1. Who we are
PVN Globals is the legal business operating ComplyMore. In this notice, “PVN Globals”, “ComplyMore”, “we”, “us” and “our” refer to PVN Globals.
2. Scope and our roles
This notice applies when you visit our marketing website, create or use a ComplyMore account, manage an organisation or workspace, register and scan a website, configure a consent banner, subscribe to a paid plan, or contact us.
For personal data about our users, prospects and support contacts, PVN Globals determines why and how that data is processed. For visitor consent records that a customer collects through ComplyMore on the customer’s website, the customer determines the relevant purposes and settings; PVN Globals processes those records to provide the service on the customer’s behalf. Customers remain responsible for their own privacy notices, lawful basis, consent choices and use of trackers.
3. Personal data and other information we handle
| Category | Examples | How we obtain it |
|---|---|---|
| Identity and account | Email address, authentication identifier, display name, session information and optional Google sign-in details. | From you and our authentication provider when you register or sign in. |
| Organisation and access | Organisation, workspace and team names; roles; memberships; invited email addresses; access and audit events. | From account owners, administrators and members using the service. |
| Managed website and scan | Website URLs and domains, verification status, public page URLs and titles, observed cookie names and attributes, browser-storage key names, scripts, iframes, pixels, network endpoints, theme tokens, logos, favicons, classifications and review decisions. | From you and from automated scans of public pages you ask us to scan. The scanner records storage key names, not localStorage or sessionStorage values. |
| Banner configuration | Banner styles, languages, notice text, category settings, configuration versions, publication history and installation state. | From your use of the configuration and publishing tools. |
| Consent evidence | Site-scoped random consent and event identifiers, consent or withdrawal type, category choices, language, configuration/content/SDK versions, timestamps, prior-event references and integrity digests. | From the ComplyMore SDK installed on customer websites. Consent receipts deliberately exclude full IP addresses, raw user agents and referrers. |
| Billing | Billing contact name, email and phone number; plan and billing cycle; subscription/payment identifiers and status; payment amount, currency and renewal dates. | From you and Cashfree. Cashfree collects payment credentials through its hosted payment flow; we do not receive full card or UPI credentials. |
| Communications | Messages, support requests, feedback and related correspondence. | From you when you contact us. |
| Technical and security | Request timestamps, device/browser information, approximate network information, error records and security events. | Automatically from browsers, servers and hosting/security providers. Full IP addresses may be processed transiently for delivery and security but are not stored in consent receipts. |
4. Why we process information
We use the information described above to:
- create accounts, authenticate users and maintain sessions;
- provide organisations, teams, workspaces and role-based access;
- register, verify and scan customer-authorised websites;
- classify findings, support human review, generate banner configurations and publish versioned configuration files;
- receive, retain, search and export privacy-minimised consent evidence on a customer’s behalf;
- administer subscriptions, process payments and keep billing records;
- provide support and communicate about service or security matters;
- protect the service, prevent abuse, diagnose errors and enforce our terms; and
- comply with applicable law and respond to lawful requests.
Depending on the context, processing is based on your consent, steps requested before entering a contract, performance of our contract with you, applicable legitimate uses recognised by law, or compliance with a legal obligation. You may withdraw consent where consent is the applicable basis; withdrawal does not affect processing already carried out lawfully.
7. Data location and transfers
Primary ComplyMore application, scan and consent data is designed to be stored in Supabase’s ap-south-1 (Mumbai) region, and production scanner jobs are designed to run in Google Cloud’s Mumbai region. Public assets and network requests may be delivered or processed by global content-delivery, security, authentication or payment infrastructure. Where information is processed outside India, we use contractual and technical safeguards and comply with applicable restrictions on cross-border processing.
8. How long we retain information
We retain account and service data while an account is active and afterwards only for as long as reasonably necessary to provide the service, fulfil the purpose for which it was collected, resolve disputes, enforce agreements, maintain security and meet legal, tax, accounting or audit duties. If an authorised owner permanently cancels an account or organisation, its organisation data—including consent evidence—is deleted as described in our Account Cancellation and Refund Policy. Customers should export required records before confirming deletion.
When information is no longer required, we delete or anonymise it, subject to backup cycles and any lawful retention requirement. A customer’s account deletion does not require us to erase records that must be retained for legal, billing, fraud-prevention or security purposes.
9. Security
We use measures intended to protect information against unauthorised access, alteration, disclosure and loss. These include encrypted transport, access controls, tenant-scoped authorisation, database row-level security, restricted service credentials, input validation, audit records and privacy-minimised consent receipts. No internet service is completely secure, so we cannot guarantee absolute security.
10. Your choices and rights
Subject to applicable law, you may ask for a summary of your personal data and processing activities, correction or completion of inaccurate data, erasure of data that is no longer needed, withdrawal of consent, grievance redressal, or nomination of another person to exercise rights in specified circumstances.
Email hello@complymore.in from the address associated with your account. We may need to verify your identity and authority before acting. If ComplyMore processes visitor consent evidence for one of our customers, contact that website operator first; we will assist the customer as required. You may also use any complaint or appeal mechanism available under applicable law.
11. Children
ComplyMore is a business service and is not directed to children. You must be at least 18 years old and able to enter a binding contract to create an account. Customers must not use ComplyMore to track or behaviourally monitor children or to direct targeted advertising at children contrary to applicable law.
12. Changes to this notice
We may update this notice as our service or legal obligations change. We will post the revised notice here, update the date above and provide additional notice when a change materially affects how we process personal data.
13. Contact and grievances
PVN Globals is responsible for this notice. For questions, rights requests or grievances about personal data, email hello@complymore.in with the subject “Privacy request” or “DPDP grievance”. Please describe your request and the account or customer website involved.