Before you make a request, it's worth checking you're asking the right organisation, because it will get you a faster answer.
If you dealt with Consiva directly — you visited consiva.ai, enquired, requested a walkthrough, or use the platform as a customer or an Authorised User — we are the right party. Continue below.
If a business you dealt with uses Consiva — you saw a consent banner powered by Consiva, or a business told you it manages consent through Consiva — that business is the right party, not us. They decided what data to collect and why; they hold the relationship and the obligation. We process it on their instructions and cannot act on your request in respect of their data. Contact them directly. If you can't identify them or find their contact route, write to us and we will do what we reasonably can to point you in the right direction.
Access — a summary of the personal data we hold about you, what we are doing with it, and the identities of others with whom we have shared it.
Correction, completion and updating — to have inaccurate or misleading data corrected, and incomplete data completed.
Erasure — to have your personal data erased, where it is no longer needed for the purpose it was collected for and no law requires us to keep it.
Withdraw consent — where our processing of your data relies on your consent, you can withdraw it at any time, as easily as you gave it. Withdrawal does not affect processing already carried out, and does not affect processing that rests on another lawful ground — for example, we must keep invoice records for tax purposes even if you withdraw marketing consent.
Nominate someone — nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.
Raise a grievance — about how we have handled your data or your request. See Section 6.
Email: privacy@consiva.ai
Post: Privacy Requests, Swaran Soft Support Solutions Private Limited, Tower A, Unit No. 2, 2nd Floor, The Cityscape, Sector-66, Golf Course Extension Road, Gurugram, Haryana – 122102, India
Please tell us:
We will verify your identity before acting, because disclosing personal data to someone who is not you would itself be a breach.
Verification is usually straightforward — confirming you control the email address associated with the data. Where a request is broader or higher risk, we may ask for further information. We will ask for the minimum necessary, and we will not require you to create an account to make a request.
If we cannot verify you, we will tell you why, and what would allow us to proceed.
Acknowledgement: we will acknowledge your request within 3 business days.
Substantive response: within 30 days of verifying your identity.
No charge. We do not charge for exercising your rights.
If we cannot fully comply, we will tell you which part we cannot action and why — for example where a statutory retention obligation prevents erasure, where the data is needed to establish or defend a legal claim, or where complying would disclose another person's personal data.
Reasonable limits. We may ask for clarification where a request is unclear, and we may decline to act on repetitive or manifestly excessive requests — but we will explain our reasoning rather than simply not responding.
If you are unhappy with how we handled your data or your request:
Step 1 — Tell us. Write to privacy@consiva.ai with "Grievance" in the subject line, describing what happened and what outcome you are seeking. We will acknowledge within 3 business days and respond substantively within 30 days.
Step 2 — Escalate internally. If you are not satisfied, ask for escalation to:
Saurabh K
Privacy Officer & Grievance Officer
saurabhk@swaransoft.com
Step 3 — The Data Protection Board of India. If your grievance remains unresolved, you may complain to the Data Protection Board of India, which has been constituted under the DPDP Act, 2023. You are not required to exhaust our process first, though it is usually faster. For the Board's current complaint channel, refer to the Ministry of Electronics and Information Technology's official website (meity.gov.in), which publishes the Board's contact and filing details.
Where another privacy law applies to our processing of your data, you may exercise the rights it gives you through the same channels. Tell us which jurisdiction you are in so we can apply the right framework. → Privacy Policy section 11
We sell software for handling exactly these requests. It would be a poor advertisement for it if our own process were an unmonitored inbox. If any part of this process fails you, we would like to know — that feedback improves both our compliance and our product.