Privacy Policy

# Privacy Policy

**Effective date: 3 August 2026**
**Last updated: 3 August 2026**

Rovaxa ("Rovaxa", "we", "us" or "our") respects your privacy and is committed to handling personal information responsibly. This Privacy Policy explains how we collect, use, disclose, retain and protect personal information when you visit **rovaxa.in**, contact us, request a demonstration, subscribe to updates, engage our advisory services, or use a Rovaxa product or service.

This Policy applies to our public website and to business enquiries submitted through it. A Rovaxa customer agreement, data processing agreement, product-specific notice or in-product privacy notice may apply when an organisation subscribes to one of our platforms. If a product-specific notice conflicts with this Policy, the product-specific notice will govern for that product.

1. Information we collect

Depending on how you interact with Rovaxa, we may collect:

- **Contact and business information**, such as your name, work email address, telephone number, organisation, job title, country and the contents of your message.
- **Enquiry and relationship information**, such as the product or service you are interested in, meeting notes, demonstration requests, proposals, support communications and correspondence.
- **Account information**, where applicable, such as account identifiers, role, organisation, authentication records and user preferences.
- **Technical and usage information**, such as IP address, browser and device type, operating system, referring pages, pages viewed, timestamps, session information, diagnostic data and security logs.
- **Cookie and similar technology information**, where such technologies are used. More information may be presented through a cookie notice or consent tool.
- **Information supplied through our platforms**, where a customer chooses to use a Rovaxa platform. The nature of this information depends on the platform and the customer’s configuration.

Please do not submit confidential, sensitive or regulated information through the public website enquiry form unless we specifically ask for it and provide an appropriate secure method.

2. How we collect information

We collect information:

- directly from you, including through forms, email, meetings and demonstrations;
- from your organisation when it arranges access to a Rovaxa service;
- automatically through the website, servers, logs, cookies and similar technologies;
- from service providers that support our website and business operations; and
- from publicly available and professional sources where permitted by law.

3. How we use information

We may use personal information to:

- respond to enquiries and arrange demonstrations or consultations;
- provide, operate, maintain and improve our website, platforms and advisory services;
- create and administer accounts and customer relationships;
- prepare proposals, contracts, invoices and other business communications;
- provide implementation, support, training and service updates;
- understand website and service performance;
- personalise communications and, where permitted, send relevant product, service or insight updates;
- prevent fraud, misuse and security incidents;
- maintain audit, operational and security records;
- comply with legal obligations and enforce our agreements; and
- establish, exercise or defend legal claims.

Where applicable law requires a lawful basis, we rely on consent, performance of a contract, steps requested before entering into a contract, compliance with law, and our legitimate interests in operating, securing and improving Rovaxa’s business and services.

4. Customer data and our role

Rovaxa’s products support industrial execution, employee operations and customer operations. When a customer organisation uses a Rovaxa platform, that organisation generally determines what information is entered into the platform and why it is processed. In that context, the customer may act as the data controller or data fiduciary, and Rovaxa may act as its processor or data processor.

Users seeking to exercise rights relating to information controlled by their employer or another Rovaxa customer should ordinarily contact that organisation first. We will assist customers as required by contract and applicable law.

5. How we share information

We may share personal information with:

- hosting, cloud, database, communications, analytics, security and other technology providers;
- professional advisers, auditors, insurers and consultants;
- implementation or business partners involved in delivering a requested service;
- regulators, courts, law-enforcement bodies or other authorities where required or permitted by law;
- a buyer, investor or successor in connection with a proposed or completed business transaction; and
- other parties when you instruct us or provide consent.

We do not sell personal information. We require service providers to use information only for authorised purposes and to apply appropriate safeguards.

6. International transfers

Rovaxa and its service providers may process information in India and in other countries. Where required, we use appropriate contractual, organisational or legal safeguards for cross-border transfers.

7. Cookies and analytics

Our website may use essential cookies needed for security and operation, and may use analytics or preference technologies to understand and improve the website. Where required by law, non-essential cookies will be used only after consent. Browser settings may allow you to block or delete cookies, although parts of the website may then function differently.

8. Data retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including to provide services, maintain business and security records, comply with legal obligations, resolve disputes and enforce agreements. Retention periods vary according to the type of information, the relationship, contractual commitments and legal requirements. We securely delete or anonymise information when it is no longer required.

9. Security

We use reasonable administrative, technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. No internet transmission or storage system can be guaranteed to be completely secure. Our current security approach is described on the **Security** page.

10. Your choices and rights

Subject to applicable law, you may have the right to:

- request access to or a summary of your personal information;
- request correction or updating of inaccurate information;
- request deletion or erasure;
- withdraw consent where processing is based on consent;
- object to or request restriction of certain processing;
- request portability where applicable;
- opt out of marketing communications; and
- raise a concern with an appropriate data-protection authority.

You can unsubscribe from marketing emails through the link in the message. Service and security communications may still be sent where necessary.

To make a privacy request, use the contact form at **rovaxa.in/contact** and identify the request as a privacy matter. We may need to verify your identity and authority before acting. If the information is controlled by a Rovaxa customer, we may direct your request to that customer.

11. Children’s privacy

Rovaxa’s website and business services are intended for organisations and working professionals. They are not directed to children, and we do not knowingly collect personal information from children through the public website. If you believe a child has provided information to us, please contact us so we can review and take appropriate action.

12. Third-party links

Our website may link to third-party websites and services. Their privacy practices are governed by their own notices, and Rovaxa is not responsible for those practices.

13. Changes to this Policy

We may update this Privacy Policy to reflect changes in our services, practices or legal obligations. The revised version will be posted on this page with an updated date. Material changes may also be communicated through an appropriate additional notice.

14. Contact us

For privacy questions or requests, visit **rovaxa.in/contact** and select or state that your message concerns privacy.