1. Who we are
Prastav is a business proposal and commercial-workflow platform operated by PRASTAV TECHNOLOGIES (OPC) PRIVATE LIMITED ("Prastav Technologies", "we", "us" or "our"). We also offer separately agreed professional services. Our contact details appear at the end of this policy.
2. Scope of this policy
This policy covers personal information handled through our public website, enquiries, recruitment, support and professional-service communications, and through Prastav application accounts and workspaces. Website enquiries and application workspace records are distinct activities, as explained below.
It also covers supported integrations when you choose to connect them. External websites, including official social channels linked from News & Updates, are operated by their respective providers and have their own policies.
3. Information we collect
Public website and communications. We receive information you provide in Contact Us, Careers and Partners forms, emails and support or business communications. This may include your name, business and contact details, enquiry or partnership information, messages and, for recruitment, your profile and CV. Section 10 describes these forms and their delivery provider.
Application and account data. Depending on the features used, this includes account and profile details; workspace and business information; customer and contact records supplied by users; proposal, catalogue, pricing and template information; uploaded documents; settings and preferences; and data exchanged through user-connected services.
Authentication, security and operational records. We process information needed to authenticate users, manage sessions and permissions, and maintain relevant audit, diagnostic and security records. These records may include activity times, device/browser information, IP addresses where recorded, errors and account or workspace references.
Subscription and payment records. Plan and usage information is associated with accounts. Billing and tax details, payment status, transaction/provider references, invoices, receipts and refund or credit records are relevant only where a paid purchase or service applies. Browser storage is described in the Cookie Policy.
4. Customer workspace data
Customers decide what business and personal information they place in their workspaces, which authorised users can access it and how they use it in their business workflows. Customers must have the rights and any notices or permissions needed for the information they provide.
We handle workspace information to operate the service and carry out supported customer instructions. We also handle account, security, support and business records for our own operational responsibilities. The legal roles that apply depend on the activity and applicable law; a separate data-processing agreement may address a particular customer relationship.
5. Connected services and integrations
If you connect a supported service, such as selected Google or Microsoft services, Prastav processes the information needed for the enabled connection and the permissions you authorise. Access and synchronisation depend on the provider, selected permissions and current feature support.
You can manage supported connections in the application or revoke access through the provider. Revoking a connection does not necessarily remove information already imported into a workspace; contact us about information that cannot be managed through the available controls.
6. How we use information
We use information to provide accounts and workspace workflows, prepare and deliver supported documents, maintain preferences, operate authorised integrations, answer enquiries, provide support and perform separately agreed services. Recruitment information is used for recruitment-related review and communication, including consideration for future opportunities.
Other purposes include administering applicable subscriptions and payments, maintaining service reliability, investigating misuse and security issues, keeping relevant audit records, complying with legal obligations and handling disputes. The lawful basis or permission required depends on the activity and applicable law.
8. Payment information
The current FREE Plan costs ₹0, requires no payment or credit card and does not require a Razorpay payment. A FREE registration is not a paid checkout.
Prastav has selected Razorpay as a payment processor. When paid purchases are offered, payments may be processed through third-party processors such as Razorpay or another processor identified at checkout. A processor may receive the billing, contact and transaction information needed to process the payment, manage an authorised recurring payment, prevent fraud or resolve a payment issue, under its own applicable policies.
Payment secrets are handled by the payment provider. Prastav does not directly store complete card numbers, CVV, UPI PINs, bank authentication credentials or other payment secrets. We may receive payment status, method descriptions and provider references needed to administer and reconcile a purchase or subscription.
Paid transactions may generate Prastav invoices, payment receipts, subscription/billing records and refund or credit documents where applicable. These may contain company/customer billing details, applicable tax information, the plan or service description, amount and currency, payment status, invoice/receipt/reference numbers and relevant payment-provider references. Documents may be available for download or sent by email, according to the supported purchase process.
