Effective Date: September 28, 2026  |  Last Updated: September 28, 2026  |  Version: 2026.2

Biz Secure Labs Private Limited (BSLPL)

Biz Secure Labs Private Limited ("BSLPL", "we", "us", or "our"), India, develops and provides computer and mobile security products and related services under brands including Net Protector, Total Security, Internet Security, Antivirus Pro, Z Security, Z Plus Security, Windows Boost, Game Boost, NPAV Endpoint Security, NPAV Corp Web Control, NPAV Home Web Control, Antivirus, Mobile Security and other products and services operated by BSLPL ("NPAV Security").

We respect your privacy and are committed to protecting personal data processed through our websites, software, applications, products and services.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, when it may be shared, how long it may be retained, and the choices and rights available to you under applicable law.

1. Who We Are

Data Fiduciary:
Biz Secure Labs Private Limited

Address:
1206, Sadashiv Peth, Tilak Road,
Pune – 411030, Maharashtra, India

Privacy / Data Protection Contact:
dpo@npav.net

Customer Support:
help@npav.net

For processing where BSLPL determines the purpose and means of processing personal data, BSLPL acts as the Data Fiduciary, subject to applicable law.

Where BSLPL processes personal data solely on behalf of another organization, the applicable organization may determine the purposes and means of such processing.

2. Scope of this Privacy Policy

This Privacy Policy applies, as applicable, to:

• NPAV websites and web services;
• NPAV desktop software;
• NPAV mobile applications;
• product activation and licensing services;
• customer accounts and MyAccount services;
• online purchases and renewals;
• customer support services;
• demo, feedback and enquiry forms;
• product reviews;
• recruitment and career applications; and
• other products or services that link to this Privacy Policy.

Certain products or services may have additional privacy notices describing processing specific to that product.

3. Personal Data We Collect

The personal data collected depends on the product, service, feature or interaction you use.

We seek to collect personal data that is reasonably necessary for the applicable purpose.

3.1 Contact Information

Depending on the service, this may include:

• Name
• Email address
• Telephone number
• Mobile number
• Postal address
• City
• State
• Country

We use this information for purposes such as account management, customer support, service communication, product-related communication and other purposes described in this Privacy Policy.

3.2 Account Information

Where you create or use an NPAV account, we may process:

• Name
• Email address
• Mobile number
• Login/account information
• Product and subscription information
• Account preferences
• License associations
• Communication preferences

This information is used to operate and manage your account and provide associated products and services.

3.3 Purchase and Transaction Information

When you purchase or renew an NPAV product or service, we may process:

• Order number
• Product purchased
• License/subscription details
• Purchase date
• Renewal information
• Transaction status
• Invoice information
• Billing information
• GST or tax information, where applicable
• Dealer/distributor information, where applicable

Payment information may be processed by authorized payment service providers.

Where payment processing is performed by a third party, that provider may independently process payment information under its applicable privacy policy and terms.

3.4 Product Activation and License Information

For product activation, validation, reactivation and license management, we may process:

• Product key or license information
• Activation status
• License validity
• Activation and reactivation information
• Product version
• Device association
• Installation information
• Account/license relationship

This information is used to provide and manage the licensed product or service, prevent unauthorized use and support license administration.

3.5 Device and Technical Information

Depending on the product and operating system, we may collect technical information such as:

• CPU information
• Motherboard identifier (MBID)
• HDD/storage information
• LAN/network adapter information
• Operating system and version
• Device identifiers
• IP address
• Product and software version
• Application configuration
• System information
• Network status
• Error and diagnostic information

We use this information for purposes including:

• product functionality;
• license activation and reactivation;
• device association;
• security protection;
• troubleshooting;
• fraud and abuse prevention;
• product reliability; and
• security and product improvement.

Technical information is not intentionally disclosed to third parties for their independent marketing purposes.

4. Security Telemetry, Installed Programs and Files

NPAV security products require certain technical information to identify, investigate, prevent and respond to cybersecurity threats.

