Skip to content
niohive
Start a project

Privacy policy

How Niohive collects, uses and protects information through this website, our forms and the custom software we build for clients.

Last updated

  • What we collectWhat you send through our forms, job applications, and the data clients share with us for projects.
  • Why we collect itTo reply to you, run projects and keep this site working. Nothing more.
  • Who we share it withOnly the service providers we need, under contract. We never sell or rent your data.
  • Your rightsAccess, correct, export or delete your data under GDPR, CCPA and India's DPDP Act.
  • SecurityEncrypted connections, personal accounts with two-step sign-in, and access removed when a project ends.
  • ContactWrite to [email protected] and we will reply within 30 days.

1. Introduction and scope

This Privacy Policy explains how Niohive Technology Services Pvt. Ltd. ("Niohive", "we", "us" or "our") collects, uses, discloses and protects information in connection with this website, the enquiries and job applications we receive, and the custom software, integration and AI projects we deliver for business clients ("Client", meaning the organization that hires us for a project).

This Policy applies to niohive.com and to our project work. It does not apply to third-party websites, applications or services that we do not control, even where linked from this website.

Niohive also makes Densyti. If you use Densyti or visit densyti.com, the Densyti privacy policy applies instead.

If you are a customer, employee or user of one of our Clients, the Client's own privacy notice governs how it uses your data, in addition to this Policy. See Section 6, "Client Data: our role as processor".

2. Key definitions

  • Enquiry Data: what you send us through the Start a project or Contact forms, or by email, such as your name, email, company and message.
  • Applicant Data: what you send us when you apply for a job, such as your CV, contact details and links to your work.
  • Client Data: data a Client gives us, or lets us access, so we can deliver a project, including personal data about the Client's customers, staff or users.
  • Usage Data: technical data generated when you visit this website, such as IP address, pages requested, time, and browser type.
  • Client: the business that has signed a project agreement with Niohive.

3. Information we collect

3.1 Enquiries

When you send the Start a project form, we receive your name, work email, company, phone number if you add one, the services you picked, when you want to start, your budget range and your message. When you send the Contact form, we receive your name, email, topic and message. We also keep the emails you send us.

3.2 Job applications

When you apply for a role, we receive the details you choose to send, usually your name, email, CV, portfolio or code links, and anything else in your message.

3.3 Client and project data

Business contact details, contracts, invoices and project communications for each Client. We also handle Client Data, as defined in Section 2, because doing so is part of building, testing and supporting the software the Client has asked for.

3.4 Usage and log data

Our hosting provider keeps standard server logs, such as IP address, pages requested, time, and browser type, needed to keep the website working and secure.

3.5 Cookies and browser storage

See Section 12, "Cookies and browser storage", for what we store in your browser.

4. How we use information

  • Reply to enquiries, arrange calls, and prepare plans and estimates.
  • Plan, build, test, deliver and support Client projects.
  • Review job applications and contact applicants.
  • Send invoices and keep business records.
  • Keep this website working and secure, and prevent fraud and abuse.
  • Comply with legal obligations, enforce our agreements, and protect our rights and the rights of Clients and others.

We do not use your data for advertising, we do not sell it, and we do not add you to a mailing list unless you ask us to.

6. Client Data: our role as processor

When we handle Client Data during a project, we act as a data processor (or "service provider" under the CCPA/CPRA) acting on the Client's documented instructions, and the Client acts as the data controller (or "business") for that data. In this role, we:

  • process Client Data only to deliver, test and support the project, or as required by law;
  • give access only to the people working on the project, and remove it when their work ends;
  • use test or anonymized data instead of real personal data wherever the project allows;
  • do not use Client Data to train AI models for anyone other than that Client;
  • return or delete Client Data when the project ends, as the project agreement sets out; and
  • sign a data processing agreement, including Standard Contractual Clauses where needed, with Clients who require one.

Clients are responsible for giving their own customers, staff and users appropriate privacy notices and for having a lawful basis to share their personal data with us.

7. How we share information

  • Service providers: hosting, email, project management, code hosting and cloud providers, each bound by contractual confidentiality and data protection obligations. A current list is available on request.
  • Project providers: cloud platforms, payment providers and AI model providers that a Client chooses or approves for its project, under terms that stop them from training on Client Data.
  • Legal and regulatory disclosure: where required to comply with applicable law or valid legal process, or to protect the rights, property or safety of Niohive, our Clients or others.
  • Business transfers: in connection with a merger, acquisition, financing or sale of assets, subject to continued protection under this Policy or a materially equivalent one.
  • With Client instruction or consent: for example, when a Client asks us to connect its systems to a third-party service.

