NITAI INNOVATIONS

("Company," "we," "our," or "us") is committed to protecting the privacy, confidentiality, and security of personal and business information entrusted to us. As a provider of cyber-security services, IT consulting, software development, website development, network infrastructure solutions, software testing, technical support, digital technology services, and professional training programs, we recognize the importance of maintaining the highest standards of data protection and information security.

This Privacy Policy explains how we collect, use, process, store, protect, and disclose information obtained through our website, applications, training platforms, consulting engagements, customer interactions, and other business operations.

By accessing our website, using our services, enrolling in our training programs, or communicating with us, you acknowledge that you have read and understood this Privacy Policy and agree to the practices described herein.

We may collect personal, professional, technical, and business-related information when users interact with our website, request services, register for training programs, participate in consultations, subscribe to communications, or engage with our support teams. Such information may include names, email addresses, telephone numbers, business details, organization names, job titles, mailing addresses, educational qualifications, training records, certification information, project requirements, technical documentation, and other information voluntarily provided by users. We may also automatically collect technical information including IP addresses, browser types, operating systems, device identifiers, network information, access times, website usage data, diagnostic logs, security logs, and other analytics information required to improve our services and maintain system security. For cyber security assessments, IT consulting engagements, software testing projects, network audits, and managed technology services, we may process technical information necessary to perform contracted services. Such information is handled with strict confidentiality and appropriate security controls.

The information collected by the Company may be used for legitimate business purposes, including providing cybersecurity services, software development, website development, IT consulting, infrastructure management, software testing, technical support, training programs, certification management, project delivery, customer relationship management, billing, compliance, and service improvement. We may also use information to communicate with clients, provide updates regarding services, deliver training materials, respond to inquiries, process registrations, maintain security, prevent fraud, monitor system performance, conduct internal audits, and comply with legal obligations. Information may additionally be used to Analyse website performance, improve user experience, develop new services, enhance security measures, and support business operations.

Information security is a fundamental component of our business operations. We implement appropriate administrative, technical, and physical safeguards designed to protect information against unauthorized access, misuse, loss, alteration, disclosure, or destruction. Our security measures may include access controls, authentication mechanisms, network security controls, encryption technologies, secure development practices, vulnerability management procedures, monitoring systems, backup processes, and periodic security assessments. Employees, contractors, and authorized personnel who have access to information are required to maintain confidentiality and comply with internal security policies. Although we take reasonable precautions to protect information, no method of electronic transmission, storage, or processing can guarantee absolute security. Users acknowledge that the transmission of information over the internet carries inherent risks.

As a cybersecurity and technology services provider, the Company may access systems, networks, applications, or technical environments solely for the purpose of delivering authorized services. All information obtained during security assessments, vulnerability testing, penetration testing, infrastructure reviews, software testing, technical consulting, or managed service engagements is treated as confidential and is used exclusively for the agreed scope of work. The Company does not claim ownership of client data, source code, intellectual property, business information, or technical assets belonging to clients.

Protecting client confidentiality is one of our highest priorities. Any business, technical, operational, educational, or personal information shared with us during projects, consulting engagements, support activities, or training programs is handled responsibly and disclosed only when required by law or authorized by the client. We maintain reasonable safeguards to prevent unauthorized disclosure of confidential information and strive to ensure that information is accessed only by personnel with a legitimate business need.

Our website may use cookies, analytics tools, and similar technologies to improve functionality, understand visitor behaviour, enhance security, and optimize user experience. Cookies may be used to remember user preferences, maintain session information, improve website performance, generate analytics reports, and support security monitoring. Users may choose to disable cookies through browser settings; however, certain website features may not function properly as a result.

The Company may utilize trusted third-party service providers for hosting, cloud infrastructure, payment processing, analytics, communication services, customer support platforms, training management systems, and other business functions. These providers are granted access only to the information necessary to perform their services and are expected to maintain appropriate security and confidentiality standards. We are not responsible for the privacy practices of third-party websites, services, or platforms that may be linked from our website.

Information is retained only for as long as necessary to fulfil contractual obligations, provide services, maintain business records, support training and certification activities, comply with legal requirements, resolve disputes, enforce agreements, and protect legitimate business interests. When information is no longer required, reasonable efforts are made to securely delete, anonymize, or archive such information in accordance with applicable policies and regulations.

Subject to applicable laws, individuals may request access to their personal information, correction of inaccurate information, updating of records, restriction of processing, or deletion of information where legally permissible. Requests relating to privacy rights may be submitted through the contact information provided below.

For participants enrolled in training programs, workshops, internships, certification courses, or educational activities, we may maintain records related to attendance, assessments, certifications, project submissions, performance evaluations, and course completion status. Such information is used solely for educational administration, certification management, academic record maintenance, and related operational purposes.

Our services are intended primarily for businesses, professionals, students, and individuals capable of providing informed consent. We do not knowingly collect personal information from children in violation of applicable laws.

The Company may disclose information when required by law, court order, regulatory authority, law enforcement agency, or governmental body, or when necessary to protect legal rights, business interests, security, safety, or property.

