Last Updated: September 18, 2026
Nook Ventures Private Limited (“CSNook,” “we,” “us,” or “our”) respects the privacy of individuals whose Personal Data we process.
This Privacy Policy explains how we collect, use, store, disclose, transfer and otherwise process Personal Data when you visit our website, use the CSNook platform, create an account, request a demonstration, communicate with us, interact with our marketing activities or otherwise engage with our products and services.
It also explains the choices and rights available to individuals under applicable data protection laws, including the General Data Protection Regulation (“GDPR”) where it applies (check here).
CSNook is a customer success platform designed to help organizations centralize customer information, understand customer engagement, monitor customer health and lifecycle information, manage customer-success workflows and generate actionable customer insights.
For purposes of this Privacy Policy, our websites, applications, platform, integrations and related services are collectively referred to as the “Services.”
CSNook is a product of Nook Ventures Private Limited, having its registered address at Room No 112, 2-A/3, S/F Kundan Mansion, Turkman Gate, Darya Ganj, New Delhi, Central Delhi – 110002, India.
Privacy and data protection enquiries may be sent to support@nookventures.com.
Depending on the circumstances, CSNook may process Personal Data either as a data controller or as a data processor.
When we determine why and how Personal Data is processed for our own business purposes, such as managing our website, accounts, sales activities, marketing, support and business operations, Nook Ventures Private Limited generally acts as the data controller.
When a CSNook customer submits, synchronizes, imports or otherwise makes Personal Data available to CSNook for processing through the platform, CSNook generally acts as a data processor on behalf of that customer. The customer generally remains the data controller and determines why and how that Customer Data is processed.
This Privacy Policy applies to Personal Data we process in connection with www.csnook.com and other CSNook-controlled websites, the CSNook application and platform, customer and user accounts, product demonstrations and enquiries, sales activities, customer onboarding and support, newsletters and business communications, events, surveys and webinars, product integrations and APIs, Model Context Protocol (“MCP”) functionality, business-development activities, recruitment where applicable, and other interactions with CSNook where this Privacy Policy is referenced.
This Privacy Policy does not govern the independent processing activities of our customers or third parties with whom you separately interact.
Our customers may connect CSNook to customer relationship management systems, email and collaboration platforms, product analytics systems, support systems, billing platforms, internal databases and other business applications.
Information processed through such connections is referred to in this Privacy Policy as “Customer Data.”
Customer Data may include Personal Data concerning a customer’s customers, prospects, users, employees, contractors, representatives and other business contacts.
Depending on how a customer configures CSNook, Customer Data may include names, business email addresses, telephone numbers, job titles, company information, customer account information, product usage information, feature-adoption information, engagement information, customer health information, lifecycle stages, onboarding and renewal information, account history, support interactions, email and communication history, meeting information, survey responses, customer feedback, notes, tasks, subscription information, billing-related business information, revenue and expansion indicators, customer-success milestones, account scores, customer health scores, information obtained through integrations, custom fields configured by customers and other information a customer elects to process through CSNook.
Our customers determine the categories of Customer Data submitted to the Services and the purposes for which that information is processed.
When CSNook acts as a processor, we process Customer Data on behalf of and according to the instructions of the relevant customer, subject to applicable law and our contractual arrangements with that customer.
Customers are responsible for ensuring that they have an appropriate lawful basis and authority to collect Personal Data and make it available to CSNook.
If you have a privacy request relating to Customer Data controlled by one of our customers, you should normally contact that organization directly. If you submit such a request to CSNook, we may forward or refer the request to the relevant customer and assist that customer where required by applicable law.
The Personal Data we process depends on how you interact with CSNook.
We may collect information that you provide when you create an account, request a demonstration, subscribe to communications, communicate with sales or support, submit a form, attend an event or webinar, participate in a survey, enter into a business relationship with us or otherwise communicate with CSNook.
This information may include your first and last name, business email address, telephone number, company name, company website, job title, department or professional role, mailing or business address, information about your organization’s requirements, account username or identifier, profile information, communication preferences, information contained in messages sent to us and any other information you choose to provide.