We do not sell or rent personal information, and we do not share it with third parties for their own marketing.

8. International data transfers

We are based in India and work with clients worldwide, so we and our service providers may process information in countries other than where you are located, including India, the United States and the European Economic Area. Client Data stays in the hosting region the Client chooses wherever the project allows.

Where we transfer personal data out of the EEA, UK or Switzerland, we rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, adequacy decisions or other lawful transfer mechanisms. Where we transfer personal data governed by India's Digital Personal Data Protection Act, 2023, we do so consistent with any conditions or restrictions notified by the Central Government from time to time.

9. Data retention

  • Enquiry Data: kept while we are talking to you and for up to 12 months after our last contact, unless it becomes part of a project.
  • Applicant Data: kept for up to 12 months after the role is filled so we can contact you about similar roles, unless you ask us to delete it sooner. If you join us, it becomes part of your staff record.
  • Client Data: kept for the project and any support period, then returned or deleted within 30 days, unless the project agreement says otherwise.
  • Business records: contracts and invoices are kept as long as tax and company law requires.
  • Usage and log data: generally kept for up to 12 months for security and troubleshooting, then deleted.

You may ask for earlier deletion by contacting us, subject to Section 11.

10. Security measures

  • Encryption in transit with TLS for this website and the systems we build.
  • Personal accounts with two-step sign-in for every tool and Client system we use. No shared logins.
  • Least-privilege access to Client systems, removed when a project or role ends.
  • Secrets and credentials kept in a password manager or secrets store, never in code or chat.
  • Encrypted work devices and code review before changes reach production.

No method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we work to protect information using safeguards appropriate to its sensitivity, and we agree any extra measures with each Client.

11. Your privacy rights

11.1 GDPR and UK GDPR (EEA and UK individuals)

You have the right to access, rectify, erase or restrict the processing of your personal data, to object to processing, and to receive your data in a portable format. You may also lodge a complaint with your local supervisory authority.

11.2 CCPA and CPRA (California residents)

You have the right to know what personal information we collect and how it is used, the right to delete it, the right to correct inaccurate information, and the right to opt out of the sale or sharing of personal information. We do not sell or share personal information as defined by the CCPA/CPRA, and we will not discriminate against you for exercising these rights.

11.3 India DPDP Act (Data Principals)

You have the right to access a summary of the personal data we process about you and our processing activities, the right to correction and erasure, the right to grievance redressal through our grievance officer, and the right to nominate another individual to exercise these rights on your behalf in the event of death or incapacity.

To exercise any of the above rights, write to [email protected]. We will verify your identity before fulfilling a request and reply within 30 days, or sooner where the law requires. If your data reached us as Client Data, we may pass your request to the Client as the controller.

12. Cookies and browser storage

This website stores only your light or dark theme choice, in your own browser. It never reaches us. We do not use advertising or analytics cookies, or third-party tracking. You can clear it at any time in your browser settings, and the site works the same without it.

13. Children's privacy

This website and our services are for businesses. They are not directed to, and we do not knowingly collect personal information from, individuals under the age of 16. If we become aware that we have collected personal data from a child by mistake, we will take steps to delete it.

14. Third-party links

This website links to sites we do not control, such as densyti.com, our social profiles, and the AI assistants behind the "Ask an AI about us" buttons, which open with a question about Niohive. This Policy does not apply to those sites, and we encourage you to review their privacy policies before giving them information.

15. Changes to this policy

We may update this Policy from time to time to reflect changes in our practices, technology or legal requirements, or for other operational reasons. We will post the updated Policy on this page with a revised date, and where changes materially affect Clients, we will tell their contacts by email before the change takes effect.

16. Contact us and grievance officer

Niohive Technology Services Pvt. Ltd. is the entity responsible for the information described in this Policy.

  • Privacy questions: [email protected]
  • Grievances (India Digital Personal Data Protection Act, 2023): see our grievance officer page for how to raise a complaint and how we respond.
  • Postal address: available on request from the contact above.