Your data, treated like our craft — with care.

01Who We Are

Realivant ("Realivant", "we", "us") is an AI-native experience strategy studio based in Bengaluru, India, working worldwide. We are the data fiduciary responsible for personal data collected through realivant.com, our contact and audit forms, and our client engagements.

For anything in this policy, you can reach us at connect@realivant.com or +91 99450 84863.

02What We Collect

We collect only what we need to respond to you and run our studio well:

We do not knowingly collect sensitive personal data (such as health or financial account information) through the website. If a project requires handling such data, it is governed by the project agreement and appropriate safeguards.

03How We Use Your Data

• To respond to your enquiries and deliver free audits you request;
• To prepare proposals, deliver engagements, and manage projects;
• To send invoices and maintain records required by law;
• To improve the website and understand which of our work resonates;
• To evaluate job and internship applications;
• To share occasional studio updates — only if you've opted in, and every email includes an unsubscribe link.

We do not sell or rent your personal data to anyone, and we don't use it for third-party advertising.

04Legal Basis & Consent

We process personal data in line with India's Digital Personal Data Protection Act, 2023 and, where applicable to overseas clients, other privacy laws such as the GDPR. Depending on the situation, we rely on:

• Consent — when you submit a form, subscribe, or share materials with us;
• Contract — when processing is needed to deliver an engagement you've signed up for;
• Legitimate use — for running, securing, and improving the studio and website;
• Legal obligation — for tax, accounting, and compliance records.

You may withdraw consent at any time by contacting us; this won't affect processing already carried out.

05Cookies & Analytics

Our website uses a small number of cookies and similar technologies:

• Essential cookies — needed for the site to function (for example, security and form handling);
• Analytics cookies — help us understand site usage in aggregate (pages viewed, time on page, traffic sources);
• Embedded media — pages embedding YouTube, Vimeo, or social content may set cookies from those platforms when you interact with them.

You can control or delete cookies through your browser settings. Blocking analytics cookies won't affect your ability to use the site.

06When We Share Data

We share personal data only in these limited situations:

• Service providers — trusted tools we use to run the studio (hosting, email, analytics, project management, accounting), bound to use data only on our instructions;
• Collaborators — senior specialists working with us on your project, under confidentiality obligations;
• Legal requirements — when required by law, court order, or to protect rights and safety;
• Business transfer — if the studio's ownership changes, data transfers under equivalent protections.

07AI Tools & Your Data

We're an AI-native studio, so it's fair to ask how AI touches your data. Our commitments:

• We do not submit your confidential client materials to AI tools that train on user data without your explicit consent;
• Where AI tools are used in research, motion, or production, work runs under senior human direction and review;
• Business-tier or privacy-safe configurations of AI tools are used for client work wherever available;
• If your legal or compliance team has specific AI restrictions, tell us before the engagement and we'll agree the boundaries in writing.

08Client Project Data

During engagements we may process data on your behalf — for example, user research recordings, patient-education content, or platform user data in products we design. In these cases:

• You remain the data fiduciary for your users' data; we act on your documented instructions;
• Access is limited to team members working on your project;
• Research participants are informed and consented before interviews or testing sessions;
• Project data is returned or deleted at the end of the engagement, per your instructions and our retention obligations.

09Data Retention

• Enquiries and audit requests — kept up to 24 months after our last interaction, then deleted;
• Client and financial records — kept as long as required by Indian tax and accounting law (typically 8 years);
• Job applications — kept up to 12 months, unless you ask us to delete them sooner or consent to longer;
• Analytics data — retained in aggregate form per the analytics provider's standard retention period.

10Security

We protect personal data with reasonable technical and organizational safeguards: encrypted connections (HTTPS), access controls, strong authentication on studio tools, and confidentiality obligations for everyone who works with us. No method of transmission or storage is perfectly secure, but if a data breach affecting your personal data occurs, we will notify you and the relevant authorities as required by law.

11International Transfers

We are based in India and work worldwide. Some of our service providers (hosting, email, analytics, AI tools) may store data outside India. Where data crosses borders, we use providers with recognized privacy commitments and, for clients subject to GDPR or similar laws, appropriate transfer safeguards.

12Your Rights

Under the DPDP Act, 2023 (and equivalent laws where applicable), you have the right to:

• Access — ask what personal data we hold about you;
• Correction — have inaccurate or incomplete data corrected;
• Erasure — request deletion of your data, subject to legal retention requirements;
• Withdrawal of consent — opt out of processing based on consent at any time;
• Grievance redressal — raise a concern with us, and escalate to the Data Protection Board of India if unresolved;
• Nomination — nominate another person to exercise your rights on your behalf as provided under the DPDP Act.

To exercise any right, email connect@realivant.com. We respond within the timelines required by law, and always as quickly as we can.

13Children's Privacy

Our website and services are intended for businesses and adults. We do not knowingly collect personal data from children under 18. Where a client project involves designing for younger audiences (for example, learning experiences), any handling of children's data is governed by the project agreement, verifiable parental consent requirements, and applicable law — and the client remains the data fiduciary.

14Third-Party Links

Our website links to external platforms — LinkedIn, Instagram, Behance, YouTube, and others. Those platforms have their own privacy policies, and we're not responsible for their practices. We recommend reviewing their policies when you visit them.

15Changes to This Policy

We may update this policy as our services or the law evolve. The "Last updated" date at the top shows the current version. Material changes will be highlighted on this page, and active clients will be notified by email. Continued use of the website after changes take effect constitutes acceptance.

16Contact Us

Questions, requests, or concerns about your data? We treat privacy questions with the same seriousness as project briefs.