Privacy Policy

1. Introduction & Data Controller

At nSolved™ ("we," "our," or "us"), we are dedicated to advancing post-quantum cryptographic security and cyber resilience for enterprises worldwide while maintaining the highest standards of data privacy, confidentiality, and integrity.

This Privacy Policy describes how we collect, use, process, store, and safeguard your personal information when you visit our website, interact with our enterprise portals, request cryptographic discovery consultations, or communicate with our technical team.

2. Information We Collect

We collect minimal, necessary information required to facilitate enterprise communication, assess cryptographic migration requirements, and ensure the security and availability of our web infrastructure.

A. Information You Voluntarily Provide

When you complete our contact or discovery consultation form, register for technical whitepapers, or correspond with us directly via email, we collect:

• Full Name: To identify and address you in professional communications.
• Work Email Address: Enterprise email address for secure correspondence (we filter and reject generic personal email domains).
• Organization / Enterprise Name: To understand your organization's architectural scope and industry regulatory requirements.
• Inquiry & Message Details: Any project context, infrastructure details, or specific post-quantum migration questions you choose to submit.

B. Automatically Collected Technical Information

When you navigate our website, our servers automatically log technical metadata necessary to maintain system performance, firewall monitoring, and anti-abuse defenses:

• Network & Device Identifiers: Truncated/anonymized IP address, browser type and version, language settings, and operating system.
• Usage & Interaction Data: Referring URLs, pages viewed, time spent per section, date/time stamps, and basic navigation pathways.

3. How We Use Your Information

We process collected information strictly for legitimate commercial, technical, and operational purposes:

• Facilitating Discovery Calls & Inquiries: Reviewing your enterprise requirements, scheduling technical demonstrations, and responding to inquiries regarding our Cryptographic Bill of Materials (CBOM) Discovery platform and Quantum-Safe API Proxies.
• Platform Improvement & Maintenance: Analyzing aggregated site metrics to improve interface usability, resolve technical anomalies, and optimize documentation delivery.
• Enterprise Communications: Providing critical updates regarding post-quantum cryptography standards (such as NIST FIPS 203/204/205 transitions), security advisories, and service enhancements where relevant.
• Security & Abuse Prevention: Detecting, preventing, and mitigating distributed denial-of-service (DDoS) attacks, unauthorized automated crawling, fraudulent submissions, and other security incidents.

4. Legal Basis for Processing

Under applicable global data protection frameworks—including the Digital Personal Data Protection Act, 2023 (DPDP Act - India) and the General Data Protection Regulation (GDPR - EU/UK)—we process your personal information under the following legal bases:

• Contractual & Pre-Contractual Measures: Processing necessary to respond to your request for proposal (RFP), schedule discovery consultations, or execute preliminary enterprise evaluation agreements.
• Legitimate Business Interests: Operating and securing high-assurance cryptographic software infrastructure, preventing cyber threats, and optimizing business operations in a manner that does not override your fundamental privacy rights.
• Explicit Consent: Where you have granted explicit consent for specific direct communications or specialized advisory distributions, which you may withdraw at any time.
• Legal Compliance: Satisfying statutory, regulatory, tax, or legal compliance mandates applicable to registered corporate entities in India and partner jurisdictions.

5. Data Sharing & Third Parties

We do not sell, rent, monetize, or trade your personal or organizational data to any third-party brokers, advertisers, or marketing networks under any circumstances.

We disclose information only under strictly regulated conditions:

• Trusted Infrastructure Sub-Processors: High-security cloud hosting providers, DDoS mitigation networks, and enterprise email dispatch services operating under signed Data Processing Agreements (DPAs), strict confidentiality covenants, and ISO/IEC 27001 or SOC 2 Type II compliance frameworks.
• Legal & Regulatory Mandates: Where disclosure is strictly required to comply with an enforceable judicial decree, court order, or applicable statutory requirement by a competent government authority.
• Corporate Restructuring: In the event of a merger, acquisition, or corporate reorganization, subject to identical confidentiality and privacy commitments.

6. International Data Transfers

nSolved Computing Technologies Pvt Ltd is headquartered in New Delhi, India. Your personal information is primarily stored and processed within enterprise-grade, secure cloud infrastructure located in India and tier-1 global cloud regions.

When transferring data across international boundaries, we ensure appropriate safeguards are implemented in compliance with the DPDP Act 2023, the European Union GDPR, UK GDPR, and other applicable cross-border regulations through Standard Contractual Clauses (SCCs), technical encryption controls, and contractual adequacy assurances.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Discovery Inquiries & Contact Records: Stored for a maximum of two (2) years from the date of last interaction, after which records are securely deleted or irreversibly anonymized.
• Contractual & Account Documentation: Retained for the active duration of the commercial engagement plus statutory retention periods required by applicable Indian corporate and financial regulations.
• Server Access Logs & Security Audits: Retained on an automated rolling cycle of 30 to 90 days for forensic monitoring and threat analysis.

8. Your Rights & Choices

Depending on your jurisdiction, you possess specific statutory rights regarding your personal information:

• Right of Access: Request confirmation of whether your data is being processed and obtain a clear summary of such personal data.
• Right to Rectification: Request correction of inaccurate, outdated, or incomplete personal records.
• Right to Erasure ("Right to be Forgotten"): Request the permanent deletion of your personal data where retention is no longer necessary or legally justified.
• Right to Restrict or Object to Processing: Object to processing based on legitimate interests or request restricted processing under specific conditions.
• Right to Data Portability: Request transmission of your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Withdraw previously granted consent at any time without affecting the lawfulness of processing conducted prior to revocation.

To exercise any of these rights, please email our data protection team at enterprise@nsolved.com. We verify requests and respond within statutory timeframes (typically within 30 days).

9. Cookies & Tracking Technologies

We uphold a privacy-first approach to website analytics:

• Essential Cookies Only: We utilize minimal, strictly essential session tokens required for network security, CSRF protection, and load balancing.
• No Third-Party Advertising Trackers: We do not deploy third-party advertising cookies, retargeting pixels (e.g., Meta Pixel, Google AdSense), or cross-site tracking scripts on this website.

10. Security Measures

As a post-quantum cryptographic security firm, data protection is intrinsic to our operational architecture. We employ comprehensive technical and organizational safeguards including Transport Layer Security (TLS 1.3), automated vulnerability scanning, strict role-based access control (RBAC), multi-factor authentication (MFA), and encrypted storage at rest using robust modern cryptographic standards.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect evolving legal mandates, regulatory guidelines, or technological enhancements in our platform. Any modifications will be posted directly to this page with an updated "Last Updated" timestamp. We encourage regular review of this page to stay informed.

12. Contact Us

If you have questions, inquiries, or complaints regarding this Privacy Policy or our data handling practices, please contact our privacy and compliance desk: