Privacy Policy

Privacy Statement for KogniVera

Last updated on [June 3, 2026]

KogniVera, its subsidiaries and branch operations (hereinafter referred to as ‘KogniVera’, ‘we’, ‘us’ or ‘our’) is committed to respecting your privacy and choices. This privacy statement (hereinafter “Privacy Statement” or “Statement”) highlights our privacy practices regarding Personal Information that we collect and process in compliance with applicable data privacy regulations, specifically considering our operations in Latin America (LATAM, including Mexico), the United States (US), and India.

Objective

Through this privacy statement, we intend to provide a synopsis of our privacy practices regarding Personal Information that we collect and process about you through various sources. Although the primary focus of this statement is on data collected and processed through our websites that link to this Privacy Statement, including www.kognivera.com and its sub-domains (e.g., careers.kognivera.com, investors.kognivera.com) (collectively referred to as “KogniVera Websites”), our adherence to the principles mentioned below remains across the organization.

The scope of this Statement covers the categories of personal data collected, how we use or process such data, who the recipients are, and your associated rights under applicable laws. This Statement is global but includes region-specific information for LATAM (including Mexico), the US, and India in Section 12 below.

1. Personal Information That We Process and Use

1.1 Personal Information That We Process

We may collect the following categories of Personal Information:

Website usage information: IP address, demographics, operating system, device information, browser type, telemetry data, and information collected via cookies or similar tracking technologies.
Personal and contact details: Name, title, email address, phone numbers, physical address, designation, company/organization, industry, location (city/country), LinkedIn or other professional profile URLs.
Login credentials: Username and password when you register for our portals, platforms, or services (e.g., client support portal).
Audio-Visual information: Photographs or video recordings when you attend our events, webinars, or visit our offices (where signboards are displayed).
Queries and feedback: Comments, questions, or feedback you submit, including correspondence with us.
Marketing and event preferences: Communication preferences, interest areas, subscription details, dietary preferences/allergies (for in-person events).
Sensitive Personal Information: Where required by law or with your explicit consent, we may collect limited sensitive data (e.g., health information for event accommodations, biometric data for physical access control where permitted). See region-specific rules in Section 12.
Additional data for specific relationships: Depending on your interaction (e.g., job applicant, employee, vendor, shareholder), we collect further data as detailed in the section-specific notices at the end of this Statement.

1.2 Sources of Personal Information

We collect Personal Information from:

You directly (via website forms, portal applications, email, phone, or in-person meetings).
Our employees (e.g., sales, marketing, or HR representatives).
Our affiliates and subsidiaries.
Your employer (for business contacts, contractors, or nominated representatives).
Public sources (e.g., your company’s website, professional social media profiles).
Our vendors, suppliers, and service providers (e.g., background check agencies, event organizers).
Cookies and similar tracking technologies on our websites (see our Cookie Policy).

1.3 Use of Your Personal Information

We use your Personal Information for the following purposes:

To provide and improve website usability, troubleshooting, and maintenance.
To analyze website traffic and user behavior to enhance performance.
To create and manage your login credentials for secure access.
To identify you when you register or interact with us online.
To respond to your queries, requests, or support needs.
To personalize content, offers, and recommendations based on your preferences.
To send marketing communications, newsletters, event invitations, and sales- related information (with your consent where required).
To provide access to resources such as white papers, case studies, or webinars.
To register you for ideathons, competitions, or award ceremonies and publish participant/jury details (with appropriate consent).
To publish testimonials or case studies after obtaining necessary permissions.
To generate and manage leads in our customer relationship management (CRM) system.
To perform data analytics, enhance business operations, and strengthen information security (e.g., audit trails, threat monitoring).
To comply with legal obligations (e.g., regulatory filings, court orders, government requests) and protect our legal rights.
To deploy essential and optional cookies (see our Cookie Policy for details).
AI & Machine Learning: Where we use AI or ML for customer experience or analytics, we follow responsible AI practices to protect your data.

1.4 Legal Basis for Processing (General)

We rely on one or more of the following legal bases depending on your jurisdiction (see Section 12 for region-specific details):

Contractual necessity: To perform a contract with you.
Legitimate interests: To understand website usage, secure our systems, optimize business processes – where your data protection rights do not override these interests.
Consent: For marketing communications, event registration, or non-essential cookies (you may withdraw consent at any time).
Legal obligation: To comply with applicable laws, regulatory requirements, or legal proceedings.

2. Consequences of Not Providing Personal Information

If you choose not to provide mandatory Personal Information, we may be unable to fulfill the relevant purpose (e.g., process your request, provide a service, grant access to a platform, or respond to an inquiry).

3. Data Recipients, Transfer, and Disclosure of Personal Information

3.1 Sharing with Third Parties

KogniVera does not share your Personal Information with third parties for their direct marketing purposes. We may share your data with:

KogniVera subsidiaries and affiliates (including across India, the US, and LATAM offices).
Business partners (e.g., joint go-to-market activities).
Service providers (e.g., cloud hosting, CRM, analytics, event management, background verification).
Authorized third-party agents.
Auditors, legal advisors, or government/regulatory authorities where required by law.