Depending on the product and security event, this may include:

• File paths
• File hashes or MD5 checksums
• Installed software names
• Application/package names
• Software certificates
• Process information
• Security events
• Malware indicators
• Detection information
• Malware or suspicious-file samples
• Other technical information necessary for security analysis

This information may be processed for:

• malware detection;
• threat identification;
• threat classification;
• security analysis;
• threat intelligence;
• remediation;
• security research;
• improvement of malware detections; and
• protection of users and systems.

Malware and Suspicious File Samples

Where an NPAV product identifies a file or other object as suspicious or potentially malicious, the product may submit a sample or relevant technical information to NPAV security infrastructure for analysis.

A submitted sample may potentially contain personal or confidential information depending on the contents of the file.

BSLPL seeks to limit collection and processing to what is reasonably necessary for cybersecurity purposes and applies appropriate access and security controls to submitted samples.

Where technically appropriate, information may be processed in aggregated, pseudonymized or anonymized form for threat intelligence, security research and product improvement.

5. Product Settings and Local Security Data

NPAV products may process information necessary to operate security and optimization features, including:

• User settings
• File whitelist information
• File blacklist information
• Security preferences
• System optimization information
• Malware detection records
• Security event logs
• Product configuration information

Such information is processed to provide the relevant product functionality, security protection, troubleshooting and service improvement.

6. Android and iOS Permissions

NPAV mobile applications may request permissions required for specific product functions.

Depending on the product and operating system, permissions may include access relating to:

• Network status
• Device information
• Storage or files
• Location/GPS, where required for a specific feature
• USB or connected-device information, where supported
• Other operating-system functionality required by the product

The actual permissions requested may vary by product, operating system and version.

We seek to use permissions only for the functionality for which they are required.

Where a permission is optional, you may be able to decline it; however, declining a permission may affect the availability of the associated functionality.

7. Purposes of Processing

Depending on the product or service, personal data may be processed for the following purposes.

Product and service delivery

• Product installation
• Activation and reactivation
• License validation
• Subscription management
• Software updates
• Security protection
• Threat detection
• Threat remediation
• Account management
• Customer support

Cybersecurity

• Malware detection
• Threat intelligence
• Security analysis
• Fraud and abuse prevention
• Security monitoring
• Investigation of security incidents
• Protection of users and systems

Product improvement

• Error diagnosis
• Performance improvement
• Product reliability
• Security research
• Development and improvement of threat detections
• Product development

Customer communication

• Product notifications
• License and subscription notifications
• Security alerts
• Support communications
• Service-related communications

Marketing

Where applicable and where consent or another lawful basis is required, we may use contact information to send:

• Promotions
• Offers
• Product information
• Surveys
• Special offers
• Marketing communications

Marketing communications are kept distinct from communications necessary to provide the requested service.

Legal and regulatory purposes

• Compliance with applicable law
• Responding to lawful requests
• Maintaining required records
• Prevention and investigation of unlawful activity
• Enforcement of agreements
• Establishment, exercise or defence of legal claims

8. Consent and Other Permitted Processing

Where processing is based on consent, BSLPL will request consent through an appropriate product, application, website, account or service interface.

Consent will relate to specified purposes and the personal data necessary for those purposes.

Where applicable, we maintain records of consent and withdrawal for compliance, audit and accountability purposes.

Where processing is otherwise permitted or required by applicable law, including for providing a requested service, security, fraud prevention, legal compliance or other specified legitimate uses, we may process personal data without relying on consent where permitted by law.

The applicable basis or purpose may vary depending on the processing activity.

9. Withdrawal of Consent

Where processing is based on consent, you may withdraw your consent.

Where available, consent may be withdrawn through the relevant:

• NPAV account;
• product or application settings;
• privacy controls;
• consent mechanism; or
• other mechanism provided by BSLPL.

You may also contact us at: dpo@npav.net

Withdrawal of consent does not affect the lawfulness of processing performed before withdrawal.

