DIGITAL PERSONAL DATA PROTECTION ACT, 2023 (DPDP)

Privacy & Data Protection Notice

Effective Date: January 1, 2026 • Version 2.0 • Section 5 & 6 DPDP Notice

Notice to Data Principals (Section 5 & 6, DPDP Act 2023)

VenopAI Technologies Pvt. Ltd. operates as a Data Fiduciary under the Digital Personal Data Protection Act, 2023. This notice informs you of the personal data we collect, the specified purposes for which it is processed, how you can exercise your statutory rights, and our designated grievance redressal mechanism.

1. Categories of Personal Data Collected

We collect and process the following limited personal data directly from you:

Identity Data: Full name, corporate organization name (if applicable).
Contact Data: Verified email address, mobile phone number, billing and shipping delivery addresses.
Commercial & Tax Data: GSTIN (for B2B tax invoice generation), transaction history, and purchase records.
Technical Diagnostics: IP address, device browser metadata, and session tokens essential for secure authentication.
Note on Financial Data: We do NOT store debit/credit card numbers or UPI PINs. All financial transactions are tokenized and processed via RBI-licensed payment aggregators (Razorpay).

2. Absolute Confidentiality of Technical Engineering Files

Gerber archives, IPC-2581 layout packages, Bill of Materials (BOM), 3D CAD models, firmware binaries, and schematics uploaded to VenopAI are classified as Strictly Confidential Intellectual Property.

All engineering assets are encrypted in transit via TLS 1.3 and at rest with 256-bit AES encryption.
Assets are accessed exclusively by verified production engineers to perform DFM checks and execute SMT fabrication.
We do not train public AI models on customer proprietary CAD files or source code.

3. Specified Purposes for Data Processing

Fulfilling customer orders, generating GST tax invoices, and processing delivery through our logistics partner (Shiprocket).
Evaluating engineering feasibility, generating fabrication quotes, and coordinating technical consultations.
Sending critical transactional updates (order confirmation, courier tracking, quote approval notices).
Sending optional engineering product advisories only if you have explicitly given affirmative opt-in consent.

4. Statutory Rights of the Data Principal

Under the DPDP Act 2023, you hold the following non-derogable rights:

Right to Access Summary:

Request a summary of your personal data being processed and third parties with whom it has been shared.

Right to Correction & Erasure:

Correct inaccurate data, complete incomplete records, or request deletion of personal and design data.

Right to Withdraw Consent:

Withdraw consent for non-essential communications at any time directly in your account settings.

Right to Nominate:

Nominate an individual to exercise your data rights in the event of death or incapacity.

5. Data Protection Officer (DPO) & Redressal Mechanism

If you have questions regarding data privacy or wish to exercise any statutory right:

Designated Data Protection Officer (DPO): Rajesh Kumar, Compliance Lead

Email: dpo@venopai.com / grievance@venopai.com

Postal Address: VenopAI Technologies Pvt. Ltd., 100 Feet Road, HAL 2nd Stage, Indiranagar, Bengaluru, Karnataka 560038, India

You also retain the statutory right to file a complaint with the Data Protection Board of India (DPBI) if our Grievance Redressal Officer does not resolve your query within thirty (30) days.