Version 1.0Effective: September 2026

Privacy Policy

This Privacy Policy explains factually and transparently how Proventa collects, processes, protects, and handles personal data across our Concierge Life OS.

1. Introduction & Venture Scope

Proventa is an exclusive, private Concierge Life OS developed and operated as a founder-led venture in Ahmedabad, Gujarat, India. Our service enables members to delegate lifestyle, dining, travel, and personal coordination mandates through intelligent technology paired with verified human concierge execution.

This policy applies to all interactions with Proventa websites, mobile web applications, customer dashboards, Concierge communication channels, and early-access programs.

Our Sovereign Privacy Principles:

We do NOT sell, lease, or monetize customer personal data to third-party data brokers.
We do NOT embed behavioral advertising networks or third-party ad tracking scripts.
We collect only information strictly necessary to understand and fulfill concierge mandates.
Customer requests and private communications are NEVER used to train external public foundation models.

2. Information We Collect

Depending on how you interact with Proventa and the specific mandates you delegate, we may collect the following categories of data:

Account & Authentication CredentialsFull name, verified email address, phone number, cryptographically hashed passwords (via bcrypt), and one-way hashed Proventa Authentication Keys (never stored in plaintext or accessible to staff).

Lifestyle & Member PreferencesDietary requirements, seating preferences, preferred cabin classes, hotel tiers, loyalty affiliations, and primary city location explicitly provided.

Concierge Requests & Approval HistoryTask descriptions submitted, travel itineraries, reservation dates/times, guest counts, option selections, approval/rejection timestamps, and feedback.

Technical, Session & Security LogsSession tokens, IP address, browser user-agent, rate-limiting counters, and microsecond immutable audit trail events.

3. How Information Is Used

Proventa processes personal information strictly for genuine operational, service delivery, and safety purposes:

Request Understanding & Research: Analyzing task constraints to identify matching verified venues, airlines, and hospitality options.
Option Curation: Preparing structured recommendation batches of up to 25 genuine options for member review.
Approved Task Execution: Transmitting necessary reservation details to authorized providers upon explicit member approval.
Member Communication: Sending transactional updates, proposal ready notifications, booking confirmation cards, and security alerts.
Fraud Prevention & Security: Enforcing rate limiting, role-based customer isolation, session integrity, and immutable audit trails.
Legal & Regulatory Compliance: Fulfilling applicable statutory recordkeeping and tax requirements under Indian law.

4. Artificial Intelligence & Autonomous Processing

Proventa utilizes specialized artificial intelligence models to assist with natural language intent understanding, category classification, initial option research, and proposal formatting.

Authoritative Verification Standard:

AI-generated outputs are research and curation proposals. They do not constitute guaranteed vendor availability or confirmed provider bookings. Genuine booking confirmation is established only upon provider confirmation or authorized Proventa Concierge execution.

5. Human Concierge Access

Authorized Proventa concierge personnel access customer task data on a strict least-privilege principle:

To execute customer-approved bookings with offline or bespoke partner providers.
To coordinate high-touch arrangements requiring direct venue negotiation.
To resolve operational escalations or customer support inquiries.

6. Third-Party Service Providers

When necessary to fulfill an approved request, relevant details (e.g. guest name, date, party size, flight requirements) may be shared with verified providers, including:

Hospitality & Travel: Airlines, aviation GDS partners, hotel properties, fine dining venues, and chauffeur services.
Payment Infrastructure: Razorpay Software Private Limited for secure payment processing and checkout.
Communications & Cloud: Resend (transactional email), AWS/Cloudflare (sovereign cloud infrastructure).

7. Non-Custodial Payment Standards

Proventa enforces a zero-custodial payment security standard. We do NOT collect, store, or process:

UPI PINs or banking passwords.
Credit or debit card CVV / CVC numbers.
Raw debit/credit card numbers or netbanking credentials.

All payment transactions are tokenized and processed directly via PCI-DSS compliant infrastructure provided by Razorpay.

8. Data Retention & Security Safeguards

Personal data is retained only as long as reasonably necessary to provide concierge services, maintain member preferences, and satisfy statutory tax or dispute resolution obligations.

Security safeguards include: bcrypt password hashing (12 rounds), personal security key validation on logins, role-based access control (RBAC), multi-tenant customer data isolation, TLS 1.3 encryption in transit, and immutable audit logs.

9. Your Data Rights & Privacy Requests

Proventa is designed to support applicable Indian data-protection requirements. Members have direct access to:

Access & Export: Instant JSON export of your complete account, preferences, and task records via Data Rights & Privacy Requests.
Correction: Update personal details and lifestyle preferences directly from your member profile.
Erasure & Consent Withdrawal: Submit account erasure or consent withdrawal requests via our privacy desk.

10. Eligibility & Grievance Redressal

Proventa Concierge Life OS is intended exclusively for individuals aged 18 years or older. We do not knowingly collect personal data from minors.

For any questions, concerns, or privacy redressal, please contact our designated privacy desk at privacy@proventa.in or visit our Grievance Desk.