Legal

Privacy notice

Last updated: October 2026 · Version 0.1 (draft)

Template — have counsel review. This document is a draft template prepared for Kosha and has not been reviewed by a lawyer. It must be reviewed and adapted by qualified legal counsel before it is relied on or published as final.

1. Who we are

This notice explains how Nov8iv Solutions, trading as Udgam AI (“we”, “us”), handles personal data in connection with the Kosha website, the Kosha live demo and the Kosha Cloud service. For the website and sales enquiries we act as data fiduciary / controller. For content customers store in Kosha Cloud, the customer is the data fiduciary / controller and we act as data processor under our Data Processing Addendum.

2. The live demo

The demo runs entirely in your browser. Documents and data you create in the demo are stored in your browser’s local storage and are not transmitted to us. Clearing your browser’s site data deletes them.

3. Data we collect

Enquiries: name, work e-mail, organisation, phone and message you send through the contact form or by e-mail.
Website: standard server logs (IP address, user agent, pages requested) kept for security and operations. [Confirm whether any analytics are used before publishing.]
Kosha Cloud account data: administrator and user names, e-mail addresses, authentication data and usage records required to run the service.

4. Why we use it

To reply to enquiries and provide quotes (your request / legitimate use).
To provide, secure and support Kosha Cloud (contract).
To meet legal obligations such as tax and accounting.

We do not sell personal data, and we never use customer content to train AI models.

5. Sharing

We share personal data only with service providers that help us operate (for example hosting and e-mail), under contracts that protect it, or where required by law. AI providers process customer content only if the customer configures them, under the customer’s settings.

6. Where data is stored

Kosha Cloud is hosted in India by default. Other regions are available on request. Where data is transferred outside India or the EEA, we use appropriate safeguards. [List sub-processors and locations before publishing.]

7. Retention

Enquiries are kept for up to 24 months after our last contact. Customer data is retained for the subscription term and deleted in line with the customer agreement after termination.

8. Your rights

Subject to applicable law — including India’s Digital Personal Data Protection Act, 2023 and, where it applies, the GDPR — you may request access, correction, erasure, and the nomination of another person to exercise your rights, and you may withdraw consent and raise a grievance. Write to contact@udgamai.com. [Name a Grievance Officer / DPO and response timelines before publishing.]

9. Security

We use technical and organisational measures appropriate to the risk, described on our security page.

10. Changes

We will post changes here and update the date above.