3.2 International Data Transfers

We operate across India, the United States, and Latin America (including Mexico). Therefore, we may transfer Personal Information between these regions. The data protection laws in these countries may differ from those in your country of residence.
Where we transfer data internationally, we implement appropriate safeguards, such as:

Standard Contractual Clauses (SCCs) adopted by the European Commission (for transfers from LATAM countries that recognize such clauses).
Binding Corporate Rules (BCRs) where applicable.
Cross-border data transfer agreements compliant with India’s DPDPA rules (once notified) and Mexico’s LFPDPPP.
For transfers from the US, we comply with applicable frameworks (e.g., Data Privacy Framework if eligible).

To obtain a copy of these safeguards, contact us at privacy@kognivera.com.

4. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your Personal Information. See Section 12 for region-specific rights (including for Mexico, Brazil, California, India). General rights (subject to local law):

Right to access, rectify, or erase your data.
Right to restrict or object to processing.
Right to data portability.
Right to withdraw consent (where processing is based on consent).
Right to lodge a complaint with your local data protection authority.

To exercise these rights, contact us at privacy@kognivera.com. We may need to verify your identity before processing your request.
Preference Center: You can update your marketing communication preferences at any time by clicking the “Unsubscribe” link in our emails or by contacting us.

5. Data Security

At KogniVera, we adopt reasonable and appropriate security controls, including administrative, physical, and technical safeguards (e.g., encryption, access controls, firewalls, regular security assessments) to protect your Personal Information against unauthorized access, disclosure, alteration, or destruction. We also require our service providers to maintain similar security standards.

6. Data Retention

We retain Personal Information only as long as necessary to fulfill the purposes outlined in this Statement, unless a longer retention period is required by law (e.g., tax, audit, or legal hold requirements). Retention periods may vary by jurisdiction based on local statutes of limitations and regulatory requirements. Once no longer needed, data is securely disposed of or anonymized.

7. Contact Your Local Data Protection Authority5. Data Security

If you are unsatisfied with how we handle your Personal Information, you have the right to complain to your local data protection authority. For contact details of authorities in Mexico, Brazil, the US (state AGs or FTC), and India, please refer to Section 12.

8. Linked Websites

KogniVera Websites may contain links to third-party websites (e.g., social media, partner sites). We are not responsible for the privacy practices, statements, or content of those third-party sites. We encourage you to read their privacy policies.

9. Children’s Privacy

KogniVera Websites and services are not intended for children under the age of 16 (or the applicable age of digital consent in your jurisdiction: 18 in some LATAM countries, 13 in the US under COPPA, and 18 in India under DPDPA). We do not knowingly collect personal information from children without verifiable parental consent. If we learn that we have inadvertently collected such information, we will delete it promptly.
Please contact us at privacy@kognivera.com if you become aware of any such data.

10. How to Contact Us

If you have any questions about this privacy statement or our privacy practices, please contact our Data Privacy Office:

Contact Person: Atin Jain
Address for India Operations: KogniVera IT Solutions Pvt Ltd, 3rd Floor, Umiya Business Bay – Tower II, Cessna Business Park, Outer Ring Road (Marathahalli – Sarjapur Sector), Kadubeesanahalli, Bengaluru 560103, Karnataka, INDIA.
Address for US Operations: Kognivera IT solutions INC, 815, Barzos St. Ste. 500, Austin TX 78701
Address for Mexico / LATAM Operations: KogniVera Mexico Consulting SA DE CV, Torre Esmeralda 1, PISO 14, Perif. Blvd. Manuel Avila Camacho 40, Lomas – Virreyes, Lomas de Chapultepec III Secc, Miguel Hidalgo, 11000 Ciudad de Mexico, CDMX
Phone: +91 80 62212061

For region-specific inquiries, you may also contact our local representatives (see Section 12).

11. Updates to This Privacy Statement

We may update this privacy statement from time to time to reflect changes in our practices, legal requirements, or technologies. The updated version will be posted on this page with a new “Last updated” date. We encourage you to review it periodically.

12. Region-Specific Disclosures

This section supplements the main Privacy Statement based on your location. If you are a
resident of India, the United States (including California), or Latin America (including Mexico, Brazil, etc.), the following additional terms apply.

12.1 For Residents of India (Under the Digital Personal Data Protection Act, 2023)

Consent Manager: You can manage your consent through our designated Consent Manager (details available on our website).
Data Principal Rights: You have the right to:
1. Access, correction, and erasure of your personal data.
2. Nominate another person to exercise your rights in case of death or incapacity.
3. Withdraw consent at any time (withdrawal does not affect past processing).
Sensitive Personal Data: We process sensitive data (e.g., financial information, health data, biometrics) only with your explicit consent and for specified lawful purposes.
Data Retention: We will delete personal data when the purpose is met or when you withdraw consent (unless retention is required by law).
Grievance Redressal: Our Data Protection Officer (DPO) can be reached at dpo.india@kognivera.com. If unsatisfied, you may appeal to the Data Protection Board of India.

