1. Agreement and parties
This page describes Neevio's processing arrangements. Customers who require a signed Data Processing Agreement should contact prince@neevio.in before providing information subject to that agreement. This page is not an executed customer-specific DPA or international transfer addendum.
Customers determine the purposes of personal information in their workspaces. Neevio processes that content to provide the service and follow authorised instructions. Account administration, subscriptions and website analytics are described separately in the Privacy Policy.
2. Processing schedule
Processing includes storage, organisation, retrieval, authorised sharing, configured integration actions and AI inference for enabled features. It continues during the service relationship and the deletion and backup periods described in the Privacy Policy.
Data subjects can include workspace members, client contacts and people referenced in customer content. Data can include account identifiers, task content, documents, client agreements, time entries and invoice contact information. Customers must ensure that the information and instructions they provide are lawful and appropriate for the service.
3. Documented instructions and confidentiality
Customer instructions are expressed through workspace settings, permissions, enabled features and authorised support requests. We may require clarification or decline an instruction that appears unlawful. Processing required by law may continue where applicable.
Access to customer information is limited to what is needed for service operation and authorised support. Customers should not send credentials or unnecessary sensitive information in support requests.
4. Security measures
The product provides workspace and project permission checks and separate client portal access. Daily backups have a 30-day retention period; server and security logs have a 30-day retention period.
Contact prince@neevio.in for security questionnaires or a contractual security schedule. We investigate reported incidents and provide notifications required by applicable law or a signed agreement. No additional incident-response deadline or certification is implied by this page.
5. Subprocessors and transfers
The Subprocessor Register identifies the providers used to deliver Neevio. Database and file storage are in Mumbai; hosting is in Germany. Email, AI and provider operations may involve additional processing locations.
A signed DPA can address subprocessor authorisation, change notices, objections and required international transfer safeguards. Contact us to establish those arrangements before processing that requires them; this page does not assert that a specific transfer addendum has been executed.
6. Assistance, requests and accountability
Send privacy, security and data access requests to prince@neevio.in. We verify requester authority and assist customers with requests concerning their workspace information, subject to applicable law.
Customer-specific audit rights, assistance scope and any fees are agreed in the signed DPA. This public page does not grant unrestricted access to other customers' records or infrastructure.
7. Return and deletion
We retain account and workspace information while needed to provide the service. After verifying a deletion request, we provide a seven-day window for you to obtain copies of your data, then manually remove the requested account or workspace data from active systems. An individual member cannot request deletion of an entire organisation's workspace without authority.
Daily backups are retained for 30 days from creation. Deleted records may remain in those backups until they expire. Server and security logs are retained for 30 days. Records needed for legal accounting obligations, security investigations or disputes may be retained for the required purpose and period.
Deleting an item in the interface or cancelling a subscription does not by itself constitute a permanent account deletion request. Send requests to prince@neevio.in and identify the account or workspace without sending passwords.