Privacy policy

Risknox Private Limited, Kochi, Kerala, India. We are the data fiduciary for the personal data described here. Contact: privacy@risknox.ai.

Business contact details you give us through forms (name, work email, company, phone, country, tax identifiers where relevant), the content of your enquiry, the answers you give our free risk tools, order details, and technical information such as your IP address and browser type recorded in server logs. We do not ask for, and do not want, special-category personal data through this website.

To respond to your enquiry, send the report or checklist you asked for, provide the products and services you buy, issue invoices and meet tax and accounting obligations, secure the website, and send service messages about your account. We send marketing email only where you opted in. We do not sell personal data.

Every form that collects personal data asks for your consent with an unticked box, states what it collects and why, and records the consent, the time and the notice version with the submission. Withdrawing consent is as easy as giving it: use your privacy choices, reply to any email with “unsubscribe”, or use the unsubscribe link in any marketing email. Withdrawal stops future processing and does not affect processing already carried out.

Under India’s Digital Personal Data Protection Act, 2023 and the DPDP Rules 2025 we process on the basis of your consent or our legitimate uses. Under Saudi Arabia’s Personal Data Protection Law we process on the basis of consent or a contractual necessity. You may request access, correction, erasure, withdrawal of consent or nomination of another person to act for you, and you may raise a grievance, by writing to privacy@risknox.ai or using the request form. We acknowledge your request and respond within the period each law requires.

We use established service providers to run this site and our business, including:

• Zoho — business email, CRM and support correspondence.
• Razorpay — payment processing for customers in India.
• Stripe — payment processing for international customers.
• Cloud hosting and email delivery providers that operate our infrastructure.

Payment card details are entered with the payment processor and are not stored by us.

Some processors store data outside India or the GCC. Where that happens we rely on the safeguards those providers offer and on the transfer mechanisms permitted by applicable law.

Enquiry and lead records: deleted 24 months after our last interaction unless you become a customer. Customer records: for the contract term plus the period tax and accounting law requires. Website logs: 90 days.

We apply access controls, encryption in transit, and least-privilege access to internal systems. No service can promise absolute security, and we will not pretend otherwise. Our subprocessors and responsible-disclosure policy are on the trust centre.

If a personal data breach occurs, we will inform the Data Protection Board of India and the affected individuals as the DPDP Rules require, and the competent authority where Saudi Arabia’s PDPL applies.

This website and our services are for businesses and are not directed at anyone under 18. We do not knowingly collect children’s data. If you believe a child has given us personal data, write to privacy@risknox.ai and we will delete it.

Essential cookies keep this site working; analytics and marketing cookies run only if you allow them, and you can change or withdraw that choice at any time. The categories, what each does and the settings control are in the cookie policy.

If we get something wrong, tell us first.Write “Privacy” in the subject line. You can also raise the matter through your privacy choices.

If you are not satisfied with our answer, you may complain to the Data Protection Board of India, or to the competent authority in your jurisdiction under Saudi Arabia’s PDPL.

This notice is available in English. We will provide it in Hindi or Malayalam on request. When we change this policy we update the version and date at the top of this page, and the notice version recorded with new submissions.