Privacy Policy

This Privacy Policy outlines the specific practices governing the collection, use, and disclosure of Personal Data (as defined below) from Users. This policy is intended for adult Users engaging in authorized business purposes and supplements any other applicable privacy notices.

Depending on the nature of the Services and the context in which Personal Data is processed, Hyperboost may act as a data fiduciary or, where processing is carried out strictly on behalf of Users and in accordance with their instructions, as a data processor (as defined under applicable data protection laws). In such cases, Users remain responsible for ensuring that they have a valid legal basis, including obtaining necessary consents, for the Personal Data they provide to the Services.

NyayAssist is a continuously evolving technology platform. Certain features may be under development, subject to modification, or not fully optimised. By accessing or using the Platform, you acknowledge that:

• Certain features may change, improve, or be discontinued.
• The Platform may occasionally experience issues, inaccuracies, or downtime.
• We may collect operational and usage information for the purpose of improving system reliability, performance, and user experience.

Importantly, The Services utilise automated and probabilistic systems, including third-party AI service providers, to generate outputs based on User inputs. In order to provide the Services, User inputs, including Customer Data such as prompts, documents, and queries, may be transmitted to and processed by such third-party systems strictly for the purpose of generating requested outputs and enabling platform functionality. Hyperboost does not use Customer Data to train or fine-tune its own models. Model improvements are carried out using publicly available, licensed, synthetic, or non-user data sources. You acknowledge that third-party AI providers operate as independent entities and may process data in accordance with their own policies and terms. Hyperboost does not control the internal operations of such third-party systems, and its liability in relation to such processing is limited to the extent permitted under applicable law. Limited interaction data, including usage patterns, system performance metrics, and logs, may be processed in aggregated and anonymised form solely for purposes of system performance, security, and service improvement.

We collect specific categories of information when you interact with the website:

The collected data is processed for the following legitimate business purposes:

• Service Delivery: To schedule demonstrations, respond to your specific inquiries, and provide you with requested information regarding our Platform, products and services.
• Operational Improvement: To analyze user interaction and website navigation patterns, enabling us to optimize the website's design, functionality, and overall user experience.
• Customising Services: To customise features, outputs, and overall user experience based on your usage patterns, profile, and interactions with the Services, including tailoring AI-generated outputs where applicable.
• AI Processing: To generate, analyse, and refine outputs based on User inputs through automated systems.
• Communication: To send operational updates, marketing communications, and promotional materials related to our offerings, based on your prior inquiries or consent (subject to your right to opt-out).
• Recruitment: To evaluate and process applications and expressions of interest for employment opportunities.
• Security and Compliance: To enforce our Terms of Use, protect the security and integrity of our Platform, and comply with our legal obligations.

Processing of Personal Data is carried out in accordance with applicable law, including on the basis of consent, legitimate uses, or other lawful grounds permitted under the Digital Personal Data Protection Act, 2023.

We utilize cookies and similar technologies to enhance platform usability and analyze interaction behavior. Cookie preferences may be managed or disabled in your browser settings.

We affirm that we do not sell, rent, or lease your personal data to third parties. We may disclose your data only in the following restricted circumstances:

• Third-Party Service Providers: We use third-party service providers, including cloud infrastructure providers, analytics providers, and third-party AI service providers, to operate, maintain, and improve the Services. In order to provide the Services, Personal Data, including User inputs and Customer Data (such as prompts, documents, and queries), may be transmitted to and processed by such third-party providers as necessary for hosting, storage, analytics, and generation of outputs. These providers operate under their own terms and policies and function as independent entities. While we take reasonable steps to select reputable providers, we do not control the internal operations, data handling practices, or policies of such third parties. Accordingly, Hyperboost's responsibility in relation to processing carried out by such third-party providers is limited to the extent permitted under applicable law.
• Legal Compliance and Protection: Disclosure when required by law, subpoena, or other legal processes, or when necessary to protect the rights, property, or safety of NyayAssist, our Users, or the public. This includes cooperation with law enforcement and regulatory authorities.
• During a Business Transfer: In the event of a merger, acquisition, or sale of all or a portion of Our assets, your information may be transferred as part of that transaction.
• With Your Consent: We may share your information with other third parties with your explicit consent.