When you create or access a CSNook account, we may process information such as user identifiers, account permissions, organization membership, user roles, authentication information, login events, session information, access tokens and authorization information required to provide integrations.
Where authentication is provided through an external identity provider, that provider may process authentication information under its own terms.
Where applicable, we may collect or process billing contact information, subscription details, invoice information, transaction details, payment status, tax information and other records required to administer our commercial relationship.
Where payment processing is performed by a third-party provider, that provider may process payment credentials directly.
When you contact us, we may process your identity and contact details, the contents of emails or messages, support tickets, attachments, technical information provided for troubleshooting, meeting information, feedback, survey information and correspondence history.
When you access our website or Services, we may automatically collect technical and usage information such as your Internet Protocol address, browser type and version, operating system, device type, device identifiers, language settings, referring website, pages visited, links clicked, features used, date and time of access, session duration, application logs, diagnostic information, error information, security events and approximate geographic information derived from an IP address.
We use such information for purposes including operating the Services, maintaining security, troubleshooting, performing analytics and improving functionality.
We may obtain Personal Data from sources other than directly from the individual. These sources may include our customers, account administrators, integrated applications, business partners, referral partners, publicly available professional information, professional networking services, business-information providers, business contact databases, CRM platforms and data-enrichment providers.
For example, CSNook may use business-development and professional-information services such as Apollo, LinkedIn Sales Navigator, CRM systems and similar services to identify or obtain professional contact information relating to prospective customers and business contacts.
Such information may include a person’s name, professional email address, company, job title, business telephone number, professional profile information, company size or industry, publicly available employment information and other professional or business information. We may combine such information with information already held by CSNook.
Where applicable, we process this information on the basis of our legitimate interests in developing business relationships, communicating with relevant professional contacts and promoting our Services, subject to your rights and applicable direct-marketing laws.
Where required by applicable law, we will provide or make this Privacy Policy available when we first communicate with an individual whose Personal Data was obtained indirectly.
Customers may connect CSNook with third-party systems, including services such as Google Workspace and Gmail, Microsoft 365 and Outlook, Slack, CRM platforms, customer-support platforms, product analytics systems, customer communication platforms, billing systems and other third-party business applications.
Where a customer enables an integration, CSNook may access information authorized by that customer in order to provide the requested functionality. Depending on the integration, this information may include contact information, email messages and metadata, calendar information, customer communications, account records, product activity, support records, CRM records, files or documents, subscription information and other authorized business information.
Customers control which integrations they enable and are responsible for ensuring that their use of integrations complies with applicable law and the terms of the relevant third-party service.
Where CSNook accesses information through Google Workspace APIs, our use and transfer of information received from Google APIs will comply with the applicable Google API Services User Data Policy, including applicable Limited Use requirements.
We use Google Workspace data only as necessary to provide or improve user-facing functionality authorized by the customer or user.
CSNook does not sell Google Workspace user data, use Google Workspace user data for advertising, use Google Workspace user data to create advertising profiles, or use Google Workspace user data to develop, train or improve generalized artificial-intelligence or machine-learning models.
Access to Google Workspace information is limited to the permissions necessary for the functionality requested by the user or customer.
Where applicable, users may revoke CSNook’s access through their account or Google account controls.
CSNook does not currently provide its own large language model as part of the Services and does not use Customer Data to train CSNook-owned generalized AI or machine-learning models.
CSNook may, however, provide Model Context Protocol (“MCP”) functionality that enables customers to connect CSNook data with an AI assistant, large language model or other AI service selected and authorized by the customer.
Through such functionality, an authorized customer may permit its selected AI service to request or receive particular information from CSNook for purposes such as generating summaries, answering questions or producing insights from the customer’s own data.
When a customer chooses to use an external AI service through MCP, the customer determines whether to enable the connection, selects the relevant AI provider, determines which authorized users may use the connection and controls the relevant use case. Data is made available in response to customer-authorized requests and subject to applicable permissions.
The customer is responsible for assessing whether the selected AI provider is appropriate for its data and intended use. The third-party AI provider’s processing may also be governed by its own privacy terms, data-processing terms and contractual relationship with the customer.