12.2 For Residents of the United States (Including California, Virginia, Colorado, Connecticut, Utah)

We comply with applicable state laws. For California residents, the following applies under the CCPA/CPRA:

Categories of Personal Information Collected: Identifiers (name, email, IP address), professional information, internet activity, geolocation data, and inferences. We do not sell or share your Personal Information for cross-context behavioral advertising.
Sensitive Personal Information: We only use sensitive data (e.g., government ID, precise geolocation) for permitted purposes (e.g., security, anti-fraud).
Your Rights (California): Right to know (access), delete, correct, opt-out of “sales/sharing” (we do not sell), and non-discrimination.
“Shine the Light” Law (Cal. Civ. Code § 1798.83): We do not share Personal Information with third parties for their direct marketing purposes. California residents may request a list of such disclosures (if any) by emailing privacy@kognivera.com.
For other state residents (VA, CO, CT, UT): You have rights to access, delete, correct, data portability, and opt-out of targeted advertising (if applicable).

US Contact: privacy.us@kognivera.com

12.3 For Residents of Latin America (LATAM) – with special focus on Mexico and Brazil

Mexico (Under the LFPDPPP – Ley Federal de Protección de Datos Personales en Posesión de los Particulares)

ARCO Rights: You have the right to Access, Rectification, Cancellation, and Opposition (ARCO) to the processing of your personal data.
Sensitive Data: We will obtain your explicit written consent before processing sensitive personal data (e.g., health, biometrics, religious beliefs, trade union membership).
Data Transfers: We inform you that your data may be transferred to India, the US, or other LATAM countries. By using our services, you acknowledge such transfers. You may object to transfers for non-essential purposes.
Contact for Mexico: Our Privacy Officer for Mexico can be reached at privacidad.mx@kognivera.com or at our Mexico City address listed in Section 10. You may also contact the INAI (National Institute for Transparency, Access to Information and Personal Data Protection) to exercise your rights.

Brazil (Under the LGPD – Lei Geral de Proteção de Dados)

Legal Bases: In addition to those in Section 1.4, we may process data for credit protection, legal defense, and health/safety purposes.
Your Rights: Access, correction, anonymization, blocking, deletion, data portability, information about data sharing, and withdrawal of consent.
ANPD: You have the right to complain to the Brazilian National Data Protection Authority (ANPD).

Other LATAM Countries (Chile, Argentina, Colombia, Peru, etc.)

Where applicable, we comply with local data protection laws (e.g., Chile’s Law 19.628, Argentina’s Law 25.326, Colombia’s Law 1581 of 2012, Peru’s Law 29733). You may exercise your local rights (such as habeas data in Colombia and Peru) by contacting privacy.latam@kognivera.com.

Privacy Statements for Other Categories of Data Subjects (Global)

The following additional notices apply regardless of region, but may have region-specific variations (e.g., sensitive data definitions in Mexico).

A. Job Applicants and Interns

(Detailed notice provided on our careers page)

Categories: Name, contact details, resume/CV, date of birth, educational qualifications, skills, employment history, background verification data, passport details (if shortlisted), national identification number (where required by law), and optionally willingness to travel.

Purposes: Assessing candidate suitability, recruitment, background verification, and compliance with labor laws.

Legal Basis: Contractual necessity (pre-contractual steps) or consent where applicable.

B. Employees and Alumni

(Full notice provided at onboarding and on alumni portal)

Categories: Contact and family details, educational qualifications, work history, \ national ID, compensation, tax and banking information, performance records, IT access logs, health and safety records, attendance, and monitoring of official systems (as permitted by law).

Purposes: Onboarding, employment administration, payroll, compliance, alumni engagement.

C. Investors/Shareholders

Categories: Name, tax ID (e.g., PAN in India, RFC in Mexico), demat account details, residential status, contact details, date of birth, estimated income.

Purposes: Administering dividends, tax deduction at source, regulatory filings.

D. Visitors to Our Offices (including Mexico, India, US locations)

Categories: Name, contact details, organization, assets, date and purpose of visit, photograph, and CCTV footage.

Purposes: Physical security, access control, visitor management.

Legal Basis (Mexico): Legitimate interests and, where required, explicit consent for biometric or CCTV processing.

E. Vendors and Suppliers

Categories: Vendor contact name, business address, tax details (GST, RFC, VAT), payment information, point-of-contact details.

Purposes: Vendor empanelment, purchase orders, invoicing, payment, compliance.

For more information on cookies, please refer to our Cookie Policy at www.kognivera.com/cookie-policy. For region-specific data protection authority contact details (INAI in Mexico, ANPD in Brazil, DPE in Colombia, Data Protection Board of India, etc.), please contact privacy@kognivera.com.