Privacy Notice

Version 1.0 · Last updated: 7/8/2026

1. Who Is Responsible for Your Data

Invest UP, the Uttar Pradesh Investment Facilitation Centre, Government of Uttar Pradesh, is the Data Fiduciary for the Nivesh Suvidha AI Facilitator. This means Invest UP is responsible for how your personal data is collected, used, and protected when you use this Facilitator.

The Facilitator is built and technically operated by an authorised service provider on behalf of Invest UP. Invest UP remains fully accountable for all data processing carried out on its behalf, including by any service provider. Read this notice alongside our Terms of Use, which set out the broader terms of using the Facilitator.

For any questions regarding this Privacy Notice or the processing of your personal data, please contact:

Invest UP – Grievance Officer
Email: info@investup.org.in
Phone: 0522-6923000

2. What Data Is Processed

2.1 Conversation data

When you use the Facilitator, the content of your messages is processed to generate a response to your query. This may include any personal details you choose to share, such as your name, investment plans, sector preferences, or location.

2.2 Technical data

Technical data such as your IP address and browser type is processed as part of the normal operation of any web server. This data is collected automatically when you access the platform.

2.3 Feedback

If you choose to provide feedback, it will be reviewed by Invest UP and/or its authorised service provider to improve the Facilitator and address reported issues.

3. How Your Conversation Is Stored

Your conversation history is retained in your browser's local storage so you can continue where you left off on future visits. This data stays on your own device. If you clear your browser data, your conversation history will be deleted.

A record that you acknowledged this Privacy Notice is also stored in your browser, along with the version of the notice you saw. If this notice is updated, you will be asked to acknowledge the new version before continuing.

The platform maintains backend operational and security logs, as well as records of your conversation history, to operate, monitor, secure, and troubleshoot the service. This data is retained only for as long as necessary in accordance with applicable retention policies.

4. What Your Data Is Used For

Your data is used for the following purposes:

To respond to your queries during a session.
To retain your conversation history in your browser for your convenience.
To operate, monitor, maintain, secure, and troubleshoot the platform.
Where you have provided feedback, to review and where applicable improve the service.
To comply with applicable legal and regulatory obligations.

Your data is not used for advertising, profiling, or sold to any third party. It is not shared with any party outside of what is strictly necessary to operate this platform.

5. Where Is Your Data Processed

Nivesh Suvidha is hosted within the Government of Uttar Pradesh's hosting environment. To generate responses, the text of your query together with the minimum context required to respond is securely transmitted to a third party AI processing service. This data processing takes place on infrastructure located in India. Your query is processed for generating a response and is not used to train or improve the underlying AI models. Except for this, processing application data is managed within the Government of Uttar Pradesh's hosting environment.

6. How Long Data Is Kept

Conversation data stored in your browser remains until you clear your browser data. You can do this at any time through your browser settings.

Backend operational and security logs are retained only for as long as necessary to operate, monitor, secure, and troubleshoot the platform, in accordance with applicable retention policies.

7. Your Rights Under the DPDP Act 2023

Under the Digital Personal Data Protection Act 2023, you have the following rights:

7.1 Right of access

You have the right to request a summary of the personal data processed by Invest UP, the processing activities undertaken, and the identities of any Data Processors with whom your personal data has been shared, in accordance with applicable law.

7.2 Right to correction

You have the right to request correction, completion, or updating of personal data that is inaccurate or incomplete.

7.3 Right to erasure

You have the right to request deletion of personal data that is no longer necessary for the purpose for which it was collected, or where you have withdrawn your consent.

For data stored in your browser, you can delete this yourself by clearing your browser data at any time.

For a formal request to erase data held in backend systems, contact the Grievance Officer at the details in Clause 8. We will acknowledge your request and respond within 90 days.

7.4 Right to withdraw consent

You may withdraw your acknowledgement of this notice at any time by clearing your browser data. Please note that doing so will also clear your conversation history and mean that you are shown the Privacy Notice again on your next visit. If you continue to use the Facilitator, you will be asked to acknowledge the notice again.

7.5 Right to raise a complaint

If you believe your personal data has been handled incorrectly, you have the right to raise a complaint. The process is set out in Clause 8.

8. How to Raise a Concern or Complaint

8.1 Contact Invest UP first

If you have a concern about your data or about a response you received from the Facilitator, please contact Invest UP's Grievance Officer:

Grievance Officer
Phone: 0522-6923000
Email: info@investup.org.in

We will acknowledge your complaint within a reasonable period and aim to resolve it within 90 days.

8.2 Escalation to the Data Protection Board of India

If you are not satisfied with Invest UP's response, you may escalate your complaint to the Data Protection Board of India in accordance with applicable law. Details of the complaint mechanism will be made available once notified by the Board.

9. Changes to This Notice

Invest UP may update this Privacy Notice from time to time to reflect changes in the Facilitator, applicable law or data processing practices. When the notice is updated, the version number and date at the top will change. Returning users will be shown the Privacy Notice again and asked to acknowledge the updated notice before continuing.

The current version of this Privacy Notice will be made available on the Invest UP website. Where applicable, previous versions may also be made available.

10. Contact

For questions about this Privacy Notice or how your data is handled, contact:

Invest UP, Uttar Pradesh Investment Facilitation Centre
Email: info@investup.org.in
Website: niveshmitra.up.gov.in