Withdrawal may affect a product or feature where the relevant processing is necessary to provide that product or feature.

BSLPL may continue processing personal data where such processing is otherwise permitted or required by applicable law.

10. Service Communications and Marketing

We distinguish between communications necessary to provide a requested service and optional marketing communications.

Service communications

These may include:

• Product activation information
• License expiry information
• Renewal information
• Security alerts
• Account notifications
• Service notifications
• Technical support communications
• Important privacy or policy notices

These communications may be sent where necessary to provide the requested product or service or where otherwise permitted by law.

Marketing communications

Marketing communications may be sent where applicable consent or another lawful basis permits such communication.

You may withdraw marketing consent without necessarily affecting the underlying product or service.

11. Information Sharing

We may disclose personal data where reasonably necessary and permitted by applicable law.

Recipients may include:

• Authorized service providers
• Cloud and hosting providers
• Payment service providers
• Communication providers
• Customer-support service providers
• Security and threat-intelligence service providers
• Professional advisers
• Auditors
• Affiliates, where applicable
• Government, regulatory or law-enforcement authorities where legally required
• Parties involved in a merger, acquisition, restructuring or transfer of relevant business assets

Service providers processing personal data on our behalf are expected to process it only for authorized purposes and subject to appropriate contractual, confidentiality and security requirements.

We do not sell personal data to third parties for their independent marketing purposes.

12. Cookies and Similar Technologies

Our websites and online services may use cookies, logs, pixels and similar technologies for purposes including:

• Website functionality
• Security
• Session management
• User preferences
• Analytics
• Performance monitoring
• Service improvement

Where applicable, non-essential cookies or similar technologies will be managed through available consent or browser controls.

13. Third-Party Websites and Services

Our websites, products or communications may contain links to third-party websites or services.

Third-party websites and services operate under their own privacy policies and terms.

BSLPL is not responsible for privacy practices of third-party services that it does not control.

14. Data Retention

BSLPL retains personal data only for as long as reasonably necessary for the purpose for which it was collected, or for a longer period where required or permitted by applicable law.

Different categories of personal data may have different retention periods.

Examples include:

• Account data: while the account or associated service relationship remains active and for applicable legal or operational requirements.
• License and activation records: for license administration, fraud prevention, dispute resolution and applicable legal requirements.
• Transaction and accounting records: for applicable accounting, tax and legal requirements.
• Security logs and telemetry: for defined security, investigation and operational requirements.
• Malware or suspicious-file samples: according to applicable security-analysis and threat-intelligence retention requirements.
• Support records: for the period reasonably necessary to resolve the request and maintain appropriate records.
• Recruitment records: according to the recruitment retention requirements described below.
• Consent records: for as long as reasonably necessary to demonstrate and manage consent and comply with applicable requirements.
• Backups: according to applicable backup and disaster-recovery retention schedules.

When personal data is no longer required, it will be securely deleted, anonymized or otherwise disposed of in accordance with applicable law and our internal retention procedures.

15. Data Security

We implement reasonable technical and organizational measures appropriate to the nature and risks of the personal data and processing activities.

These measures may include:

• Access controls
• Role-based access
• Authentication controls
• Encryption during transmission
• Encryption at rest where appropriate
• Security monitoring
• Logging and audit controls
• Vulnerability management
• Security testing
• Backup and recovery controls
• Incident-response procedures
• Employee confidentiality and security requirements

Access to personal data is restricted to authorized personnel and service providers who require access for legitimate purposes.

No electronic transmission or storage system can be guaranteed to be completely secure. We continuously review and improve our security measures.

16. Personal Data Breaches

BSLPL maintains processes for identifying, assessing, responding to and managing personal-data security incidents.

Where a personal-data breach is required to be notified under applicable law, BSLPL will make the required notifications to the relevant authority and affected individuals within the applicable legal requirements and timelines.

17. Cross-Border Processing

Personal data may be processed or stored outside India by BSLPL or its authorized service providers, depending on the product, service and technical infrastructure.

