1. Who we are and what this policy covers

Postver is a product of Riskamy Solutions Pvt Ltd, an Indian company (“we”, “us” or “our”). This policy explains our handling of personal data collected through postver.com and related enquiries, demonstrations, evaluations and support correspondence.

We are responsible for the purposes and handling of that data. Where and when the Digital Personal Data Protection Act, 2023 (“DPDPA”) applies, we act as the Data Fiduciary for it.

Postver is designed to run in your organisation’s own environment. We do not routinely receive the procurement records or user accounts in your installation. Your organisation controls that data and its own privacy notice applies. If you deliberately share information with us for support or evaluation, we handle it for that agreed purpose and under any applicable data-processing agreement.

2. What personal data we collect

We aim to collect only what is needed for the interaction you request.

Contact and enquiry details. The work email you enter in the demo form, and any name, organisation, role or message you choose to provide when contacting us.
Correspondence. Emails, attachments and notes from enquiries, demonstrations, evaluations, quotations and support conversations.
Documents you choose to share. For example, a sample invoice, purchase order or contract for a walkthrough. Use synthetic or redacted examples where possible; do not send live production records or sensitive information unless we have agreed the need and handling arrangements.
Technical and security data. Our hosting and form providers may process IP address, browser or device information, request time, referrer and related metadata to deliver the website and form, maintain logs and prevent abuse.
Appearance preference. Your browser stores your choice of light or dark appearance locally, as described in section 6.

The website does not request sensitive personal data or payment details. We do not sell personal data or use the website to build advertising profiles.

3. Why we collect it

Reply to your enquiry, arrange a demonstration, agree an evaluation or provide a quotation.
Provide agreed onboarding, migration and customer support.
Follow up on a conversation you started about Postver. You can ask us to stop optional follow-up messages.
Deliver the website and form, prevent spam and maintain security.
Meet applicable contractual, accounting, legal and record-keeping obligations.

Submitting a demo request does not subscribe you to an unrelated marketing list.

4. Our lawful basis

We use the information you voluntarily provide to respond to your request, take steps towards a contract or perform an agreed service. Where applicable law requires consent, we rely on that consent and allow you to withdraw it by writing to [email protected]. Withdrawal does not affect earlier lawful processing.

Where and when the DPDPA applies, we rely on consent or the certain legitimate uses permitted by that Act, as relevant to the purpose. Where the UK or EU General Data Protection Regulation applies, the relevant bases may be consent, performance of a contract or steps requested before entering one, our legitimate interests in answering enquiries and securing the website, and compliance with legal obligations.

5. Service providers we use

The website and enquiry workflow use the following services:

Providers used for the Postver website and enquiries
Provider	Purpose	Data involved
Web3Forms	Processes the demo form and delivers submissions to our mailbox.	Submitted form fields and technical metadata, including information used for spam filtering.
Cloudflare	Hosts and serves the website through Cloudflare Pages, provides DNS and security, and routes incoming Postver email.	Website request and security metadata; email content and delivery metadata when routing incoming messages.
Our mailbox provider	Receives and stores enquiries and our correspondence.	Email content, attachments and delivery metadata.

These providers may use their own infrastructure providers and subprocessors. Web3Forms’ Privacy Policy describes its infrastructure, retention and spam-prevention services, which may process a submitter’s email and IP address. Cloudflare describes its processing in its Privacy Policy.

We do not embed advertising pixels, session recording, heatmaps or cross-site advertising trackers in this website. The current site does not embed an analytics script. A provider’s own website or account dashboard may have different practices from the Postver website.

6. Cookies and local storage

The current website does not set advertising or analytics cookies. It saves your appearance choice in browser local storage under postver-site-theme, so your light or dark preference is retained on later visits. We do not use that value to identify or track you, and you can remove it by clearing site data in your browser.

Infrastructure and security services may use strictly necessary browser storage or cookies when needed to deliver or protect the site. We will update this policy and obtain consent where required before introducing non-essential cookies or tracking.

7. How long we keep it

Enquiries and correspondence: generally up to 24 months after our last contact. If you become a customer, relevant records may be kept for the relationship and afterwards as required for contractual or legal purposes.
Documents shared for a preview or quotation: deleted when that purpose is concluded, or earlier on request, unless another agreed purpose or legal obligation requires retention.
Legal and accounting records: retained for the applicable statutory period.
Appearance preference: remains in your browser until you change it or clear the site’s local storage.

At the end of our retention period, we delete or irreversibly anonymise the relevant data. Service-provider copies and logs are subject to their own applicable retention arrangements. In particular, Web3Forms states that form submissions may be retained for up to three years unless a shorter plan period or earlier deletion applies. Contact us if you want us to coordinate a deletion request.

8. Your rights and choices

You can contact us to request access to the personal data we hold about you, correction or completion, deletion of data we no longer need, withdrawal of consent, or an end to optional follow-up messages.

Applicable law may give you additional rights. Where and when the DPDPA applies, these include a summary of your personal data and processing, correction and erasure, nomination of another person to exercise rights in specified circumstances, and grievance redressal. Where the UK or EU GDPR applies, rights may also include portability, restriction, objection and a complaint to the relevant supervisory authority.

Send requests to [email protected]. We will respond without undue delay and within applicable legal time limits. We may ask for the minimum information needed to verify your identity. Requests concerning data in your organisation’s own Postver installation should normally go to that organisation.

9. Where your data is processed

Riskamy Solutions Pvt Ltd is based in India. Our website, form and email providers operate infrastructure in multiple countries, so website enquiries and technical data may be processed outside India.

We follow applicable restrictions and safeguards for international transfers, including contractual safeguards where required. Your organisation separately controls where its Postver installation and connected services process procurement data.

10. How we protect it

The website is served over HTTPS and demo submissions use HTTPS to reach Web3Forms. The public website is static. We limit access to enquiry records to people who need it for the stated purposes and use reasonable administrative and technical safeguards.

No transmission or storage method is completely secure. If a personal data breach requires notification, we will notify affected people and relevant authorities as applicable law requires.

11. Children

This is a business website and is not directed at children. We do not knowingly collect personal data from people under 18. If you believe a child has provided information, contact [email protected] so we can investigate and delete it as appropriate.

12. Privacy contact and grievances

Send all privacy questions, rights requests and grievances to:

Privacy and grievance contact
Riskamy Solutions Pvt Ltd — Postver
Email: [email protected]

We will acknowledge and address complaints without undue delay and within applicable legal time limits. Where the law provides a right to escalate a grievance to the Data Protection Board of India or another competent authority, you may use that route after following the applicable grievance process.

13. Changes to this policy

We may update this policy as our practices, providers or applicable law change. The date at the top identifies the current version. If a change materially affects how we handle your personal data, we will give any notice required by law, including by email where appropriate and where we hold your address.