Privacy Policy

This policy explains what information Nivesh (“Nivesh,” “we,” “us,” or “our”) collects when you use nivesh.org.in (the “site”), how it’s used, and what rights you have over it. Nivesh is built to work without asking anything of you: there’s no sign-up, no account, and nothing you type into a calculator is ever sent to us. Most of this policy exists to make that precise rather than to describe extensive data practices, because there aren’t any.

This policy is written with reference to India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Information Technology Act, 2000, as the primary laws governing how we handle personal data of users in India.

1. Information we collect

We’ve grouped this by where information could plausibly come from, since that’s usually more useful than a single blanket statement.

Information you provide directly. The only way to voluntarily give us any information is to email us (see Contact). If you do, we’ll have whatever you included: your email address, name if you signed off with one, and the content of your message. We use this only to respond to you.

Calculator inputs.Every number you enter into a calculator, income, loan amount, tenure, rate, and so on, is processed entirely inside your browser using client-side JavaScript. It is never transmitted to our servers, never logged, and never stored anywhere outside your own device’s memory for that session. We have no way to see what you entered into a calculator, because it never reaches us.

Information collected automatically.We use Google Analytics to see which pages and calculators get used, so we know what’s worth improving (see Section 4). Separately, our hosting infrastructure generates standard technical logs, covered in Section 8, which we don’t access or process ourselves.

2. How we use information

Given how little we collect, this is short. We use:

• Information from an email you send us, solely to read, respond to, and (if it’s a bug report) act on your message.
• The install-prompt flag described in Section 5, solely to avoid repeating a prompt you dismissed.

We don’t use anything you tell us for advertising, profiling, or automated decision-making, and we don’t sell, rent, or trade information to anyone. There’s no marketing list, and no third party ever receives your email address from us.

3. Legal basis for processing

Under the DPDP Act, processing personal data generally requires either the data principal’s consent or a specified “legitimate use.” The personal data we handle when you email us is processed on the basis of your consent, given by the act of emailing us, for the specific purpose of responding to you. Pseudonymous analytics data (Section 4) is processed on the basis of the notice given in this policy, which you accept by continuing to use the site; you can opt out at any time using the methods described in Section 4. We don’t process any other category of personal data, so no other legal basis is needed.

4. Cookies and tracking technologies

We don’t set any cookies of our own. We use Google Analytics 4 to understand which pages and calculators get used. Google Analytics sets its own cookies to distinguish visitors and measure engagement, things like time on page, which calculator was opened, and whether a result was downloaded or shared.

What it doesn’t see: anything you type into a calculator. That data never leaves your browser, as described in Section 1, regardless of your analytics settings.

Google acts as our data processor for this information; see Google’s own Privacy Policy for how it handles data on our behalf. To opt out, use your browser’s tracking-protection or cookie-blocking settings (most modern browsers support this natively), or install Google’s own opt-out browser add-on, which blocks Google Analytics on every site you visit, not just this one.

5. Local storage

This site uses your browser’s local storage for exactly one thing: remembering whether you’ve dismissed the “install this as an app” prompt, stored as a timestamp, so it doesn’t keep reappearing. That value lives only on your device, identifies nothing about you, and is never transmitted to us or anyone else. You can clear it at any time through your browser’s site-data settings.

6. How we share information

We don’t share, sell, or otherwise disclose personal information to third parties for their own purposes. The narrow exceptions are:

• Service providers. Our hosting and content-delivery infrastructure (currently AWS) processes standard technical request data as part of serving the site, as described in Section 8. Google Analytics processes pseudonymous usage data on our behalf, as described in Section 4. Both act as our infrastructure/service providers, not independent recipients of your data.
• Legal requirements. We may disclose information if required to by law, a valid court order, or a governmental request, or where necessary to protect the rights, safety, or property of Nivesh, our users, or the public.
• Business transfers. If Nivesh were ever acquired, merged, or transferred, the limited information described in this policy could transfer as part of that transaction, subject to the same commitments described here.

7. Data security

Because calculator inputs never leave your browser, the vast majority of what you do on this site simply isn’t exposed to any of the usual risks of server-side data handling, there’s no database of user inputs to secure or breach. The site is served entirely over HTTPS. Any email you send us is handled through standard, reputable email infrastructure. No method of transmission or storage is perfectly secure, and we can’t guarantee absolute security, but the amount of personal data at risk here is, by design, minimal.

8. Data retention

Calculator inputs are never retained by us in the first place, they exist only transiently in your browser. Emails you send us are retained for as long as reasonably needed to address your message and for a limited period afterward for our own record-keeping, after which they’re deleted or anonymized. Our hosting and content-delivery provider generates standard technical logs (IP address, browser type, requested URL, timestamp) as a routine part of serving web traffic and securing infrastructure against abuse; these are retained according to that provider’s own standard log-retention practices, not a policy we set, and we don’t access them to identify individual visitors.

9. Your rights

As a data principal under the DPDP Act, you have the right to: access information about how your personal data is processed; request correction or erasure of your personal data; withdraw consent at any time (for example, asking us to delete an email exchange, or opting out of analytics as described in Section 4); and register a grievance regarding how your data has been handled. Since the only personal data we hold directly is whatever you’ve emailed us, exercising any of these rights is as simple as writing to us at the address in Section 13, and we’ll act on it directly.

10. Children’s privacy

This site isn’t directed at children and isn’t designed to collect information from them. Since we don’t collect personal information from any visitor as a matter of course, we don’t knowingly collect it from children either. If you believe a child has sent us personal information via email, contact us and we’ll delete it.

11. Hosting and data location

This site is hosted on infrastructure that may store or process data outside India, as is standard for global content-delivery networks. Since the only personal data we ever handle is an email you choose to send us, this mainly concerns the routine technical logs described in Section 8, not any calculator data, none of which ever leaves your device.

12. Third-party links

This site links to external resources (news articles, official government pages, and similar) from within blog content, and blog articles are occasionally shared via your device’s native share function. We aren’t responsible for the privacy practices of any site you reach by following a link away from Nivesh; check their own policy before sharing anything there.

13. Grievance officer and contact

In accordance with the Information Technology Act, 2000 and the DPDP Act, questions, complaints, or grievances about how this policy is applied, or requests to access, correct, or erase personal data you’ve shared with us, can be directed to:

Email: connect@nivesh.org.in
Response time: we aim to acknowledge grievances within a reasonable time and resolve them promptly.

14. Changes to this policy

We may update this policy as the site evolves. The date at the top of this page always reflects the most recent revision. Material changes, particularly anything that would expand what we collect, will be described clearly in this document rather than folded in silently, and won’t be applied retroactively to how earlier data was handled.

15. Contact us

For anything covered in this policy, reach us at connect@nivesh.org.in. See also our Terms of Service and Disclaimer.