NyayAssist implements and maintains reasonable security practices and procedures consistent with applicable law, including the Information Technology Act, 2000 and the rules thereunder (including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011), and adopts appropriate technical and organisational measures designed to protect personal data and other data processed through the Services against unauthorised access, alteration, disclosure, or destruction. These safeguards include, but are not limited to, data encryption, secure server infrastructure, and strict access controls. However, no method of transmission over the Internet or electronic storage is fully secure. Therefore, we cannot guarantee its absolute security.

Depending on your location, you may be entitled to exercise the following rights regarding your personal data:

• Right of Access and Rectification: The right to request access to the personal data we hold about you and to have any inaccurate or incomplete data corrected.
• Right to Erasure (Deletion): The right to request the deletion of your personal data, where applicable, subject to applicable law and our legitimate retention requirements, including where such retention is necessary for compliance with legal obligations, enforcement of legal rights, or for limited archival and backup purposes.
• Right to Object/Opt-Out: The right to object to the processing of your personal data for direct marketing purposes and to withdraw consent for any processing where consent was the legal basis.
• Right to Data Portability: Receive your Personal Data in a structured, commonly used, machine-readable format, to the extent applicable under relevant data protection laws.
• Right of Complaint: You retain the right to lodge a formal complaint with a competent supervisory data protection authority.

We will retain your personal data only for the period necessary to fulfill the purposes outlined in this Privacy Policy and consistent with the purposes for which such data was collected, or for a longer period as mandated or permitted by applicable law or regulatory requirements, including for compliance with legal obligations, enforcement of legal rights, and limited archival or backup purposes in accordance with applicable data retention practices. Upon termination of your account or cessation of Services, your personal data will be retained and deleted in accordance with this section and applicable law, including any obligations relating to data retention, deletion, or archival under the Terms of Use.

Our Services are not intended for or directed at individuals under the age of 18 (eighteen) ("Children"), as per the Digital Personal Data Protection Act, 2023. We do not knowingly collect personal information from Children. If we become aware that we have inadvertently collected personal information from a Child, we will take appropriate steps to delete such information promptly in accordance with applicable law and our internal data handling practices.

Your information may be transferred to, stored, maintained or processed in jurisdictions located outside your country of residence, where the data protection laws may differ from those in your jurisdiction.

By using the Services, you acknowledge and, where required under applicable law, consent to the transfer, storage, and processing of your information in India and other jurisdictions. Such transfers will be carried out in accordance with applicable data protection laws and subject to appropriate safeguards, including contractual and organisational protections.

Our website may contain hyperlinks to third-party websites. We are not responsible for the content or privacy practices of such external sites. We strongly encourage you to review the privacy policies of any third-party website before submitting any personal information.

This Privacy Policy is subject to occasional revision, and if we make any substantial changes in the way we use your personal data, we will notify you by sending you an e-mail to the last e-mail address you provided to us or by prominently posting notice of the changes on our website. Any material changes to this Privacy Policy will be effective upon the earlier of 30 (thirty) calendar days following our dispatch of an e-mail notice to you or 30 (thirty) calendar days following our posting of notice of the changes on our site. These changes will be effective immediately for new Users of our website and Platform. Please note that at all times you are responsible for updating your personal data to provide us with your most current e-mail address. In the event that the last e-mail address that you have provided us is not valid, or for any reason is not capable of delivering to you the notice described above, our dispatch of the e-mail containing such notice will nonetheless constitute effective notice of the changes described in the notice. Any such changes will be applied in accordance with applicable law and will not result in the processing of Personal Data in a manner materially inconsistent with the purposes for which it was originally collected, unless otherwise permitted under applicable law or with your consent where required. If you do not wish to permit changes in our use of your Personal Data, you must notify us prior to the effective date of the changes that you wish to deactivate your account with us. Your continued use of the Website or Platform following such notice shall constitute your acknowledgement of the updated Privacy Policy; however, where required under applicable law, we will seek your consent for any material changes affecting the processing of your Personal Data.

In accordance with India's Information Technology Act, 2000, and the rules thereunder, the contact detail of the Grievance Officer is provided below:

• Name: Yash Rane
• Designation: Grievance Officer
• Email: [email protected]

Please contact the Grievance Officer for any complaints or concerns regarding your personal data or this Privacy Policy.

For any questions, concerns, or requests related to this Privacy Policy or to exercise your data protection rights or if you believe that we have not adhered to this Privacy Policy, please contact our privacy team at:

• Email: [email protected]