This Privacy Policy describes how Navspire Tech Private Limited collects, uses, stores, protects, and discloses information collected through the SIM Portal. It applies to all employees, dealers, customers, business partners, contractors, and other authorized users accessing the application.
Overview
Navspire Tech Private Limited ("Navspire", "Company", "we", "our", or "us") respects your privacy and is committed to safeguarding the personal information entrusted to us. This Privacy Policy explains how information is collected, processed, stored, disclosed, and protected while using the SIM Portal and associated services.
By accessing or using the SIM Portal, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy.
Version History
This policy has evolved since its initial internal draft. The summary below tracks material changes across each published version.
Annual management review completed. Updated the Privacy Policy to reflect current privacy practices, information sharing, retention requirements, and added a dedicated Data Disposal section describing secure disposal of personal information at end of retention. Approved for publication.
Initial public release.
Initial internal draft. Established the policy's scope and core sections covering personal, authentication, and technical information collection and use.
Policy Governance
This Privacy Policy is owned by Navspire Tech Private Limited's Information Security Team and is reviewed by management at least annually, or whenever significant changes occur to legal, regulatory, business, or technical requirements.
Information We Collect
To provide and maintain the SIM Portal, we collect only the information necessary to authenticate users, deliver services, improve application performance, maintain security, and comply with applicable legal and contractual obligations. The information collected depends on your relationship with Navspire Tech Private Limited and how you use the application.
Depending on your role and relationship with Navspire Tech Private Limited, we may collect personal details such as your full name, email address, and username, along with your employee or dealer identification number where applicable. We may also record your department, your role within the organization, the name of your organization or company, a business contact number, and general profile information associated with your account.
To secure user accounts, authentication information is processed during login. This includes your username and a password, which is stored only as a secure, one-way hash and never in plain text. Where multi-factor authentication is enabled, related verification details are also processed. The system further maintains session tokens issued at login and records login attempts to support account security and fraud detection.
We automatically collect certain technical information when users access the SIM Portal, including the device's IP address, browser type and version, operating system, general device and network information, and the date and time of access. We also log the URLs requested during a session and the overall duration of that session, which helps us maintain performance and diagnose issues.
For security, operational monitoring, and compliance purposes, the SIM Portal maintains detailed audit records. These records capture user login and logout events, password changes, administrative actions, security-related events, changes to user roles, modifications made to data within the system, and application error logs. Together, these records allow us to investigate incidents, demonstrate compliance, and continually strengthen the security of the platform.
How We Use Information
Navspire Tech Private Limited processes personal information only for legitimate business purposes related to operating, maintaining, and securing the SIM Portal.
The information we collect supports the day-to-day operation of the platform. We use it to authenticate users and manage their accounts, to authorize access according to assigned roles, and to provide the core functionality of the application. It also allows us to maintain secure user sessions, respond promptly to support requests, and monitor the ongoing availability of the system.
Beyond day-to-day operations, this information plays an important role in protecting the platform and the organization. It enables us to detect unauthorized access attempts, investigate potential security incidents, and generate the audit reports required to maintain regulatory compliance. It also supports our efforts to improve application performance, carry out routine maintenance, and safeguard company assets more broadly.
Third-Party Service Providers
Navspire Tech Private Limited may engage carefully selected third-party service providers to support the operation, maintenance, hosting, security, communication, and delivery of the SIM Portal. These providers process personal information only where necessary to perform services on our behalf and only for authorized business purposes.
Before personal information is disclosed to a third-party service provider, Navspire Tech Private Limited evaluates whether the service is necessary and limits the information shared to the minimum required for the requested service.
Third-party service providers that process personal information on behalf of Navspire Tech Private Limited are expected to:
- Use personal information solely for the agreed business purpose.
- Maintain the confidentiality of personal and business information.
- Protect personal information from unauthorized access, disclosure, alteration, or loss.
- Implement appropriate administrative, technical, and organizational security controls.
- Restrict access to authorized personnel with a legitimate business need.
- Comply with applicable contractual obligations and privacy laws.
- Promptly notify Navspire Tech Private Limited of any known security or privacy incident affecting personal information, where required by applicable agreements.
- Return or securely dispose of personal information at the end of the service relationship, where applicable.
- Not disclose personal information to additional third parties without appropriate authorization or a lawful basis.
Data Security
Protecting personal information is one of our highest priorities. We implement administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, loss, or destruction.
Access to the SIM Portal is governed by role-based access control and the principle of least privilege, ensuring that individuals can only reach the information and functions necessary for their role. These controls are reinforced by formal security policies, a structured user provisioning process, and periodic reviews of access rights to identify and remove permissions that are no longer required.
On the technical side, all communication with the SIM Portal is protected using HTTPS encryption, and passwords are stored using secure hashing rather than in plain text. The platform maintains comprehensive audit logging, enforces secure authentication practices, and applies session timeouts to reduce the risk of unauthorized access to inactive sessions.
Data Retention
Navspire Tech Private Limited retains personal information only for as long as it is necessary to fulfill legitimate business purposes, contractual obligations, legal requirements, and security monitoring.
Retention periods may vary depending on the type of information and applicable legal or regulatory requirements. As a general practice, user account information is retained for as long as it is needed for account management, authentication logs are retained to support ongoing security monitoring, audit logs are kept to satisfy compliance obligations and to support any necessary investigations, and system logs are retained to support operational monitoring of the platform.
Data Disposal
Upon expiration of the applicable retention period described in Section 10, or once personal information is no longer necessary for the legitimate business, contractual, or legal purpose for which it was collected, Navspire Tech Private Limited securely disposes of that information from production systems, backups, and archives in accordance with our internal data disposal procedures.
Disposal methods are designed to prevent the recovery or reconstruction of deleted personal information, and are applied consistently across the systems and storage locations used to process personal information for the SIM Portal.
Personal information held in production databases, application logs, and file storage is securely deleted or irreversibly anonymized once its retention period ends, so that it can no longer be associated with an identifiable individual.
Where personal information has been shared with a third-party service provider, that provider is expected to return or securely dispose of the information at the end of the service relationship, consistent with the obligations described in Section 7.
User Rights
Subject to applicable laws and contractual obligations, authorized users may request access to their personal information maintained by Navspire Tech Private Limited.
Where applicable, users may request access to the personal information we hold about them, ask us to correct information that is inaccurate or outdated, or request deletion of their information where this is legally permissible. Users may also request that we restrict certain processing activities, or ask for further information about how their personal data is processed.
Children's Privacy
The SIM Portal is designed exclusively for business use by authorized employees, customers, dealers, contractors, and business partners.
Our services are not intended for children under the age of 18, and we do not knowingly collect personal information from minors.
Changes to this Privacy Policy
Navspire Tech Private Limited reserves the right to update, revise, or modify this Privacy Policy to reflect changes in legal requirements, business operations, security practices, or application functionality.
This Privacy Policy is reviewed by management at least annually, or whenever significant legal, regulatory, contractual, business, or technical changes occur.
Following each review, the Privacy Policy is updated where necessary and approved by management before publication.
The latest approved version of this Privacy Policy is published on this page together with its version number, effective date, and last review date.
Contact Information
Questions regarding this Privacy Policy or our privacy practices may be directed to:
Navspire Tech Private Limited
Acceptance of this Privacy Policy
By accessing or using the SIM Portal, you acknowledge that you have read, understood, and accepted this Privacy Policy.
Continued use of the SIM Portal after updates to this Privacy Policy constitutes acceptance of those changes.