The legal role of the AI provider may vary depending on the particular service and contractual arrangement. The provider may act as a processor, subprocessor, controller or other recipient under applicable law.
CSNook remains responsible for the processing activities performed by CSNook itself. The use of a third-party AI service does not transfer responsibility for CSNook’s own obligations to that provider.
CSNook does not use information made accessible through MCP to train generalized CSNook AI or machine-learning models.
Customers should not use MCP to disclose Personal Data to an AI provider unless they have determined that such disclosure is authorized, lawful and appropriate.
Where information originating from a third-party integration is provided to an AI service, the transfer must also comply with applicable terms and restrictions of the original data provider.
We use Personal Data to provide and administer the Services, including creating and administering accounts, authenticating users, providing customer-success functionality, operating integrations, maintaining customer configurations and performing contractual obligations.
We also use Personal Data to provide customer support, including responding to support requests, investigating technical issues, communicating with customers, providing onboarding, troubleshooting errors and delivering customer service.
For sales and business-development purposes, we may use Personal Data to respond to enquiries, arrange product demonstrations, assess customer requirements, prepare commercial proposals, manage prospective customer relationships, communicate with business contacts and develop commercial relationships.
We may process Personal Data for service administration, including managing subscriptions, billing, service notifications, product changes, recordkeeping and contractual relationships.
We may also process information for analytics and improvement, including understanding use of our Services, analyzing trends, measuring feature adoption, improving usability, diagnosing technical problems, developing functionality, conducting statistical analysis and improving our products and Services.
For security purposes, we may process information to prevent unauthorized access, identify suspicious activity, investigate security incidents, detect abuse, protect accounts, maintain audit logs, protect our infrastructure and enforce our agreements.
Subject to applicable law, we may use professional contact information for marketing purposes, including sending newsletters, communicating product updates, promoting relevant Services, inviting professional contacts to events or webinars and measuring the performance of business communications. You may opt out of promotional communications at any time.
We may also process Personal Data to comply with applicable laws, respond to legally valid requests, maintain required records, establish or defend legal claims, conduct audits, prevent fraud and protect the rights of CSNook and others.
Finally, information may be processed as necessary in connection with an actual or proposed financing, investment, acquisition, merger, restructuring, sale of assets, insolvency or similar corporate transaction.
Where the GDPR or another law requiring a legal basis applies, we rely on one or more of the following grounds.
We may process Personal Data where it is necessary for the performance of a contract, including providing Services, administering accounts, fulfilling contractual commitments or taking steps requested before entering into a contract.
We may rely on our legitimate interests where processing is reasonably necessary for operating and improving CSNook, securing the Services, providing support, managing business relationships, performing B2B marketing and maintaining business records, provided those interests are not overridden by the rights and freedoms of affected individuals.
We may rely on consent where we ask an individual to consent to particular processing, including certain marketing activities or the use of non-essential cookies where consent is legally required.
We may process information where necessary to comply with a legal obligation applicable to us or where processing is necessary to establish, exercise or defend legal rights or otherwise protect CSNook, our customers, users or others.
Where Customer Data is processed by CSNook solely as a processor, the relevant customer is generally responsible for establishing the legal basis for processing that Personal Data.
We may use cookies, local storage, pixels, tags, scripts and similar technologies in connection with our website and Services.
Strictly necessary technologies may be used to enable core site functionality, authenticate users, maintain sessions, remember privacy choices, prevent fraud, provide security and operate the Services.
Functional technologies may be used to remember choices or settings that improve functionality and user experience.
Analytics and performance technologies may help us understand website traffic, page usage, user journeys, product performance, technical errors and interactions with our Services.
CSNook does not currently sell Personal Data or use Personal Data for third-party behavioral advertising.
If CSNook introduces additional marketing, analytics or advertising technologies in the future, these could include services such as Google Analytics, Google Tag Manager, HubSpot, LinkedIn Insight Tag, Google Ads, Meta Pixel, Microsoft Clarity or similar services.