Where personal data is transferred to or processed in another jurisdiction, BSLPL will apply appropriate contractual, technical and organizational safeguards and comply with applicable legal requirements.

The actual service providers, processing locations and transfer mechanisms may vary by product and service.

18. Your Rights

Subject to applicable law and any applicable conditions or limitations, you may have rights including:

• Requesting information about processing of your personal data;
• Accessing personal data and information about its processing;
• Requesting correction of inaccurate or incomplete personal data;
• Requesting erasure where applicable;
• Withdrawing consent where processing is based on consent;
• Exercising other rights available under applicable data-protection law; and
• Raising a grievance regarding the processing of your personal data.

Requests may be subject to reasonable identity verification and applicable legal requirements.

19. How to Submit a Privacy Request

You may submit a privacy request by contacting:

Data Protection / Privacy Contact
Email: dpo@npav.net

Please provide sufficient information to help us identify your account, transaction or request and clearly describe the action you are requesting.

We may request reasonable information to verify your identity before processing a request.

Requests will be handled in accordance with applicable law and our applicable privacy procedures.

20. Grievance Redressal

If you have a concern or grievance regarding the processing of your personal data, you may contact our privacy contact:

Email: dpo@npav.net

Address:
Biz Secure Labs Private Limited
1206, Sadashiv Peth, Tilak Road,
Pune – 411030, Maharashtra, India

We will review and address grievances in accordance with applicable law and our grievance-handling procedures.

21. Children's Personal Data

For purposes of applicable Indian data-protection law, a child means an individual who has not completed eighteen years of age.

Where BSLPL processes personal data of a child, it will comply with applicable requirements concerning children's personal data, including requirements relating to parental or lawful-guardian consent and applicable restrictions concerning tracking, behavioural monitoring and targeted advertising, subject to applicable exemptions.

BSLPL does not knowingly process children's personal data in a manner prohibited by applicable law.

Where we become aware of processing that does not comply with applicable requirements, we will take appropriate steps in accordance with applicable law.

Privacy questions concerning children's personal data may be directed to: dpo@npav.net

22. Recruitment and Career Applicants

When you apply for a position through our website or another recruitment channel operated by BSLPL, we may collect and process personal data for recruitment and employment-related purposes.

Information We May Collect

Depending on the position and information you provide, this may include:

• Full name
• Mobile number
• Email address
• Current location
• Educational qualifications
• College/university name
• Stream or specialization
• Percentage/grades
• Passing year
• Work experience
• Skills
• Resume/CV
• Educational certificates
• Cover letter
• Portfolio URL
• GitHub URL
• Other information voluntarily provided during recruitment

We seek to collect information relevant to recruitment and do not intentionally request information that is unnecessary for evaluating an application.

Purposes

Recruitment information may be processed to:

• Evaluate suitability for employment;
• Review qualifications and experience;
• Contact applicants;
• Schedule interviews;
• Conduct recruitment assessments;
• Conduct background verification where applicable and permitted;
• Maintain recruitment records;
• Comply with legal and administrative requirements; and
• Consider an applicant for future opportunities where applicable.

Future Employment Opportunities

Where a separate consent mechanism is provided for retaining an application for future employment opportunities, an applicant may choose whether to provide that consent.

Withdrawal of such consent will not affect processing already carried out before withdrawal.

Sharing

Recruitment information may be shared with:

• Authorized HR personnel;
• Hiring managers;
• Interview panel members;
• Internal departments involved in recruitment;
• Background-verification providers where applicable;
• Other authorized service providers supporting recruitment; and
• Government or regulatory authorities where required by law.

We do not sell applicant information for third-party marketing.

Retention

Recruitment information is retained only for as long as reasonably necessary for the recruitment process and applicable legal or administrative requirements.

Where an applicant has separately agreed to future-opportunity retention, the information may be retained for the applicable future recruitment period.

