Privacy Policy

Pravodha is a B2B enterprise knowledge management platform operated by Girivar Kft., a company incorporated in Hungary. This Privacy Policy explains how we collect, use, store, and protect personal data when companies and their employees use Pravodha, including our Slack integration.

Because Girivar Kft. is established in Hungary (an EU member state), we are subject to the General Data Protection Regulation (GDPR) and Hungarian data protection law. This Policy is written to meet those obligations.

1. Who This Policy Applies To

Pravodha operates a two-tier structure:

• Corporate Customers ("Customers"): Companies that enter into a service agreement with Pravodha and administer the platform for their organization.
• End Users ("Users"): Individual employees or contractors of a Customer who access Pravodha as sub-users under the Customer's account.

If you are an employee accessing Pravodha through your employer's account, your employer is also a data controller with respect to how your data is managed within their organization. We encourage you to review your employer's internal privacy notices as well.

2. Data Controller and Contact

The data controller responsible for your personal data is:

3. What Personal Data We Collect

3.1 Data You or Your Employer Provide

• Account information: name, work email address, job title, and location provided at registration.
• Profile information: biography, work experience, education, and certifications you choose to add.
• Content you create: posts, discussion threads, comments, and other content you publish on the platform.

3.2 Slack Workspace Data

When a Customer enables the Slack integration, Pravodha may access and process:

• Slack messages and threads selected by authorized users for capture and knowledge archiving.
• Slack user identifiers associated with captured messages.
• Channel names and metadata related to captured conversations.

Pravodha only processes Slack data that a Customer's authorized administrator has explicitly configured for capture. We do not monitor or archive Slack workspaces continuously or without administrator action.

3.3 Automatically Collected Data

• Usage data: actions taken on the platform, pages visited, time spent, and feature interactions.
• Device and technical data: IP address, browser type, operating system, and device identifiers.
• Cookies and analytics: session cookies necessary to operate the platform, and analytics data collected via Google Analytics to understand aggregate usage patterns (see Section 7 for details).

4. Legal Bases for Processing (GDPR Article 6)

We process personal data only where we have a valid legal basis. The bases we rely on are:

• Contract performance (Art. 6(1)(b)): Processing necessary to provide the Pravodha service to Customers and their Users, including account management, the Slack integration, and platform functionality.
• Legitimate interests (Art. 6(1)(f)): Analytics to improve platform performance and security monitoring to protect our service and users, where our interests are not overridden by your rights.
• Legal obligation (Art. 6(1)(c)): Where we are required to process data to comply with EU or Hungarian law.
• Consent (Art. 6(1)(a)): Where we rely on consent, such as for optional marketing communications, you may withdraw consent at any time without affecting the lawfulness of prior processing.

5. How We Use Your Data

We use the data we collect for the following purposes:

• To create and manage accounts and authenticate users.
• To operate the platform, including Slack knowledge capture, community discussions, and the Repo Points reputation system.
• To send service-related communications such as account verification, password resets, and important platform updates.
• To improve platform features and user experience through aggregated, anonymized analytics.
• To ensure security, detect fraud, and protect the integrity of the platform.
• To comply with legal and regulatory obligations applicable to Girivar Kft.

6. Data Sharing and Processors

We do not sell or rent personal data. We may share data in the following limited circumstances:

6.1 Within Your Organization

Customer administrators can view User activity and content within their organization's Pravodha environment. This is part of the enterprise service model.

6.2 Service Providers (Data Processors)

We use trusted third-party processors to help operate Pravodha. All processors are contractually bound to protect data in line with GDPR requirements. Current categories of processors include:

• Cloud infrastructure and hosting providers.
• Analytics services (Google Analytics; see Section 7).
• Email delivery services for transactional communications.

6.3 Legal Requirements

We may disclose data if required by law, court order, or to protect the rights, property, or safety of Girivar Kft., our Customers, Users, or the public.

6.4 Business Transfers

In the event of a merger, acquisition, or asset sale, personal data may be transferred to the successor entity. We will notify affected parties in advance where required by law.

7. Cookies and Google Analytics

Pravodha uses the following types of cookies:

• Essential cookies: Required for the platform to function, including authentication and session management. These cannot be disabled.
• Analytics cookies: We use Google Analytics to collect anonymized, aggregated data about how users interact with the platform (page views, session duration, feature usage). Google Analytics data is processed under Google's privacy terms. IP addresses are anonymized before transmission.

You can opt out of Google Analytics tracking at any time by using the Google Analytics Opt-out Browser Add-on. You can also manage non-essential cookies through your browser settings.

8. International Data Transfers

Girivar Kft. is based in Hungary (EU). Some of our service providers, including Google Analytics, may process data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission (Art. 46 GDPR).

9. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Policy or as required by applicable law:

• Account and profile data: retained for the duration of the Customer's contract and deleted within 90 days of account closure, unless a longer retention period is required by law.
• Captured Slack content and platform discussions: retained per the Customer's configuration and deleted upon Customer's written request or account termination.
• Usage and analytics data: retained in aggregate, anonymized form for up to 24 months.
• Legal and compliance records: retained as required by applicable Hungarian and EU law.

10. Your Rights Under GDPR

If you are located in the EU/EEA, or if EU law applies to your data, you have the following rights:

• Right of access (Art. 15): Request a copy of the personal data we hold about you.
• Right to rectification (Art. 16): Request correction of inaccurate or incomplete data.
• Right to erasure (Art. 17): Request deletion of your data, subject to legal retention requirements.
• Right to restriction (Art. 18): Request that we limit processing of your data in certain circumstances.
• Right to data portability (Art. 20): Request your data in a structured, machine-readable format.
• Right to object (Art. 21): Object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at info@pravodha.com. We will respond within 30 days. If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) at naih.hu, or the supervisory authority in your country of residence.

11. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, or alteration. These include encryption of data in transit (TLS), access controls, and regular security reviews.

No method of transmission over the internet is 100% secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and affected individuals without undue delay, as required by GDPR Article 33-34.

12. Children

Pravodha is an enterprise B2B platform intended for use by professionals aged 18 and over. We do not knowingly collect data from individuals under 18. If you believe a minor has provided us with personal data, please contact us at info@pravodha.com and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify Customers by email and update the "Last Updated" date above. Your continued use of Pravodha after notice of changes constitutes acceptance of the updated Policy.

14. Contact Us