This is a standard template. Bracketed items need completing, and the policy should be reviewed by qualified counsel for each jurisdiction where SovviC AI operates before publication.
1. Who we are
SovviC AI is a business of Navea Ventures, Inc. (“SovviC”, “we”, “us” or “our”), a Delaware corporation with its principal office at [POSTAL ADDRESS]. For the purposes of applicable data-protection law, Navea Ventures, Inc. is the controller (or “data fiduciary”) of the personal information described in this policy.
2. Scope
This policy applies to personal information we process through sovvic.navea.ai (the “Site”), our briefing-request form, email correspondence and related events. It does not cover information we process on behalf of clients under a separate written engagement; that processing is governed by the relevant agreement and data-processing terms.
3. Information we collect
Information you provide
- Contact and professional details: name, title or role, organization or ministry, official email address and phone number.
- Briefing details: organization type, country and region, engagement and stage interests, priority sectors, mandate status, timeline, budget envelope, preferred briefing format and the context you share.
- Preferences: NDA requests and your communication preferences.
Please do not submit classified information, information subject to export-control restrictions, or sensitive personal data through the Site.
Information collected automatically
- Device and log data such as IP address, browser type, operating system, referring URL, pages viewed and timestamps.
- Approximate location derived from your IP address.
- Information from cookies and similar technologies (see Section 11).
Information from other sources
We may receive professional information from publicly available sources, event organizers, or partners within the ecosystem networks we orchestrate, where permitted by law.
4. How we use information
- To respond to briefing requests and enquiries, and to schedule and conduct briefings.
- To assess and prepare for potential engagements, including conflict and eligibility checks.
- To operate, secure and improve the Site.
- To send updates you have requested, with an option to unsubscribe at any time.
- To comply with legal obligations, including sanctions and export-control screening.
- To establish, exercise or defend legal claims.
We do not sell personal information, and we do not use it to train AI models.
5. Legal bases
Where the EU or UK GDPR, or similar laws, apply, we rely on: taking steps at your request before entering into a contract; our legitimate interests in responding to enquiries and operating our business; compliance with legal obligations; and your consent, where required (for example, for non-essential cookies or marketing). Where India’s Digital Personal Data Protection Act, 2023 applies, we process personal data on the basis of your consent or for legitimate uses permitted by that Act.
6. How we share information
- Affiliates: other Navea Ventures companies that help deliver our services, under equivalent protections.
- Service providers: hosting, email, CRM, scheduling and security vendors acting on our instructions under contract.
- Engagement partners: only with your agreement, for example when introducing you to ecosystem or technology partners for a specific engagement.
- Legal and safety: where required by law or to protect rights, safety and security.
- Business transfers: in connection with a merger, acquisition or sale of assets, subject to this policy.
7. International transfers
We operate from hubs in Silicon Valley, Hyderabad and Dubai, so personal information may be processed in the United States, India, the United Arab Emirates and other countries. Where required, we use appropriate safeguards such as Standard Contractual Clauses and comply with applicable cross-border transfer rules.
8. Retention
We keep briefing-request information for as long as needed to respond and to manage any resulting relationship, and otherwise for up to 24 months after our last interaction, unless a longer period is required by law or you ask us to delete it sooner. Where an engagement follows, records are kept for the duration of the engagement and up to seven years afterwards to meet contractual, tax and audit obligations. Log data is generally kept for no longer than 12 months, and security logs may be kept longer where needed to investigate an incident.
9. Security
We use administrative, technical and physical safeguards appropriate to the sensitivity of the information, including encryption in transit, access controls and least-privilege practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Your rights
Depending on where you live, you may have the right to access, correct, delete or port your personal information; to object to or restrict certain processing; to withdraw consent; and to nominate a representative or seek grievance redressal. These rights may arise under the GDPR, the UK GDPR, the California Consumer Privacy Act (as amended), India’s DPDP Act and the UAE Personal Data Protection Law, among others.
To exercise your rights, contact us using the details in Section 14. We will verify your request and respond within the period required by law. You may also lodge a complaint with your local data-protection authority. We will not discriminate against you for exercising your rights.
11. Cookies & analytics
We use strictly necessary cookies to operate the Site and, with your consent where required, analytics cookies to understand how the Site is used. You can control cookies through your browser settings and our cookie banner. [LIST ANALYTICS PROVIDERS, IF ANY.]
12. Children
The Site is intended for government and business professionals. It is not directed to children, and we do not knowingly collect personal information from anyone under 18.
13. Changes to this policy
We may update this policy from time to time. We will post the revised version on this page with a new “Last updated” date and, where changes are material, provide additional notice.
14. Contact us
Navea Ventures, Inc. · Attn: Privacy
[POSTAL ADDRESS]
Email: sovereign@sovvic.navea.ai
Grievance officer (India): [NAME, CONTACT]. EU/UK representative: [NAME, CONTACT, IF APPLICABLE].