Privacy policy

This policy explains what personal information Provate collects, why, who we share it with and the choices and rights you have. We've written it to meet the privacy laws of the United States, the European Economic Area, the United Kingdom, India and Australia. Where those laws give you different rights, the section for your location tells you what applies.

Who we are

"Provate", "we" and "us" mean Provate Inc. and its Indian affiliate, Provate Technologies Pvt. Ltd. Provate Inc. is responsible for personal information collected through this website and in our US operations. Provate Technologies Pvt. Ltd. is responsible for information it collects in India.

Privacy questions: privacy@provate.net · Office: +1 (512) 666-9422

What this policy covers

This policy covers provate.net, emails and calls with us, events, and our recruitment process. It does not cover personal information we process on behalf of our clients when we deliver managed services. In that work we act as a service provider or processor, and the client's own privacy notice and our contract with the client govern that data.

Information we collect

We do not collect payment card details, precise geolocation, biometric data or health data through this website. We don't ask for sensitive information. If an applicant volunteers it, or if the law requires us to collect it (for example, to verify the right to work), we use it only for that purpose.

How we use it

We do not sell personal information. We do not share it for cross-context behavioral advertising, use it for targeted advertising, or use it for profiling that produces legal or similarly significant effects. We do not make decisions about you using solely automated means.

Cookies and analytics

We use one strictly necessary item to remember your cookie choices. With your consent, we also use Google Analytics 4 to count visits and see which pages are useful. Google Analytics does not load until you choose to allow it. We have turned off Google signals, advertising features and ad personalization, and analytics cookies expire after 13 months. You can change your choice at any time under Cookie settings at the bottom of every page. Our cookie policy lists every cookie.

Who we share it with

• Service providers who host our website and email, deliver contact-form messages to our inbox, provide analytics (Google LLC, only with your consent), support recruitment, and provide IT and security services. They may use the information only to provide services to us, under written contracts.
• Our affiliates, Provate Inc. and Provate Technologies Pvt. Ltd., to run our business across both countries.
• Professional advisers such as lawyers, auditors and insurers.
• Authorities when the law requires it, or to protect rights, safety and property.
• A buyer or successor if we're involved in a merger, acquisition or sale of assets. We'll tell you if that changes how your information is handled.

International transfers

We operate in the United States and India, so your information may be processed in either country. When we transfer personal information out of the EEA, UK or Switzerland, we use the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or another lawful mechanism. Personal information from Australia may be disclosed to recipients in the United States and India, and we take reasonable steps to make sure they handle it in line with the Australian Privacy Principles. Transfers from India follow the Digital Personal Data Protection Act, 2023 and any restrictions the Government of India sets.

How long we keep it

We may keep information longer if the law requires it or to deal with a legal claim. When we no longer need it, we delete or anonymize it.

Security

Provate Technologies Pvt. Ltd. maintains an information security management system certified to ISO/IEC 27001:2022 for remote IT infrastructure and security managed services (certificate PRO240441ISIN, issued by BMG Conformity Assessment Services and accredited by the United Accreditation Foundation). We protect personal information with technical and organizational measures suited to the risk, including access controls, encryption in transit, monitoring and staff training. No system is perfectly secure. If a breach affects your information, we'll notify you and the relevant regulators as the law requires, for example within 72 hours under the GDPR, to the Data Protection Board of India and CERT-In, under Australia's Notifiable Data Breaches scheme, and under US state breach laws.

Your rights and how to use them

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict how we use it, to withdraw consent, and to opt out of sale, sharing, targeted advertising or profiling. To make a request, email privacy@provate.net or call +1 (512) 666-9422.

• We'll confirm we received your request and verify your identity using information we already hold. We never ask for more than we need.
• You can use an authorized agent. We may ask the agent for signed permission and ask you to confirm your identity.
• We respond within the time your law allows: 45 days in the United States (extendable once by 45 days), one month in the EEA and UK (extendable by two months for complex requests), 30 days in Australia, and no later than 90 days in India.
• Making a request is free, and we will never treat you differently for using your rights.

United States

This section applies to residents of states with comprehensive privacy laws, including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia, and any state whose law takes effect later.

