Privacy Policy

1. Who is responsible for your information

HoneyBerry AI is a product of Axyva eSolution Private Limited, India ("Axyva", "we", "us"). This policy explains the personal information handled through our website, inquiries, customer relationship, and agreed services for individuals and businesses.

For website inquiries, account administration, billing, and our own business communications, Axyva determines the purposes of processing and is the controller or equivalent responsible organisation. When a business uses HoneyBerry AI to handle its customers' information, that business generally determines the purpose and we process the information on its instructions under the applicable agreement. That business's privacy notice also applies. A separate data-processing agreement is required where applicable law requires one; this policy is not a substitute for it.

2. Information we handle and where it comes from

• Contact and inquiry information: your name, email, phone number, message, business details, and information you choose to provide through a form, email, or call.
• Account and commercial information: authorised users, business contacts, agreed scope, service communications, invoices, transaction references, and billing information needed for the relationship.
• Customer content: conversations, documents, business knowledge, prompts, responses, contact details, and records supplied by you or an authorised connected channel or tool.
• Technical and security information: IP address, browser or device details, request times, page or service activity, errors, and security logs generated when the website or service is used.

We receive information directly from you, from an organisation you interact with, from authorised users and integrations, and from the technical services involved in delivering the website or agreed workflow. Please avoid including passwords, full payment-card details, health records, or other sensitive information in general inquiry forms.

Providing information is voluntary, but we may be unable to answer an inquiry, create an account, or perform a requested service without the details necessary for that purpose. A form identifies its required fields.

3. Why we use information

• Answer inquiries, arrange calls, prepare proposals, and communicate about your requirements.
• Set up, operate, support, and maintain the services and workflows you have agreed to use.
• Administer accounts, invoices, payments, contractual obligations, and service communications.
• Investigate errors, prevent abuse, protect accounts, and resolve support or security issues.
• Meet legal obligations, handle disputes, and establish or defend legal claims.

Where GDPR or a similar law requires a legal basis, we rely on steps you request before a contract and performance of a contract with you; our legitimate interests in communicating with business contacts, administering and securing the service, and handling disputes where those interests do not override your rights; legal obligations; or consent where required. A contract with a business is not automatically the legal basis for processing every employee's or customer's information. Special-category information requires an additional lawful condition where applicable.

Any optional marketing requires the permission or other lawful basis applicable in your country. You can object to direct marketing or withdraw marketing consent by emailing hello@axyva.com. Necessary service or legal notices may still be sent.

4. Private customer data and AI providers

We do not use customer data to train AI models. We do not sell customer data, publish it, or share it for targeted advertising. Customers retain their rights in their data. Processing to deliver your requested service does not make that data public.

HoneyBerry AI may use OpenAI, Anthropic, and Google to process the prompts, relevant business context, messages, and other content needed for the AI features selected for your setup. The providers and information involved depend on that setup; this does not mean every provider receives every conversation.

Provider use must remain consistent with the no-training commitment and the applicable service and data-processing terms. This policy does not authorise training through a provider's consumer product or unrelated use of your data. Contact us for the provider and subprocessor information relevant to your service.

Necessary processing, authorised support access, security handling, and legally required disclosure are different from making data public. No online service can promise absolute security or eliminate every privacy risk.

5. Who may receive information

Information may be accessed by authorised personnel and service providers where necessary for the purposes above, including AI processing, forms, communications, payments, technical delivery, and professional advice. Providers processing on our behalf must be subject to appropriate confidentiality and data-protection requirements. Your organisation's authorised users and tools receive the information your configured workflow sends to them.

We may disclose information where lawfully required by a court or authority, to protect legal rights and safety, or in connection with a genuine business restructuring or transfer subject to applicable safeguards and notice requirements. We do not permit these circumstances to become an unrelated advertising or training purpose.

6. Inquiry forms, cookies, and external links

Our forms collect the details you choose to submit, such as your name, email, phone number, and message, so we can respond to your inquiry and discuss your requirements. Technical information may also be processed to deliver the form, prevent misuse, and maintain its security.

This marketing website does not currently include advertising pixels or optional analytics scripts. Technical services and form providers may use storage or similar technologies necessary for delivery, security, or form functionality. You can manage browser storage and cookies through your browser. Non-essential tracking that requires consent must not be activated without that consent.

Scheduling links, social profiles, and other external sites have their own privacy notices and controls. Following a link does not give those services general permission to use the customer data held within HoneyBerry AI.

7. International processing

Axyva operates from India and serves customers in the United States, European Union, Australia, New Zealand, and India. Information may be processed in India and in countries where an approved provider performs the agreed service. Those countries may have different privacy laws.

Where an international transfer requires a legal safeguard, the appropriate safeguard must be established before the transfer. Depending on the law and recipient, this may involve an applicable adequacy decision, the European Commission's Standard Contractual Clauses with any necessary supplementary measures, or enforceable comparable-protection requirements under Australian or New Zealand law. We do not treat acceptance of this policy as blanket consent to waive those protections.