Where applicable law requires consent for such technologies, non-essential technologies will be subject to an appropriate consent mechanism.
Our active technologies and available privacy choices may also be described through our cookie banner or cookie-preference interface. Users may also control cookies using browser settings, although disabling some cookies may affect functionality of the Services.
You can unsubscribe from promotional email communications using the unsubscribe link included in the relevant email or by contacting us.
After opting out, we may retain limited information necessary to maintain your suppression preference and ensure that you are not re-added to marketing lists unintentionally.
Opting out of marketing does not prevent us from sending communications necessary for security, account administration, billing, support, legal or contractual matters or operation of the Services.
We may disclose Personal Data to third-party service providers and subprocessors that help operate CSNook. These providers may support cloud infrastructure, content delivery, databases, security, analytics, logging, monitoring, transactional email, CRM, customer support, engineering, project management, version control and other operational functions.
Our current infrastructure and operational subprocessor environment includes providers such as Google Cloud Platform, Cloudflare, MongoDB Atlas, BigQuery, Grafana and Prometheus, Mailgun, Google Cloud Logging, Zoho, Amplitude, Atlassian and GitHub.
An up-to-date list of relevant subprocessors may be maintained through our Trust Center. Subprocessors are expected to process Personal Data in accordance with contractual obligations and applicable law. Where required by our contractual commitments, we may notify customers of material changes to subprocessors.
Where a customer enables an integration, information may be exchanged between CSNook and the relevant third-party service as necessary to provide that integration.
We may also disclose information to legal counsel, auditors, accountants, insurers, financial advisers and other professional advisers where reasonably necessary.
Information may be shared with entities under common ownership or control where reasonably necessary for lawful administrative, technical or business purposes.
We may disclose information where reasonably necessary to comply with applicable law, respond to a valid court order or legally binding governmental request, prevent fraud or abuse, investigate unlawful activity, protect the security of the Services or protect our rights or the rights and safety of others.
Information may also be disclosed to potential or actual investors, purchasers, advisers or other relevant parties in connection with a financing, merger, acquisition, restructuring, asset sale or similar transaction, subject to appropriate confidentiality measures where applicable.
Finally, we may disclose information when you or the relevant customer directs or authorizes us to do so.
CSNook does not sell Personal Data to advertisers or data brokers.
CSNook does not currently use Customer Data for cross-context behavioral advertising or targeted advertising on behalf of third-party advertisers.
If these practices change, we will update this Privacy Policy and provide applicable privacy choices before using Personal Data for such purposes where required by law.
CSNook uses Google Cloud Platform infrastructure to host production data. Our infrastructure may operate in multiple countries and regions.
Where available, technically feasible and appropriate for the customer’s configuration, CSNook seeks to locate primary Customer Data hosting in a region selected for, or geographically aligned with, the relevant customer.
However, data residency of primary storage does not necessarily mean that Personal Data will never be processed in another jurisdiction.
For example, information may be processed elsewhere where necessary for integrations, infrastructure services, email delivery, technical support, monitoring, security, logging, disaster recovery, backups or other subprocessor functions.
Customers requiring specific data-location commitments should ensure that such requirements are included in their agreement with CSNook.
Because CSNook operates internationally and uses service providers that may operate in multiple countries, Personal Data may be transferred to or processed in a country other than the country in which it was originally collected.
Data-protection laws in those jurisdictions may differ.
Where the GDPR applies and Personal Data is transferred from the European Economic Area to a jurisdiction for which the European Commission has not issued an applicable adequacy decision, we will use an appropriate lawful transfer mechanism where required.
Depending on the circumstances, such mechanisms may include European Commission Standard Contractual Clauses, supplementary contractual or technical safeguards, an applicable adequacy decision or another mechanism permitted under applicable law.
Where UK data-protection law applies, appropriate transfer safeguards may similarly be implemented as required by applicable UK law.
Individuals may contact us for further information concerning applicable transfer safeguards.
We retain Personal Data only for as long as reasonably necessary for the purposes for which it is processed, taking into account contractual requirements, customer instructions, legal obligations, security needs, dispute resolution, applicable limitation periods, accounting obligations and establishment or defense of legal claims.
