WSNL NOVASERVE LLP operates NovaServe Radius to provide Internet Subscriber Management Services and software rental solutions to Internet Service Providers across India. We never sell your personal data. We process data strictly for billing, AAA authorization, lawful telecom record compliance, and service delivery with bank-grade encryption and rigorous security controls.
1. Introduction & Scope
This Privacy Policy describes the policies and procedures of WSNL NOVASERVE LLP ("NovaServe", "we", "us", or "our"), a Limited Liability Partnership incorporated under the laws of India, having LLP CIN ACH-7986, PAN AAEFW9006A, and registered office at H No-669, Mulla Complex, Chikodi Road, Near Bus Stand, Nipani, Belgaum- 591237, Karnataka, India.
This Policy applies to our website https://novaserve.tech, our customer and administrative portals, APIs, and the NovaServe Radius platform (collectively, the "Services"). By accessing or using our Services, you consent to the collection, storage, processing, and transfer of your information as outlined in this Privacy Policy.
This policy is published in accordance with the provisions of Rule 3(1) of the Information Technology (Intermediaries Guidelines) Rules, 2011, and Rule 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules") under the Information Technology Act, 2000.
2. Information We Collect
In operating our software platform and delivering services to Internet Service Providers, we collect the following categories of information:
A. Direct Information Provided by You
- Account & Entity Information: Legal business name, business registration number/CIN, PAN, GSTIN, authorized representative name, designation, billing address, official email address, and contact numbers.
- Billing & Payment Data: Transaction references, payment mode identifiers, billing history, and invoice records. (Note: Sensitive card credentials and net banking credentials are processed directly through PCI-DSS certified payment aggregators; NovaServe does not store raw credit/debit card numbers or bank PINs).
- Support Communications: Support tickets, emails, technical requests, and feedback sent to our helpdesk.
B. Platform & Operational Telemetry (Processed for ISP Tenants)
- RADIUS & AAA Telemetry: Network Access Server (NAS) IP addresses, device MAC addresses, Framed-IP assignments, authentication logs, session duration, accounting packets (Acct-Session-Id, Acct-Input-Octets, Acct-Output-Octets), and bandwidth consumption records necessary for ISP billing automation.
- Device & CPE Profiles: TR-069 configuration parameters, ONT serial numbers, and signal diagnostic information required for subscriber provisioning.
C. Automatic System & Usage Logs
- Browser type, operating system, IP address, device fingerprints, referrer URLs, access timestamps, and error diagnostic logs collected when visiting our website or API endpoints.
3. Purpose of Processing Information
We process collected data exclusively for lawful and contractual business purposes, including:
- Provisioning, maintaining, and scaling the NovaServe Radius AAA platform and software rental services.
- Processing subscription billing, automated invoices, payment gateway reconciliation, and wallet transactions.
- Authenticating authorized operator credentials and preventing unauthorized administrative access.
- Enabling ISPs to fulfill statutory requirements under Indian telecommunications guidelines (e.g. DoT / TRAI IPDR lawful logging mandates).
- Providing technical assistance, monitoring server health, detecting latency anomalies, and troubleshooting router communication faults.
- Transmitting transactional service alerts, payment reminders, policy updates, and critical security advisories.
5. Data Protection & Security Safeguards
We implement comprehensive technical and organizational security measures meeting the standards of Rule 8 of the SPDI Rules, 2011, including:
- Encryption: TLS 1.2/1.3 cryptographic protocols for data in transit and AES-256 encryption for sensitive database fields at rest.
- Access Control: Strict role-based access control (RBAC), multi-factor authentication (MFA) requirements, and IP-whitelisted administration endpoints.
- Audit Logging: Comprehensive auditing of operator actions, login attempts, credential changes, and system modifications.
- Network Hardening: Web Application Firewalls (WAF), automated DDoS mitigation, real-time intrusion monitoring, and routine vulnerability patching.
6. Data Retention Policy
We retain business account data and subscriber records for as long as your service subscription is active, or as necessary to fulfill the purposes for which it was collected. Following account termination:
- Financial, invoicing, and tax accounting records are retained for a minimum of 8 (eight) years in accordance with Indian Companies and GST legislation.
- Operational session logs and IP assignment records are retained in compliance with applicable telecommunications and DoT statutory mandates.
- Non-statutory telemetry data is securely anonymized or permanently purged upon request after contractual offboarding.
7. Your Legal Rights
As a data subject or enterprise client under Indian information technology regulations, you have the right to:
- Access: Request confirmation whether your personal information is being processed and review a copy of your records.
- Correction: Request rectification of inaccurate, outdated, or incomplete corporate and personal information.
- Withdrawal of Consent: Withdraw consent for non-essential processing by written notification to our Grievance Officer (subject to contractual and statutory retention requirements).
- Data Portability: Export your subscriber and billing master data in structured formats (CSV/JSON) through your administrative portal.
9. Grievance Redressal Officer
In accordance with Rule 5(9) of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the name and contact details of the Grievance Officer are published below:
Any grievance or complaint concerning data privacy or security will be acknowledged within 48 (forty-eight) hours and addressed in accordance with the timelines prescribed under the Information Technology Act, 2000 (ordinarily within 30 days from the date of receipt).