Privacy Policy

1. Overview

TruveriX Pvt. Ltd. ("TruveriX", "we", "us", "our") is committed to protecting the personal data of our users, clients, and individuals whose information is processed through our platform. This Privacy Policy explains how we collect, use, store, and share personal data in accordance with India's Digital Personal Data Protection Act 2023 (DPDPA) and applicable international standards.

2. Data We Collect

This section describes data collected through this website (truverix.com) — for example, when you submit a demo request or contact form. It does not describe data processed as part of a contracted background verification engagement, which is governed separately by the Data Processing Agreement (DPA) executed with each client and consented to individually by each data principal at the point of verification.

• Contact information: name, email, phone, and company details submitted via our demo request or contact forms
• Enquiry details: the message and service interest you share with us
• Cookie and usage data: log data, IP address, browser type, and on-site behaviour, per your cookie preferences (see our Cookie Policy)
• Communication records: correspondence between you and our team for the purpose of responding to your enquiry

We do not collect government-issued identity documents (such as Aadhaar, PAN, or passport), biometric data, or financial account details through this website. Such data is only ever collected as part of an active, consented verification case initiated by an enterprise client, through secure channels governed by that client's Data Processing Agreement with TruveriX — never through general website forms.

3. Legal Basis & Consent

All personal data processing is conducted on the basis of (a) explicit, specific, and informed consent of the data principal; (b) contractual necessity for service delivery; or (c) legitimate interests in fraud prevention and compliance. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

4. Data Use & Purpose Limitation

Personal data is used exclusively for the verification purposes specified at the point of collection. Data is not sold, rented, or shared with third parties for marketing purposes. Verification results are shared only with the requesting enterprise client who holds a valid data processing agreement with TruveriX.

5. Data Retention

Website enquiry data (demo requests, contact form submissions) is retained for the minimum period required to respond to your enquiry and maintain business records, and can be deleted on request. Data processed as part of a contracted verification engagement is retained per the terms of that engagement's Data Processing Agreement and applicable legal obligations, with access restricted and data stored in encrypted form.

6. Your Rights (Data Principal Rights)

• Right to access your personal data held by TruveriX
• Right to correction of inaccurate personal data
• Right to erasure (subject to legal retention obligations)
• Right to withdraw consent at any time
• Right to grievance redressal via our Data Protection Officer

To exercise these rights, contact: bgv@truverix.com

7. Data Security

TruveriX implements AES-256 encryption at rest, TLS 1.3 in transit, field-level encryption for sensitive PII, role-based access controls, and comprehensive audit logging. All data is stored within India (AWS Mumbai ap-south-1) to ensure data residency compliance.

8. Contact

Data Protection Officer: privacy@truverix.com  |  TruveriX Pvt. Ltd., India