Unless otherwise agreed with the customer, Customer Data may be retained for up to 180 days following termination of the customer’s Services.
A customer may request deletion before the end of this 180-day period. Where technically feasible and subject to applicable legal obligations, CSNook will process an authorized early-deletion request.
Deletion from active production systems does not necessarily result in immediate removal from every backup or disaster-recovery system. Residual copies may remain for a limited period until they are overwritten or deleted through routine backup-management processes.
We may retain information where required by law, a legal hold or for the establishment, exercise or defense of legal claims.
Account, commercial, support and business records may be retained for as long as necessary to maintain our relationship with you or your organization and thereafter for a reasonable period for legal, accounting, security and business-record purposes.
Marketing contact information may be retained while we have an ongoing business reason to communicate with you. If you opt out, we may retain limited suppression information so that we can continue to respect your preference.
We may retain information that has been irreversibly anonymized or aggregated and can no longer reasonably be associated with an identifiable individual.
CSNook may enable customers to generate metrics such as health scores, churn indicators, engagement indicators, adoption scores, lifecycle indicators, alerts, workflow triggers and customer-success analytics.
These functions are intended to provide decision-support information to customer personnel.
CSNook does not use these customer-success indicators to independently make solely automated decisions about individuals that produce legal effects or similarly significant effects on them.
Customers remain responsible for how they configure, interpret and act upon information generated through the platform.
CSNook does not use Customer Data to train generalized CSNook artificial-intelligence or machine-learning models.
We do not sell Customer Data to AI-model providers for model training.
Where a customer deliberately connects a third-party AI service through MCP or another customer-controlled integration, any processing performed by that provider is subject to the configuration chosen by the customer and the applicable relationship with that provider.
CSNook is not designed to require special-category or highly sensitive Personal Data for ordinary use.
Customers should not submit sensitive Personal Data unless processing such information is necessary for their legitimate use of the Services, they have an appropriate lawful basis, the processing is permitted under their agreement with CSNook and appropriate safeguards have been implemented.
Depending on applicable law, sensitive information may include information concerning health, racial or ethnic origin, religious beliefs, political opinions, sexual orientation, biometric identifiers, government identification, financial account credentials or other specially protected information.
Customers are responsible for determining whether the information they choose to submit is appropriate for processing through CSNook.
We maintain administrative, organizational and technical measures designed to protect Personal Data against unauthorized access, unauthorized disclosure, loss, misuse, alteration, destruction and unlawful processing.
Security measures are reviewed and developed in consideration of the nature of the Services and relevant risks.
Access to Personal Data is intended to be limited to personnel and service providers who require such access for legitimate business purposes and who are subject to appropriate confidentiality obligations.
No Internet transmission or information-storage system can be guaranteed to be completely secure, and CSNook therefore cannot guarantee absolute security.
If a Personal Data breach occurs, we will investigate the incident and make notifications to affected customers, individuals and/or authorities where required by applicable law.
Where CSNook acts as a processor, we will notify the relevant customer of qualifying Personal Data breaches in accordance with applicable law and contractual requirements.
Where the GDPR applies to our processing of your Personal Data, you may have the right to access Personal Data we hold about you, request correction of inaccurate or incomplete Personal Data, request deletion of Personal Data in circumstances provided by law, request restriction of processing, and request portability of Personal Data where the relevant legal requirements are met.
You may also object to processing based on our legitimate interests where your particular circumstances justify doing so, and you may object to direct marketing at any time.
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Where applicable, you may also have rights relating to decisions based solely on automated processing that produce legal or similarly significant effects. As explained above, CSNook’s customer-health and similar analytics are intended as decision-support tools and are not used by CSNook to independently make such decisions.
The right to deletion and certain other rights are not absolute and may be subject to exceptions under applicable law.
Where the GDPR applies, you may also lodge a complaint with an applicable data-protection supervisory authority, including an authority in the country of your habitual residence, place of work or the location of an alleged infringement.
We encourage individuals to contact us first so that we can attempt to address concerns directly.
