Privacy & Data Protection Policy
Effective Date: August 15, 2026 · Compliant with Digital Personal Data Protection (DPDP) Act 2023 & GDPR
Our Commitment to Your Privacy
KAVION Productions (“KAVION”, “we”, “us”, or “our”) respects your privacy and is dedicated to protecting the personal and business data you share with us. This Privacy Policy governs all data collection, processing, and storage practices across https://www.kavionproductions.com, our Free AI Visibility Checker, AI Visibility Audits, Strategy Consultations, and Ongoing Content Retainer workflows.
We operate in strict compliance with the **Digital Personal Data Protection (DPDP) Act 2023 (India)**, the **Information Technology Act 2000 (and IT Rules 2011)**, the **General Data Protection Regulation (GDPR - EU/UK)**, and the **California Consumer Privacy Act (CCPA)**.
1. Categories of Data We Collect
We collect only the minimum data necessary to conduct AI visibility diagnostics, generate client deliverables, process orders, and communicate project milestones:
A. Client & Contact Information
- • Full Name and Corporate Designation
- • Official Business Email Address
- • Phone Number / WhatsApp Contact
- • Company Name, Website URL & Industry Niche
- • Brand intake notes & competitor domain URLs
B. Technical & Diagnostic Telemetry
- • Anonymized IP Address (for rate-limiting & DDoS defense)
- • Browser User-Agent, OS, and Device Resolution
- • Session timestamps & diagnostic speed logs
- • Cookie consent preferences (`kavion_cookie_consent`)
2. Payment Security & Zero Card Storage
All online transactions for our Full AI Visibility Audit (₹15,000) and Strategy Session (₹5,000) are executed through our authorized payment gateway partner, **Razorpay Software Private Limited**.
KAVION never views, accesses, intercepts, or stores your credit/debit card numbers, CVVs, expiry dates, net banking passwords, or UPI PINs. All financial information is transmitted directly from your browser to Razorpay under 256-bit TLS/SSL encryption and processed in compliance with Reserve Bank of India (RBI) tokenization guidelines.
KAVION only receives a cryptographic transaction verification ID, timestamp, and billing email to automatically issue your tax receipt and initiate service delivery.
3. Strict Zero AI Training Guarantee
We understand that your business strategy, competitor research, and unpublished credentials are confidential assets. KAVION enforces a strict, contractual Zero AI Training Guarantee:
- No Public Model Training: We never submit your private business notes, client communications, or proprietary draft assets to train public foundational AI models (such as OpenAI ChatGPT, Google Gemini, Anthropic Claude, or Meta LLaMA).
- Enterprise Zero-Retention APIs: When automated queries are run across generative endpoints to test brand recommendations, all calls are executed via enterprise API tiers with data retention and training opt-outs fully engaged.
4. Legal Bases & Purpose of Processing
Under the DPDP Act 2023 and GDPR, we process your personal data strictly under valid legal grounds:
- Contractual Performance: To conduct your AI Visibility Audit, generate your scorecard, formulate customized content roadmaps, and host your 60-minute strategy call.
- Legitimate Business Interest: To safeguard our website against automated scraper bots, prevent API Cost Shield abuse, improve diagnostic precision, and optimize page load performance.
- Legal & Statutory Compliance: To generate GST-compliant tax invoices, maintain statutory accounting records under Indian law, and respond to legitimate legal process.
5. Third-Party Sub-processors
We partner with SOC 2 Type II and ISO 27001 certified global infrastructure providers to deliver our services safely:
6. Data Storage & Security Safeguards
We implement enterprise-grade technical and administrative security measures:
- Encryption: All data in transit is encrypted using 256-bit Transport Layer Security (TLS 1.3). All database records at rest are secured with AES-256 encryption.
- Access Control: Internal administrative dashboards enforce Multi-Factor Authentication (MFA), salted bcrypt password hashing, and strict role-based access control (RBAC).
- Retention Lifecycle: Client audit files and communications are retained for the duration of the engagement plus statutory tax record periods (up to 7 years). Marketing leads that remain inactive are automatically purged after 12 months.
7. Your Statutory Rights & Data Deletion
Under the DPDP Act 2023 and GDPR, you retain complete sovereignty over your information:
Request a complete export of all contact records, audit drafts, and logs held by KAVION in a machine-readable format.
Update or correct any inaccurate business details, brand entity names, or founder credentials on file.
Request the permanent deletion of your contact records and lead logs from all KAVION active databases.
Directly contact our designated Data Protection Officer to resolve privacy concerns within a guaranteed SLA.
Nominate another individual to exercise data principal rights on your behalf in the event of death or incapacity by contacting our Grievance Officer.
To exercise any of these rights, email us at hello@kavionproductions.com with the subject line “Data Subject Rights Request”. We fulfill verified identity requests within 48 to 72 business hours at zero cost to you.
8. Grievance Officer & Privacy Inquiries
In accordance with the Information Technology Act 2000 and DPDP Act 2023, the details of our designated Grievance Redressal Officer are provided below: