Privacy Policy
Compliant with the Digital Personal Data Protection Act (DPDP Act 2023), Indian Information Technology Act 2000, and Google Publisher Standards.
Corporate Identity & Scope
This Privacy Policy applies to Thiveo Technologies Private Limited ("Thiveo", "we", "our", or "us"), operating the domain https://www.thiveo.com, as well as our proprietary software-as-a-service (SaaS) applications including Odentra (Dental Practice Management Operating System) and Inventra(Multi-Warehouse Inventory & POS ERP). We are committed to safeguarding your personal information and complying with applicable Indian and global data privacy regulations.
1. Information We Collect
We collect information in three ways: information you provide directly, information collected automatically through our digital platforms, and information from trusted third-party integrations.
A. Information You Voluntarily Provide
When you submit inquiries on our contact form, request an architecture sprint, register for a free trial of Odentra or Inventra, or subscribe to communications, we may collect: your full name, corporate email address, telephone number, company/organization name, industry sector, and project scope requirements.
B. Automatically Collected Technical Data & Log Files
Like most modern website operators, Thiveo employs standard log files. The information gathered includes: Internet Protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamps, referring and exit pages, platform type, and number of user clicks. This data is non-personally identifiable and is used to administer the site, diagnose server latency, and improve performance.
C. SaaS Product Application Data
For registered users of Odentra and Inventra, operational data (such as tenant credentials, clinical records, inventory catalogs, and transaction logs) is strictly segregated within dedicated, multi-tenant encrypted databases. Clinical data within Odentra can also be processed via local offline inference (Ollama) to ensure patient health data never leaves the clinic environment.
2. Cookies, Web Beacons & Google Advertising Policy Disclosures
Thiveo uses cookies, pixel tags, and local storage to store user preferences, record session authentication, and optimize site delivery.
- Third-party vendors, including Google, use cookies to serve advertisements based on a user's prior visits to thiveo.com or other websites across the Internet.
- Google's use of advertising cookies (such as the DoubleClick DART cookie) enables it and its partners to serve targeted ads to our users based on their visit to our sites and/or other sites on the Internet.
- Users may opt out of personalized advertising by visiting the official Google Ads Settings.
- Alternatively, users can opt out of third-party vendor cookies for personalized advertising by visiting www.aboutads.info or through the Network Advertising Initiative.
Google Analytics:
We use Google Analytics to analyze visitor behavior. Google Analytics collects anonymous information regarding visitor volume, bounce rate, and user geography. You can opt out of Google Analytics tracking using Google's Analytics Opt-out Browser Add-on.
3. Purpose & Legal Basis for Processing Personal Data
Under the Digital Personal Data Protection Act (DPDP Act, 2023) and Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, we process your personal information only under lawful grounds:
- Consent: When you provide clear consent through form submissions or software trial sign-ups.
- Contract Execution: Fulfilling enterprise software delivery, SLA support, and payment invoices.
- Legal Compliance: Meeting statutory tax requirements, audit filings, and cybersecurity reporting under Indian law.
- Legitimate Use: Securing platform integrity against DDoS attacks, unauthorized intrusion, and fraud.
4. Data Protection, Encryption & Storage
Thiveo implements comprehensive technical and organizational safeguards in accordance with ISO 27001 best practices and Rule 8 of the Indian SPDI Rules:
- Data in Transit: Encrypted using TLS 1.3 protocol standards.
- Data at Rest: Encrypted using industry-standard AES-256 bit algorithms across all database clusters.
- Data Localization: Primary application servers and database clusters are hosted within secured tier-4 data centers with geographic options including AWS Asia Pacific (Mumbai) and Google Cloud regions.
- Retention Policy: Personal data is retained only as long as necessary to fulfill the purpose for which it was gathered, or as required by applicable tax, commercial, and accounting statutes (typically up to 7 years for financial records).
5. Your Rights as a Data Principal
Under the Indian DPDP Act 2023, as well as GDPR and CCPA where applicable, you are entitled to the following statutory rights regarding your personal information:
6. Protection of Children's Personal Data
Thiveo’s enterprise software and commercial services are strictly directed to businesses, professionals, and adults over the age of 18. We do not knowingly collect personal information from minors. In accordance with Section 9 of the DPDP Act 2023 and COPPA standards, if we become aware that personal data of an individual under 18 has been collected without verifiable parental consent, we will take immediate steps to delete such data from our records.
7. Grievance Redressal Officer (DPDP Act & IT Rules)
In accordance with the Information Technology Act 2000 and the Digital Personal Data Protection Act 2023, the details of our designated Grievance Redressal Officer are published below. Any grievances, data correction requests, or privacy concerns will be acknowledged within 24 hours and resolved within 15 working days:
8. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our operational procedures, software updates, or legislative amendments under Indian or international law. When changes occur, the updated policy will be posted on this page with a revised "Effective Date". Continued use of our website or platforms constitutes acceptance of the amended terms.