To exercise applicable privacy rights concerning Personal Data for which CSNook acts as controller, contact support@nookventures.com.
Please provide enough information for us to understand the nature of your request.
We may request information reasonably necessary to verify your identity before fulfilling a request.
Where the GDPR applies, we will respond without undue delay and generally within one month after receiving a valid request. That period may be extended where permitted by law due to the complexity or number of requests.
There is generally no fee for exercising GDPR rights. We may, however, charge a reasonable fee or decline a request where permitted by law if a request is manifestly unfounded or excessive.
Where a request concerns Customer Data controlled by one of our customers, we may direct the request to the relevant customer.
Residents of certain U.S. states may have additional privacy rights where the relevant law applies to CSNook and the relevant processing.
Depending on the applicable law, these rights may include the right to confirm whether Personal Data is processed, access Personal Data, correct inaccurate Personal Data, request deletion, obtain a portable copy, opt out of sale of Personal Data, opt out of certain targeted advertising, opt out of certain profiling, limit certain uses of sensitive Personal Data and appeal a decision concerning a privacy request.
CSNook does not currently sell Personal Data to data brokers or advertisers and does not use Customer Data for third-party targeted advertising.
Requests may be submitted to support@nookventures.com.
The CSNook Services are designed for businesses and professional users and are not intended for children under 18.
We do not knowingly collect Personal Data directly from children through ordinary use of our website or Services.
If you believe a child has provided Personal Data directly to CSNook, please contact us.
Customer Data may contain information relating to minors if a customer elects to submit such information. In those circumstances, the customer is responsible for determining whether that processing is lawful and appropriate.
The Services may link to or integrate with websites, applications and services controlled by third parties.
Third parties may process Personal Data according to their own privacy policies and terms.
CSNook does not control the independent processing practices of third parties and encourages users to review their applicable privacy notices.
CSNook primarily operates in a business-to-business environment.
We may therefore process Personal Data concerning individuals acting in a professional capacity, including employees, founders, executives, contractors, consultants, representatives, prospective customers and business partners.
Where applicable law treats such information as Personal Data, it is processed in accordance with this Privacy Policy.
We may generate aggregated, statistical or de-identified information from information processed through our Services where permitted by law.
Such information may be used for analytics, product improvement, service performance, research, security, capacity planning and business analysis.
Where information is irreversibly anonymized so that it no longer identifies or can reasonably be linked to an individual, it may no longer constitute Personal Data under applicable law.
Where CSNook processes Personal Data on behalf of a customer and applicable law requires a data-processing agreement, the relationship should be governed by appropriate contractual data-processing terms.
Such terms may address processing instructions, confidentiality, information security, subprocessors, assistance with privacy-rights requests, Personal Data breaches, international transfers, deletion and return of Customer Data, audits and other processor obligations required by applicable law.
Where there is a conflict between this Privacy Policy and an executed agreement governing CSNook’s processing of Customer Data, the applicable contractual agreement will govern that Customer Data processing to the extent of the conflict.
Nook Ventures Private Limited is established in India.
Where applicable data-protection law requires CSNook to appoint a representative in the European Economic Area or United Kingdom, CSNook will make the representative’s relevant contact information available as required by law.
Privacy enquiries may currently be sent to support@nookventures.com.
We may update this Privacy Policy from time to time to reflect changes to our Services, processing practices, integrations, subprocessors, applicable law, operational developments or other relevant circumstances.
When we update this Privacy Policy, we will update the “Last Updated” date displayed at the beginning of the Policy.
Where required by applicable law, we will provide additional notice of material changes through email, an in-product notification or another appropriate method.
We encourage users to review this Policy periodically.
For questions concerning this Privacy Policy, our processing of Personal Data or your privacy rights, contact:
Nook Ventures Private Limited
Room No 112, 2-A/3, S/F Kundan Mansion
Turkman Gate, Darya Ganj
New Delhi, Central Delhi – 110002
India
Email: support@nookventures.com
For privacy requests concerning Customer Data processed on behalf of a CSNook customer, please contact the relevant customer organization where possible.