We reserve the right to modify, update, or revise this Privacy Policy at any time. Updated versions will be published on our website, and continued use of our services following such updates constitutes acceptance of the revised policy.

For questions, concerns, requests, or complaints relating to this Privacy Policy, data protection matters, or information security practices, please access our contact us page

The Company respects and protects the intellectual property rights of its clients, partners, trainees, and stakeholders. Any source code, software applications, databases, technical documents, business processes, designs, configurations, reports, training materials, project deliverables, or proprietary information developed or provided during the course of a business engagement shall remain subject to the ownership and contractual rights agreed upon between the parties. The Company does not claim ownership of client-owned intellectual property and will not use, reproduce, distribute, or disclose such information except as necessary to provide authorized services or as required by applicable law.

Confidentiality is a core principle of our operations. We maintain strict controls to safeguard confidential, proprietary, and sensitive information received from clients, students, business partners, vendors, and website users. Access to information is restricted to authorized personnel who require such access for legitimate business purposes. All personnel are expected to comply with internal confidentiality obligations and information security policies.

For software development, cybersecurity assessments, network implementation, IT consulting, software testing, and managed technology services, the Company implements reasonable security controls to protect project-related information throughout the engagement lifecycle. Project documentation, technical reports, source code repositories, testing environments, system configurations, vulnerability assessment reports, and consulting deliverables are managed using appropriate security and access-control measures.

While providing cybersecurity services, vulnerability assessments, penetration testing, risk assessments, compliance reviews, security monitoring, or incident response services, the Company may process technical information necessary to identify, analyze, and mitigate security risks. Such information is processed solely within the scope of authorized services and in accordance with contractual obligations, professional ethics, and applicable legal requirements.

The Company may engage trusted vendors, technology partners, hosting providers, cloud service providers, payment processors, training platforms, communication services, and infrastructure providers to support business operations. Reasonable efforts are undertaken to work with service providers that maintain appropriate privacy, security, and compliance standards. However, users acknowledge that third-party services operate under their own privacy policies and terms of service.

The Company may provide services to clients located in different countries and jurisdictions. In the course of delivering services, information may be processed, stored, or transferred across geographic locations where legally permitted and operationally necessary. Appropriate measures are taken to maintain the confidentiality, integrity, and security of information regardless of location.

To support service reliability and operational resilience, the Company may maintain backup systems, disaster recovery processes, redundancy mechanisms, and business continuity procedures. These measures help protect critical business information, reduce service disruptions, and facilitate recovery from unexpected incidents.

The Company maintains procedures for identifying, investigating, managing, and responding to security incidents that may affect information assets, systems, or services. Where appropriate and legally required, affected parties may be notified of significant security incidents in accordance with applicable laws, contractual commitments, and operational requirements.

The Company strives to operate in accordance with applicable laws, regulations, industry standards, and recognized information security practices relevant to its business activities. Compliance efforts may include internal reviews, policy enforcement, employee awareness programs, risk management activities, and continuous improvement initiatives designed to strengthen privacy and information security practices.

The Company recognizes that information security depends on both technology and people. Personnel may receive training, awareness programs, and guidance related to privacy protection, cybersecurity practices, confidentiality obligations, ethical conduct, and responsible handling of information. These initiatives support a culture of security, accountability, and professional responsibility throughout the organization.

The Company may occasionally communicate information regarding services, training programs, technology updates, industry insights, events, promotions, or educational opportunities. Recipients may opt out of non-essential marketing communications at any time by following the instructions provided in the communication or by contacting the Company directly.

Users are encouraged to provide accurate, current, and complete information when interacting with the Company. The Company is not responsible for issues arising from inaccurate, outdated, incomplete, or misleading information supplied by users.

While the Company employs reasonable measures to protect information and maintain secure systems, no security framework can eliminate all risks. To the maximum extent permitted by law, the Company shall not be liable for indirect, incidental, consequential, or unforeseeable damages arising from unauthorized access, cyberattacks, technical failures, service interruptions, or circumstances beyond reasonable control.

Protecting information and maintaining client trust are fundamental to our business values. The Company continuously works to improve its privacy practices, strengthen security controls, and enhance operational processes to support the evolving needs of clients, students, partners, and technology users. Our commitment extends beyond legal compliance to fostering responsible, ethical, and transparent management of information across all services and business activities.

Nitai Innovations Private Limited is committed to processing personal data responsibly and in accordance with applicable laws and regulations, including the Digital Personal Data Protection Act, 2023 (India), and other relevant legal requirements. We implement reasonable administrative, technical, and organizational measures to safeguard personal information and support the privacy rights of individuals whose information we process.

This Privacy Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising out of or relating to this Privacy Policy shall be subject to the exclusive jurisdiction of the competent courts in Belagavi, Karnataka.

The Company is committed to handling personal data responsibly and in accordance with applicable laws, including the Digital Personal Data Protection Act, 2023 and other relevant legal and regulatory requirements. We take reasonable measures to protect personal information and support lawful, fair, and transparent processing of data.