After the applicable retention period, recruitment information will be securely deleted, anonymized or otherwise disposed of in accordance with applicable procedures.

23. Feedback, Contact and Support Requests

When you submit a Feedback, Contact Us, Create Ticket, Demo Request, Product Review or similar enquiry through our websites or services, we may process personal data necessary to respond to and manage your request.

Information We May Collect

Depending on the request, this may include:

• Name
• Mobile number
• Email address
• City
• Department
• Feedback type
• Message or query details
• Product information
• License information where relevant
• IP address and submission information where logged for security or audit purposes
• Other information voluntarily provided through the request

Purposes

We process this information to:

• Respond to enquiries;
• Provide technical or customer support;
• Investigate complaints;
• Investigate reported product issues;
• Process demo requests;
• Process product feedback and reviews;
• Improve products and customer experience;
• Maintain appropriate support records; and
• Comply with applicable legal requirements.

Sharing

Information may be shared with:

• Authorized customer-support personnel;
• Relevant internal departments;
• Service providers supporting customer support;
• Security or technical service providers where necessary; and
• Government or regulatory authorities where required by law.

We do not sell or disclose submitted personal information to third parties for their independent marketing purposes.

Retention

Support and enquiry information is retained only for as long as reasonably necessary to process and resolve the request, maintain appropriate business records and comply with applicable requirements.

After the applicable retention period, the information will be securely deleted, anonymized or otherwise disposed of.

Forms Covered

This section applies, as applicable, to:

• Feedback forms
• Contact Us forms
• Create Ticket forms
• Demo Request forms
• Add Review/Product Review forms
• Website enquiry forms
• Customer-support forms
• Similar NPAV enquiry channels

24. Automated Processing and Security Analysis

NPAV products use automated technologies to identify, classify, block, quarantine and remediate malware, suspicious files, malicious websites and other cybersecurity threats.

These automated security functions are designed to protect devices, systems and users.

We do not intend to use automated processing or profiling to make decisions about an individual that produce legal or similarly significant effects, except where permitted by applicable law and subject to applicable safeguards.

25. Data Minimization and De-identification

BSLPL seeks to collect and process only personal data that is reasonably necessary for the applicable purpose.

Where technically and operationally appropriate, BSLPL may use:

• Aggregated information;
• Pseudonymized information;
• Anonymized information; or
• Other measures designed to reduce unnecessary identification.

Such information may be used for security research, threat intelligence, analytics, product improvement and other lawful purposes.

26. Accuracy of Personal Data

We take reasonable measures to maintain accurate and relevant personal data.

You may request correction or updating of inaccurate personal data through available account mechanisms or by contacting: dpo@npav.net

27. Third-Party Data Processors

BSLPL may use third-party service providers to provide infrastructure, hosting, payment, communications, analytics, customer support, security and other services.

Where a service provider processes personal data on behalf of BSLPL, we seek to ensure that appropriate contractual, confidentiality and security requirements apply to that processing.

A current internal record of relevant processors, processing purposes and applicable processing locations is maintained and reviewed as appropriate.

28. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes in our products or services;
• Changes in our data-processing practices;
• Changes in technology;
• Changes in applicable law or regulatory requirements; or
• Improvements to our privacy practices.

The latest version will be published on the applicable NPAV website with the revised effective date.

Where applicable law requires additional notice or consent for a material change, BSLPL will provide the required notice or obtain the required consent.

29. Privacy Policy Version History

30. Contact Us

For privacy questions, requests or grievances:

Biz Secure Labs Private Limited
1206, Sadashiv Peth, Tilak Road,
Pune – 411030, Maharashtra, India

Privacy / Data Protection Contact:
dpo@npav.net

Customer Support:
help@npav.net

Important Notice

This Privacy Policy describes BSLPL's intended privacy practices. The actual personal data collected and processing performed may vary depending on the NPAV product, operating system, service, account configuration and features used.

Where a product-specific privacy notice provides more specific information about a particular processing activity, that notice should be read together with this Privacy Policy.