Privacy Policy

TEZZ NOI is a Notice of Intimation (NOI) service operated by Sai Associates (“we”, “us”, “our”). This policy explains how we handle personal data when you use our website, submit an NOI request, sign in to the customer portal, or when a DSA or banker submits a request on your behalf.

We act as the data fiduciary for this data under the Digital Personal Data Protection Act, 2023 and process it in line with the Information Technology Act, 2000 and the rules made under it.

We do not collect your Aadhaar number separately and we do not perform Aadhaar authentication or e-KYC. An Aadhaar Card copy is only stored as one of your NOI documents.

We use personal data only for the following purposes:

• To contact you about your NOI request and decide, together with you, whether to proceed.
• To prepare, verify and process your NOI, including assembling your documents into an NOI SET and preparing the challan.
• To show you the progress of your NOIs and give you access to your approved final challan in the customer portal.
• To verify that the person signing in to the customer portal is the customer the NOI belongs to.
• To keep the service secure — for example to limit repeated sign-in attempts, prevent misuse and keep an audit trail of changes.
• To comply with legal, regulatory, tax and record-keeping obligations and to respond to lawful requests from authorities.

We do not sell your personal data, do not use it for advertising and do not build marketing profiles. The website contains no advertising or third-party analytics trackers.

We process your personal data on the basis of your consent, which you give when you submit an NOI request, share documents with us or sign in to the customer portal, and for legitimate uses permitted by law, such as complying with legal obligations.

If you are a DSA or banker: by submitting a customer's details you confirm that the customer has authorised you to share them with us for their NOI and has been informed of this policy.

You may withdraw your consent at any time by contacting us (see Contact). Withdrawal does not affect processing already carried out, and we may be unable to continue working on an NOI without the data it requires. Data we are legally required to keep will be retained as described below.

Your data is shared only as needed to provide the service:

• Our team. Managers can access NOI records to run the service. A staff member can only access NOIs actively assigned to them, and loses access when the NOI is reassigned or their account is deactivated.
• Authorities and institutions involved in your NOI, such as the registration authority or your lender, to the extent required to complete it.
• The DSA or banker who submitted your request, where needed to coordinate your NOI.
• Service providers that process data on our behalf under contractual confidentiality and security obligations: Supabase (database and sign-in), Cloudflare R2 (encrypted document storage), Vercel (website hosting) and Google (sign-in with Google).
• Government or law-enforcement bodies when required by law or a valid legal order.

Some service providers may store or process data on servers located outside India. Where this happens, we rely on providers that apply appropriate security safeguards, and we comply with any restrictions notified under Indian law.

• All traffic to the website is encrypted in transit (HTTPS). Documents and database records are encrypted at rest by our storage providers.
• Documents are kept in private storage that cannot be accessed through public links. Every file request is checked against your role and your NOI before it is delivered.
• Customers can only see their own NOIs, and only receive the final challan after our manager has approved it. Internal documents such as the NOI SET are never available to customers.
• Staff and manager accounts are protected by passwords and rate-limited sign-in; access is removed immediately when a staff member is deactivated.
• Changes to NOIs, documents, assignments and challans are recorded in an audit log.
• Uploaded files are checked on our servers before they are accepted.

We keep personal data for as long as it is needed for the purpose it was collected for — for NOI requests that do not proceed, until the request is closed; for NOIs, for the duration of the work — and afterwards only for as long as required to meet legal, regulatory, tax, accounting and dispute-resolution obligations.

When data is no longer needed, we delete it or anonymise it. Earlier versions of documents that have been replaced are removed from storage; temporary upload files are deleted automatically.

Subject to applicable law, you have the right to:

• Access a summary of the personal data we hold about you and how it is processed.
• Correct, complete or update inaccurate or incomplete data.
• Request erasure of data that is no longer needed, unless we must retain it by law.
• Withdraw consent you have given.
• Nominate another person to exercise these rights in the event of your death or incapacity.
• Have your grievances addressed by our Grievance Officer, and approach the Data Protection Board of India if they are not resolved.

To exercise a right, contact us using the details below. We will verify your identity before acting on the request and respond within the time required by law.

Your duties: please give us accurate information, do not impersonate anyone, and only share another person's details or documents if you are authorised to do so.

We only use cookies that are strictly necessary for the website to work: session cookies that keep you signed in to the staff or customer portal and protect sign-in. We do not use advertising or analytics cookies. Signing out removes your session.

Our service is intended for adults. We do not knowingly collect personal data from anyone under 18 without verifiable consent of a parent or lawful guardian. If you believe a child has shared personal data with us, please contact us so we can delete it.

If a personal data breach occurs, we will take immediate steps to contain it and will inform affected users and the relevant authorities as required by law.

We may update this policy when our services or legal requirements change. The “Last updated” date at the top shows when it was last revised. Significant changes will be communicated through the website or directly where appropriate.

For questions about this policy, to exercise your rights or to raise a grievance, contact:

Please also read our Terms of Service.