We use relevant billing records and reference identifiers for reconciliation, customer support, troubleshooting, accounting, taxation, fraud/error investigation, disputes and audit. Transactional communications may include payment confirmation, invoice/receipt availability, renewal notifications, failed-payment notices, cancellation confirmations and refund confirmations. These are service communications about your account or purchase; their timing depends on the transaction and supported process.
See the Cancellation & Refund Policy for the distinction between the current FREE Plan and separately agreed paid purchases.
10. Support, contact, careers and partner enquiries
Our Contact Us, Careers and Partners forms send the information you submit, including the Careers attachment, through FormSubmit for delivery to Prastav. FormSubmit is a third-party service, not a Prastav-owned service. See FormSubmit's privacy terms for the provider's description of its practices.
Contact Us. This form collects your name, company, business email, phone, enquiry type, preferred contact method, requirement/message and contact consent so we can review and respond to your enquiry.
Careers. Applicants voluntarily provide their name and contact details, location, area of interest, preferred work mode, optional profile/portfolio link, introduction, uploaded CV/résumé and recruitment consent. We use these for recruitment-related review and communication, including future opportunity consideration. Sharing a profile does not guarantee an interview or employment.
The website application does not request Aadhaar, passports, government ID documents, bank account information or financial documents. Please leave these out of your submission and CV. If a legitimate later-stage recruitment process requires additional information, that request and its purpose should be explained separately.
Partners. This form collects business and organisation details, contact person and role, email, phone, location, website and optional business/profile information, selected partnership interests, message and contact consent so we can assess and discuss the request.
Each form also identifies its source page. Support information you provide through other channels is used to investigate and respond to your request. Please share only information relevant to the enquiry or recruitment purpose; do not send passwords, payment credentials or unrelated personal information.
11. AI-assisted features
Where you use supported AI assistance, relevant prompts and selected content may be processed by the configured AI service to provide the requested assistance. The information involved depends on the feature you use.
Review generated or assisted content before relying on it or sending it to others. AI output may be incomplete or incorrect. Only submit information you are authorised to use for that purpose.
12. Data retention
Information is retained according to its purpose and applicable obligations. Relevant considerations include an active account or engagement, support and dispute resolution, security and audit needs, legal obligations, backups and legitimate operational requirements. Account closure does not necessarily mean immediate permanent deletion from every record or backup. Billing, payment, invoice and receipt records may be retained where reasonably necessary for accounting, taxation, audit, fraud prevention, disputes or legal/regulatory obligations, even after account closure or a deletion request.
Recruitment information is retained with regard to recruitment-related review, communication and relevant future opportunities. You may contact us to ask about retained information or request deletion; we will consider the request, applicable rights and any legitimate need to retain particular records.
13. Security
We use reasonable technical and organisational safeguards, including authentication, access controls, workspace permissions and relevant audit/logging controls, to help protect information. No system or transmission method can guarantee absolute security.
Our Security & Compliance page describes the current approach and security reporting channel.
14. Your choices and rights
Depending on applicable law and the activity, you may have rights to request access to, correction or deletion of personal information, withdraw consent where processing relies on it, or raise a privacy concern. Some information can be managed through account settings, workspace controls and connected-service permissions.
Contact support@prastav.io using the link below for a request or concern. We may need proportionate information to verify your identity and authority before acting. Requests may be subject to legal limits or information we must retain; withdrawing consent does not undo processing already lawfully carried out. Workspace-related requests may need to involve the customer administering that workspace.
15. Children's privacy
Prastav is intended for authorised business use and is not directed at children. Please do not create an account or provide personal information if you lack the legal capacity or required authority to use the service. If you believe a child's information has been submitted inappropriately, contact us so we can review it.
16. Changes to this policy
The date above identifies the latest update to this policy. Material changes to our information-handling practices will be reflected here, with any notice or consent required by applicable law.
17. Contact us
For questions, requests or concerns about privacy or personal information, contact:
For a security vulnerability rather than a privacy request, please use the security contact information on our Security & Compliance page.
Related policies: Privacy Policy, Terms & Conditions, Cookie Policy and Cancellation & Refund Policy.