Privacy Notice

Version 1 · en-IN · Effective 2026-10-15

Initial notice explaining account and infrastructure data, providers, AI processing, retention and privacy requests.

Operator and privacy contact

JAGDISH CHIMANLAL PANJAVANI, proprietor trading as NANAK WEB SOLUTIONS, operates and maintains Compute360 from India. Udyam Registration Number: UDYAM-GJ-20-0013573. Official enterprise address: MAHADEV, JAGDISH PANJAVANI, SONI BAZAAR, KAMDAR STREET, DHORAJI, District RAJKOT, GUJARAT 360410, India.

For privacy questions, requests or grievances, email info@nanakwebsolutions.com, addressed to the Proprietor, JAGDISH CHIMANLAL PANJAVANI. The same address handles support, billing and legal notices. You may also write to the official enterprise address. This notice covers our website, accounts and service operations. Its version and effective date appear with the published document.

Information we process and why

• Account and customer details: names, email addresses, individual or organisation customer type, organisation name where applicable, adult-eligibility declarations, account identifiers and roles. We use these to establish accounts, authenticate users, manage access and communicate about the service.

• Authentication and connection information: login and verification records, session information, integration credentials and tokens supplied through connection settings. These support authentication, authorized infrastructure access and incident investigation. Do not send passwords or private keys through ordinary support email.

• Infrastructure and assessment information: resource identifiers, host and network details, configuration and software inventory, scan findings, vulnerability reports, job inputs, execution results and operational logs. We process these to provide requested management, assessment, reporting and troubleshooting functions. These records can contain personal information present in customer systems or submitted material.

• Subscription and commercial records: selected plans, entitlements, activation and expiry dates, subscription changes, billing correspondence, invoices and transaction or refund references supplied to us. These support plan administration, accounts and dispute handling. Any external payment service has its own notice for information it collects directly; do not email full card details to us.

• AI-related information: questions, infrastructure evidence, model inputs and outputs, operation identifiers, provider/model identifiers, attempt records, timing and usage information where AI functions are enabled. These support analysis, result retrieval, reliability and troubleshooting.

• Website and service technical information: request and device/browser information, IP addresses, authentication events, errors and diagnostic logs processed by application, hosting and delivery systems. These support delivery, reliability, security and abuse investigation.

• Legal and support records: document versions, acceptance wording, customer and signatory identity, acceptance timestamps, notice delivery records, privacy requests, support communications and demo enquiries. These support customer assistance, legal evidence and responses to requests.

We use information for the purposes described here. Depending on applicable law and the activity, processing may be necessary to provide a requested service, perform a contract, meet legal duties, protect legitimate operational and security interests where permitted, or rely on specific consent. Where consent is required, acceptance of the Terms or acknowledgement of this notice does not replace it. Declining information essential to a requested function may prevent us from providing that function.

Customer-controlled data

We determine purposes for our own account, billing, security and business records. When processing personal data in connected infrastructure on a customer's instructions, the customer determines the relevant purpose and must have authority to provide those instructions. Requests about information controlled by that customer may need to be referred to it; we will provide assistance where required.

Contact us before submitting data that needs a specific data-processing agreement, regulatory arrangement or transfer mechanism. This general notice does not replace such an agreement. Customers should limit access permissions and submitted data to what their selected functions require.

Providers, hosting and international processing

Our primary application and database hosting arrangements use Microsoft Azure and MongoDB Atlas, with primary storage identified by us as Mumbai, India. This is not a promise that every copy, backup, support activity or provider operation stays in Mumbai or India.

Cloudflare supports delivery of the public website. Hosting, database, identity, email, diagnostics, booking and other service providers can process information needed for their functions. A booking service receives information when its calendar is opened and a booking is submitted. Customer-connected cloud providers also receive the requests needed to perform authorized operations.

AI routing supports services such as OpenAI, Google Gemini, Groq and OpenRouter, with the actual provider, model and fallback route depending on configuration. Listing a supported integration does not mean every provider receives every request. Inputs and relevant evidence may be sent to more than one configured provider when a retry or fallback occurs. Provider processing locations, retention and model-training terms depend on the relevant service and account arrangement; this notice does not promise zero retention or that every provider excludes training. Contact us for the active provider and processing details before submitting information subject to specific restrictions.

Providers, authorized support personnel and customers may operate outside India. We must use safeguards and arrangements required by applicable law for relevant disclosures and transfers; accepting this notice is not itself a waiver of those requirements. Contact info@nanakwebsolutions.com for information about providers and arrangements relevant to your account.

We may disclose information to authorized customer administrators, providers involved in service delivery, professional advisers, or authorities where necessary and legally permitted. Disclosure can also be necessary to investigate misuse, protect rights or comply with a binding legal request. We limit disclosure to the relevant purpose and applicable legal requirements.

Retention and security

Retention depends on the type of record, the requested service, active account or integration, plan settings, support needs, security investigations, legal duties and disputes. Report availability can depend on the plan; a report disappearing from the dashboard does not establish that all stored copies have been erased. Account closure or a submitted deletion request does not instantly erase every record or backup.

Our retention policy is to keep identifiable information only for a justified service or legal purpose and to delete or anonymize it when that purpose ends, subject to lawful retention requirements. Deletion and withdrawal requests require assessment and action across relevant systems and providers. We will explain relevant limitations, retained categories and the expected handling of your request. Billing, legal acceptance and security evidence may need to be retained after service access ends. This notice does not promise a fixed automatic purge period or immediate backup deletion.

Security depends on application controls, access permissions, infrastructure configuration, provider protections and operational procedures. No system is completely secure. We are responsible for applying safeguards required by applicable law and for handling incidents and notifications as required; no particular certification or guarantee of uninterrupted protection is represented here. Customers should use limited-permission credentials, protect account access and revoke unnecessary integrations.

Rights, choices and grievances

Email info@nanakwebsolutions.com or use the account Privacy page, where available, to request access, correction, deletion, information about processing, withdrawal of consent or to raise a complaint. Depending on applicable law, you may also have rights to object, restrict processing or obtain a portable copy. We may need proportionate information to verify identity and authority before disclosing or changing records.

Where processing depends on consent, you can withdraw it through the same contact. Withdrawal does not invalidate earlier lawful processing; it may affect functions that require the information. We will assess and apply withdrawal to the relevant processing, subject to legal exceptions. Request submission alone is not confirmation that the requested action has finished.

We will handle requests and grievances within applicable legal deadlines and explain any lawful refusal, limitation or extension. For grievances governed by India's sensitive personal data rules, the applicable redress period is no later than one month from receipt. You retain the right to approach a competent regulator, tribunal or court; contacting us does not remove or suspend statutory remedies. Address escalation to the Proprietor at the contact above.

Browser storage, bookings and age eligibility

The public website uses browser storage for appearance preferences. The application uses authentication/session information and browser storage needed for account functions. An embedded booking calendar loads when you open it and may use its own storage and collect device/request information. Its provider's notice applies to its own collection. Browser settings can restrict or clear storage, although doing so can affect login and preferences. This notice does not authorize optional tracking that requires separate consent.

Accounts are for people aged 18 or above, including individuals and freelancers. Registration requests an adult-eligibility declaration; it is not identity or date-of-birth verification. Contact us if a minor has registered or personal data about a child has been submitted. We will assess the report and apply the access, removal or other measures required by law. Customers must not assume that an adult account permits unrestricted processing of children's data in connected systems.

Updates

We publish versions, effective dates and previous versions. We will give appropriate notice of material changes and obtain specific fresh consent where required before relying on a new consent-dependent purpose. Reading this notice, opening an email or accepting a contract does not provide blanket consent.