Ask hello@axyva.com for the recipient countries and transfer arrangements relevant to your information and, where applicable, a copy or explanation of the safeguards.

8. Retention and deletion

Retention depends on the purpose and type of information. Inquiry records are needed to answer and follow up on your request; account and service records support the active relationship and its closure; billing records follow applicable accounting and tax requirements; and security or dispute records are kept where needed to investigate incidents or establish legal claims.

Customer-content retention, export, and deletion arrangements must be specified for the agreed service. We do not promise one universal retention period for every workflow or connected provider. We delete or anonymise information when it is no longer needed for a lawful purpose, subject to legal obligations and the applicable processing agreement.

You can request deletion or information about the applicable retention criteria. If some information must be retained, we will explain the relevant reason and any applicable restriction. A deletion request does not automatically remove records that another business independently controls.

9. Security and incidents

We take reasonable steps appropriate to the information and service to protect against unauthorised access, misuse, loss, and disclosure. Access and connected-tool permissions should be limited to the agreed purposes. You are responsible for protecting your credentials and the systems you control.

If a personal-data incident triggers a legal or contractual notification duty, the relevant organisations and affected people must be notified within the applicable requirements. We do not make an absolute security guarantee or claim a certification through this policy.

10. Your choices and how to make a request

Depending on the law that applies, you may request information about processing, access or a copy, correction, deletion, portability, restriction, or an objection to particular uses. You may withdraw consent without affecting processing that was lawful before withdrawal. Some rights have legal exceptions.

Email hello@axyva.com with your request and enough information to locate the relevant records. We may reasonably verify your identity or an authorised agent's authority, but will not ask for unnecessary sensitive documents. We will respond within the applicable legal deadline and explain a refusal, extension, or appeal route where required. We will not unlawfully discriminate against you for exercising a right.

If your request concerns a conversation with a business using HoneyBerry AI, contact that business first because it usually controls the data. You may also contact us so the request can be directed appropriately. This does not prevent a direct request where the law makes us responsible.

11. Additional information for your region

European Union / EEA

Where GDPR applies, your rights can include access, rectification, erasure, restriction, portability, objection to legitimate-interest processing, and protections against solely automated decisions with legal or similarly significant effects. You may object to direct marketing at any time. You may complain to your local supervisory authority, including in your habitual residence, workplace, or where an alleged infringement occurred.

United States

Where applicable state privacy law, including the California Consumer Privacy Act as amended, covers the processing, rights may include knowing the categories and specific information collected, access, correction, deletion, portability, and opting out of sale, sharing for cross-context behavioural advertising, targeted advertising, or certain profiling. Additional rights concerning sensitive information, authorised agents, and appeals may apply. Our no-sale, no-targeted-advertising, and no-training commitments above apply to customer data. Legally required browser opt-out signals must be respected for covered processing.

Australia

Where the Privacy Act 1988 and Australian Privacy Principles apply, you may request access and correction and complain about information handling, including overseas disclosure. Raise a concern with us so we can investigate and respond; you may also contact the Office of the Australian Information Commissioner in accordance with its complaint process.

New Zealand

Where the Privacy Act 2020 applies, you may request access and correction and complain to the Office of the Privacy Commissioner. Collection from another source is subject to the applicable notification requirements, including Information Privacy Principle 3A and its exceptions. Sending information overseas must meet the applicable comparable-protection or other lawful transfer conditions.

India

Indian data-protection requirements apply as they come into force, including applicable Information Technology Act rules and the phased Digital Personal Data Protection Act, 2023 and Rules, 2025. You may contact us about access, correction, erasure, consent withdrawal, or a grievance. Statutory rights concerning summaries of processing, nomination, and complaints to the Data Protection Board apply to the extent the relevant provisions are in force and cover the processing. Required internal grievance steps do not remove other remedies available under law.

12. Automated processing and customer workflows

HoneyBerry AI uses automated processing to generate responses and carry out agreed workflow steps. AI assistance is not by itself a decision about a person's legal rights or eligibility. Our marketing website does not make such decisions. A business using a workflow that may significantly affect an individual must provide the required notices, lawful basis, human review, and other safeguards; those uses require separate assessment before activation.

13. Children and sensitive information

Our website and purchasing arrangements are intended for adults. We do not invite children to create accounts or submit personal information directly. If you believe a child has provided information without the legally required authority or consent, contact us so it can be investigated and handled appropriately.

A business must not introduce children's data, health information, or other sensitive or regulated information into a customer workflow without first agreeing the necessary legal basis, permissions, safeguards, and service terms. The applicable age and parental-consent requirements vary by country.

14. Changes and contact

We will update this policy when relevant practices change and show the revision date. A material change requires any additional notice or consent required by law; a revised policy does not retroactively authorise an unrelated use of your information.

Privacy contact: Axyva eSolution Private Limited · hello@axyva.com · +91 94216 18552.