• Your rights: to know and access, correct, delete, get a portable copy, and opt out of sale, targeted advertising and profiling. We don't do any of those three, so there's nothing to opt out of, but you can still tell us your preference and we'll record it.
• Global Privacy Control: if your browser sends a GPC signal, we treat it as a valid opt-out request for that browser and keep analytics turned off.
• Appeals: if we decline your request, you can appeal by replying to our decision or emailing privacy@provate.net with "Appeal" in the subject. We'll respond within 60 days (45 days in Colorado). If you disagree with the outcome, you can contact your state attorney general.
• California: in the past 12 months we collected the categories in the table under "Information we collect": identifiers, professional or employment information, internet activity and, for applicants, any sensitive information required by law. We disclosed them only to the service providers described above, for business purposes. We have not sold or shared personal information, including that of consumers under 16. We use sensitive information only for purposes the CCPA permits, so the right to limit doesn't apply. We offer no financial incentives. Under California's "Shine the Light" law, we don't share personal information with third parties for their direct marketing.
• California communications privacy (CIPA): we don't allow third parties to read, record or intercept the contents of your communications with us. This website does not use chat widgets, session replay or recording tools, keystroke logging, heatmaps, or advertising and social media pixels. The only third-party tool is Google Analytics, which loads only after you opt in and receives page-level usage data, not the contents of anything you type. We don't record phone calls. If we ever add a feature that shares communications with a service provider, such as live chat, we'll tell you before you use it and ask for your consent.
• Nevada: we don't sell covered information as Nevada law defines it.
• Consumer health data: we don't collect consumer health data as defined by Washington's My Health My Data Act or similar laws.

European Economic Area, United Kingdom and Switzerland

You have the rights of access, rectification, erasure, restriction, data portability and objection, including the absolute right to object to direct marketing. Where we rely on consent, you can withdraw it at any time without affecting earlier processing. You can complain to the data protection authority where you live or work, or in the UK to the Information Commissioner's Office. We'd appreciate the chance to resolve your concern first.

India

Under the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025, you are a Data Principal and we are a Data Fiduciary. We process your personal data with your consent or for a legitimate use the Act allows. You have the right to:

• get a summary of the personal data we process and the processing activities, and the identities of those we've shared it with
• have your data corrected, completed, updated or erased
• withdraw consent as easily as you gave it. After you withdraw, we stop processing unless the law requires otherwise
• nominate another person to exercise your rights if you die or become incapacitated
• have your grievances addressed. We'll resolve them within 90 days

Grievance Officer: Nandish Kumar, nandish@provate.net, 5th Floor, Western Aqua, Hitech City Road, Kondapur, Hyderabad, Telangana 500081. If you're not satisfied with our response, you can complain to the Data Protection Board of India. On request, we'll give you this notice in English or in any language listed in the Eighth Schedule to the Constitution of India.

Australia

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. You can deal with us anonymously or under a pseudonym where that's practical, for example for a general inquiry. You can ask to access or correct your personal information, and we'll respond within 30 days. We don't use computer programs to make decisions that could significantly affect your rights or interests. If you have a complaint, contact us first. If you're not satisfied with our response within 30 days, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Job applicants

This is our notice at collection for job applicants, including California applicants. We collect your contact details, resume, work history, education, references and right-to-work information, plus anything you choose to share. We use them to assess your application, communicate with you, verify information and comply with employment law. We don't sell or share applicant information. We keep it for 12 months after a hiring decision, or up to 24 months if you ask us to consider you for future roles. If you're hired, it becomes part of your employee record. If you choose to give us equal opportunity information in the US, it's voluntary, kept separate and never used in hiring decisions.

Children

Our website and services are for businesses and are not directed at children. We don't knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact us and we'll delete it.

Changes to this policy

We review this policy at least once a year. If we make a material change, we'll update the date at the top and, where the law requires, notify you or ask for your consent again.

Contact us

Email privacy@provate.net, call +1 (512) 666-9422, or write to Provate Inc., 7300 State Highway 121, Suite 300, McKinney, Texas 75070, United States.