in accordance with applicable laws and regulations.

Rights under the Data Protection Laws

As a User (or consumer) of Nirvana’s services, you are granted several rights under Data Protection Laws. These rights empower you to control how your Personal Data is collected, used, processed, and stored. These include:

• You have the right to access information about your Personal Data that Nirvana has collected from you. This includes the specific details of the data, the purpose for which it is being processed, and the entities with whom your data may have been shared, provided the request is made in a manner as prescribed in the corresponding law or rules.
• If any of your Personal Information is incorrect, incomplete, or outdated, you have the right to request that Nirvana correct or update it. Additionally, if you wish to withdraw your Personal Data, you may also request the deletion of your Personal Data provided that the request is made in a manner as prescribed in the corresponding law or rules. However, in some instances, Nirvana may need to retain certain data to comply with legal obligations, or for specific lawful purposes outlined in the Data Protection Laws.
• You have the right to withdraw your consent to the processing of your Personal Data at any time. If you no longer wish for Nirvana to continue processing your data, you can request the withdrawal of your consent, provided that the request is made in a manner as prescribed in the corresponding law or rules. Once the consent is withdrawn, Nirvana will stop processing your data unless required by law or for specific legitimate purposes.
• You may make a request directing us to deleting your information and upon the receipt of such request we are obligated to act in accordance to the request, provided that the retention of your information is necessary for a specified purpose or compliance as maybe provided by the law.

Your personal data, including medical data, will be securely stored and retained for a period of five (5) years. This retention is necessary due to the sensitive nature of the information and to ensure compliance with applicable laws, professional obligations, and the continuity of care. Retaining this data allows us to provide seamless support in case of future consultations or references. After the retention period, your data will be securely deleted unless a longer retention period is required by law or regulatory guidelines.

If you are an Indian user, you have the right to request the deletion of your personal data at any time, even before the completion of the standard retention period. However, by exercising this right, you acknowledge and agree that:

Once your data is deleted, we will no longer have access to your past records, which may affect the quality and continuity of services provided to you.

We shall not be held liable for any direct or indirect consequences arising from the deletion of your data, including but not limited to any adverse effects on your mental or physical well-being due to the unavailability of your historical medical records.

Contact Us

For any queries, requests, or concerns regarding this Privacy Policy or the processing of your Personal Data, you may reach out to us directly on the following details: