Legal
Privacy policy
Last updated 14 November 2026
1. Who we are
Servaleo is a service management platform (service desk, field service, AMC management, asset management and device agent) provided by Advanced IT Global Services Pvt Ltd, Office No. 6, 1st Floor, Pradeep Chamber, Opp. IndusInd Bank, Bhandarkar Road, Pune, Maharashtra 411004, India. Phone: +91 85300 37500 · GSTIN: 27ABFCA4497E1ZI · Email: privacy@servaleo.com.
In this policy, "we", "us" and "our" mean Advanced IT Global Services Pvt Ltd. "You" means anyone whose personal data we handle: website visitors, people who contact us, users of a Servaleo workspace, and people at our customer companies. This policy follows India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the Digital Personal Data Protection Rules, 2025.
2. Our two roles
- When we decide why and how data is used, we are the Data Fiduciary. This covers our website, demo and trial requests, our sales and billing records, and the accounts of our customers' administrators and contacts.
- When a customer company uses Servaleo to run its own service desk, that company is the Data Fiduciary for the data it puts into its workspace (for example its employees, its own customers, their tickets and devices). We act as its Data Processor and process that data only on the company's instructions and under our contract with it. If your data is in a company's Servaleo workspace and you want to use your rights, please contact that company first; we will help them respond.
3. Personal data we collect
| Where it comes from | What we collect |
|---|---|
| Our website | Information you type into forms (name, company, work email, mobile number, message). Basic technical data needed to deliver and protect the site, such as IP address and browser type. We do not use advertising or tracking cookies. |
| Your Servaleo account | Name, work email, mobile number, role, company, sign-in records (time, IP address, device) and security settings such as two-factor sign-in. If you sign in with Microsoft, we receive your name and email from Microsoft; we never see your Microsoft password. |
| Workspace data (entered by a customer company) | Tickets, messages, attachments, customer and site details, contact details, asset records, field visit notes, photos, signatures, and closure codes sent by email or SMS. We handle this as the company's Data Processor. |
| Servaleo device agent (only where the customer company installs it) | Device name, make, model and serial number, operating system, installed software, hardware and health readings (disk, memory, CPU, antivirus and update status), network details (IP and MAC address) and the signed-in user name. The agent does not collect your files, emails, browsing history or keystrokes, and remote screen access starts only after the person at the device accepts it. |
| Billing (customer companies) | Company legal name, GSTIN, billing address, finance contact, invoices and payment records. Card or bank details are handled by the payment provider; we do not store them. |
| Support and communications | Emails, calls and messages you send us, and our replies. |
4. Why we use your data
- To provide Servaleo: create and run workspaces, sign you in, send ticket updates, closure codes and alerts by email or SMS, and show each company only its own data.
- To respond to you: answer demo, trial and support requests.
- To bill customer companies: issue GST invoices and keep accounting records.
- To keep the service secure: detect misuse, prevent unauthorised access, keep audit logs, take and test backups.
- To improve Servaleo: understand which features are used, using aggregated or de-identified information wherever possible.
- To meet legal duties: for example tax, accounting and lawful requests from authorities.
Where we act as Data Fiduciary, we rely on your consent, given through a clear notice when you submit a form or create an account, or on the legitimate uses the DPDP Act allows, such as using data you voluntarily give us for the purpose you gave it, or complying with the law. You can withdraw consent at any time (see section 7). This does not affect anything done before you withdrew it, but we may then be unable to continue providing the service. For workspace data, the customer company is responsible for having a valid basis.
We never sell personal data, and we do not use it for advertising.
5. Cookies and analytics
We use only cookies that are strictly needed: to keep you signed in, to remember your workspace and for security. Our website analytics (Cloudflare Web Analytics) count visits without cookies and without identifying you. If we ever add optional cookies, we will ask first.
6. Storage, sharing and retention
Storage in India. Servaleo runs on Microsoft Azure in India (Central India region), with encrypted backup copies in another Indian Azure region (South India).
Service providers. We share personal data only with providers that help us run Servaleo, under contracts that require them to protect it and use it only on our instructions:
| Provider | What for |
|---|---|
| Microsoft (Azure, Microsoft 365) | Hosting, backups, sending and receiving email |
| Cloudflare | Domain name service, website hosting, website security and cookieless analytics |
| SMS provider | Sending SMS alerts and closure codes |
| Payment gateway | Taking payments from customer companies |
| Accounting software | GST invoices and accounts |
We may also disclose data when the law requires it, to protect our rights or users' safety, or to a buyer if our business is sold (with this policy continuing to apply). If any provider processes data outside India, we will make sure this is allowed under Indian law.
How long we keep it.
- Workspace data: for as long as the customer company's subscription runs. After it ends, the company can export its data for 30 days; we then delete it, and backup copies are overwritten within a further 90 days.
- Website enquiries that do not lead to a contract: up to 12 months, or sooner if you ask.
- Billing and invoice records: as long as tax and company law require (generally 8 years).
- Security and audit logs: up to 1 year, unless needed longer for an investigation.
Security. Each company's data is kept separate at database level; connections are encrypted (HTTPS); stored secrets are kept in a protected key vault; staff access is limited and logged; sign-in supports two-factor authentication; and backups are tested by regular restore drills. If a personal data breach happens, we will inform the affected customer companies and individuals and the Data Protection Board of India as the law requires.
7. Your rights
Under the DPDP Act you can ask us to:
- tell you what personal data of yours we process, how, and with whom we have shared it;
- correct, complete or update your data;
- erase your data when it is no longer needed for the purpose or you withdraw consent (unless the law requires us to keep it);
- withdraw your consent, as easily as you gave it;
- nominate another person to use your rights if you die or become unable to.
To use these rights, email privacy@servaleo.com from the address we hold for you, or write to the postal address above. We will reply within 30 days. If your data is in a customer company's workspace, we will pass your request to that company and help it respond.
8. Children
Servaleo is a business service and is not meant for anyone under 18. We do not knowingly collect children's personal data. If you believe a child's data has been given to us, contact us and we will delete it.
9. Grievance Officer
If you have a concern or complaint about how we handle personal data, contact our Grievance Officer:
Grievance Officer, Advanced IT Global Services Pvt Ltd
Office No. 6, 1st Floor, Pradeep Chamber, Opp. IndusInd Bank, Bhandarkar Road, Pune, Maharashtra 411004
Email: privacy@servaleo.com · Phone: +91 85300 37500
We will acknowledge your complaint promptly and resolve it within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
10. Changes to this policy
We may update this policy when our service or the law changes. We will post the new version on this page with a new "Last updated" date, and tell customer administrators by email about important changes before they take effect.