Privacy Policy

This Privacy Policy explains how Nablr & Co. (“we”, “us”) collects, uses, shares, and protects personal data when you visit our websites or use our products, in line with the Digital Personal Data Protection Act, 2023 (India) (“DPDP Act”) and other applicable law.

Account information: name, email, and organization details you provide when signing up.

Billing information: processed by our billing provider, Zoho, on our behalf. We do not store full payment card details ourselves.

Usage information: limited product telemetry needed to operate the Services. For example, nablr makes exactly one outbound call (license validation) and does not transmit your source code.

Communications: information you share with us via email or support channels.

To provide, maintain, and secure the Services.

To process billing and manage subscriptions.

To respond to support requests and feature requests.

To comply with legal obligations.

We process personal data on the basis of your consent, given when you sign up for or use the Services, and as necessary to perform our contract with you or comply with law.

You may withdraw consent at any time by writing to hello@nablrco.com, subject to Services we can no longer provide as a result.

We share data with service providers who process it on our behalf, including Zoho (billing) and our hosting/infrastructure providers, under confidentiality obligations.

We do not sell personal data.

We may disclose data if required by law or to protect our legal rights.

We retain personal data for as long as needed to provide the Services and to meet legal, accounting, or reporting obligations, after which it is deleted or anonymized.

Under the DPDP Act, you have the right to access, correct, and request erasure of your personal data, and to withdraw consent.

You may exercise these rights, or raise a grievance, by writing to our Grievance Officer (see Section 8).

For any privacy-related queries or grievances, contact us at hello@nablrco.com. We will acknowledge and address grievances within the timelines prescribed by the DPDP Act.

Our websites may use essential cookies and privacy-respecting analytics to understand aggregate usage. We do not use these to build advertising profiles.

We apply reasonable technical and organizational measures, including encryption in transit, to protect personal data against unauthorized access, loss, or misuse.

Our products are not directed at children. If a product (e.g. Invern) is used by students under the age of majority, account creation and consent are handled through a parent or guardian as required by applicable law.

Where personal data is transferred outside India (e.g. to a hosting provider), we take reasonable steps to ensure it remains protected consistent with this Policy and applicable law.

We may update this Policy from time to time. Material changes will be reflected in the “Last updated” date on this page.