Privacy Policy

1. Introduction and Scope

This Privacy Policy is published by Robo Dynamics India LLP (LLPIN: ACX-4741), a Limited Liability Partnership registered under the Limited Liability Partnership Act, 2008, with its registered office at Unit-1, Mezzanine Floor, 4781, Deputy Ganj, Sadar Bazar, Delhi, India - 110006 (hereinafter referred to as "the Company", "we", "us", or "our").

The Company operates the following platforms and brands:

• RoboDynamics India™ (www.robodynamicsindia.com) — IT Consultancy, SaaS solutions, and corporate services.
• RoboDynamics LABS™ (labs.robodynamicsindia.com) — 3D Printing services, robotics R&D, and e-commerce storefront.

For the purposes of applicable data protection legislation, Robo Dynamics India LLP is the Data Fiduciary (under the DPDP Act 2023) and Data Controller (under the GDPR) of your personal data.

Robo Dynamics India LLP (hereinafter referred to as "Company", "We", "Us", or "Our") is committed to safeguarding your personal data and ensuring strict compliance with applicable statutory data protection laws.

This Privacy Policy applies unconditionally to all users accessing our comprehensive ecosystem, including but not limited to our Corporate Website, SaaS Platforms (ERP/CRM/AI Systems), APIs, integrations, and Hardware Fabrication & Lab Services (collectively referred to as the "Services").

This Policy is drafted in strict compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules), and the Digital Personal Data Protection Act, 2023 (DPDP Act). By utilizing our Services, you provide free, informed, specific, and unambiguous consent for the collection, processing, and storage of your personal data as described herein.

2. Lawful Basis for Processing

We process your personal data strictly upon the following lawful bases:

• Consent: Explicitly provided during user registration and the opt-in for optional features.
• Contractual Necessity: Essential for the delivery of Services, execution of physical hardware fabrication, and processing of billing.
• Legal Obligation: Mandatory retention for tax compliance, statutory auditing, and adherence to law enforcement directives.
• Legitimate Business Interest: Vital for infrastructure security, fraud prevention, cyber-threat mitigation, and aggregate analytics.

3. Categories of Data Collected

We adhere to the principle of data minimization, collecting only the data strictly necessary for Service delivery:

3.1 Identity & Contact Data

• Full Legal Name
• Official Email Address
• Contact Phone Number
• Organization or LLP Affiliation Details

3.2 Financial & Billing Data

• GSTIN Details
• Billing and Shipping Addresses
• Transactional and Invoice History

⚠️ FINANCIAL DATA DISCLAIMER: All digital payments are fully managed and processed entirely via Razorpay and other RBI-compliant, PCI-DSS certified payment gateways. We strictly do NOT store any payment-related information (such as full credit/debit card numbers, CVVs, or sensitive net-banking credentials) on our servers, except for the source of payment and the associated transaction/payment IDs required for accounting and reconciliation.

3.3 Proprietary Project Data

• Computer-Aided Design (CAD) files (e.g., STL, OBJ, STEP)
• Proprietary source code or algorithmic workflows
• Technical documentation and fabrication specifications

3.4 Technical & Usage Data

• IP Addresses and Geolocation metadata
• Device identifiers and browser fingerprinting
• Operating System parameters and crash logs
• Access timestamps and session duration

This technical data is collected automatically via secure analytics engines and infrastructure monitoring systems to ensure platform stability.

4. Purpose of Data Processing

We utilize your data strictly for the following operational imperatives:

• Delivering, configuring, and maintaining SaaS and ERP Services.
• Processing complex financial transactions and issuing compliant tax invoices.
• Providing continuous technical and customer support.
• Preventing fraudulent activities, unauthorized scraping, and cyber threats.
• Improving system performance, latency, and overall reliability.

5. AI Data Usage Policy

Our ecosystem leverages advanced automated systems. Our policy regarding AI data processing is strictly defined:

• AI outputs are generated through highly automated, probabilistic algorithmic systems.
• Only heavily anonymized, aggregated telemetry data may be utilized for internal model training.
• Your proprietary intellectual property (including uploaded CAD designs, source code, and bespoke logic) is strictly isolated and NEVER utilized to train shared or public AI models.
• You acknowledge that AI-generated results may exhibit probabilistic inaccuracies and must be independently verified by human professionals prior to critical implementation.

6. Data Sharing and Disclosure

We enforce a strict ZERO DATA-SELLING policy. Your data is never monetized via third-party data brokers.

Your data is shared exclusively with vetted third parties under strict confidentiality and data protection obligations:

6.1 Infrastructure Providers

Authorized cloud hosting providers (e.g., AWS, Azure) utilized for secure storage and high-availability compute processing.

6.2 Security Providers

Enterprise security platforms (e.g., Cloudflare) utilized for DDoS mitigation, firewall enforcement, and traffic monitoring.

6.3 Payment Gateways

RBI-authorized payment processors utilized for secure financial settlement.

6.4 Legal Authorities

Law enforcement agencies, exclusively when mandated under applicable statutory law or compelled by a valid judicial/legal order.

7. Cross-Border Data Transfers

To ensure global availability and redundancy, your data may be stored or processed on servers located anywhere in the world via trusted, tier-1 cloud providers. In all such cross-border transfers, we ensure:

• Implementation of adequate cryptographic safeguards.
• Execution of rigorous contractual protections with data processors.
• Strict compliance with the data localization and transfer provisions of the DPDP Act, 2023.

8. Data Security Measures

We deploy robust, defense-in-depth security controls to protect your data, including:

• Encryption in Transit: Mandatory enforcement of TLS 1.2/1.3 cryptographic protocols.
• Encrypted Storage: Cryptographic hashing and at-rest encryption for highly sensitive data fields.
• Access Control: Strict Role-Based Access Control (RBAC) ensuring the principle of least privilege.
• Zero-Trust Architecture: Internal network segmentation requiring continuous authentication.
• Threat Detection: Continuous infrastructure monitoring and automated vulnerability scanning.

Notwithstanding our best commercially reasonable efforts, no digital system can be guaranteed to be 100% secure from highly sophisticated state-sponsored or zero-day cyber threats.

9. Cookies and Tracking Technologies

Our platforms deploy cookies, local storage, and web beacons primarily for:

• Cryptographic authentication and session continuity.
• Platform security and CSRF prevention.
• Performance telemetry and UX analytics.

Types of Cookies: We utilize Essential Cookies (technically mandatory for portal access) and Analytics Cookies (optional). You possess the right to disable non-essential cookies via your browser configurations; however, doing so may critically impact the functionality of our secure ERP dashboards.

10. Data Retention Policy

We retain your personal data strictly for the duration necessary to fulfill our operational and legal obligations. As a user, you are legally bound by applicable laws, and we reserve the absolute right to retain your data for as long as we deem necessary for legal, operational, or compliance reasons, or to permanently delete it when we no longer require it:

• Active Accounts: Retained for the uninterrupted duration of your Service usage.
• Financial Records: Retained for up to eight (8) years as mandated by Indian corporate and tax compliance laws (e.g., Companies Act, 2013).
• Telemetry/Logs: Retained for a highly limited duration strictly for forensic security analysis.

Upon the expiry of the applicable retention period, your data is securely cryptographically shredded, anonymized, or permanently deleted.

11. Your Rights Under DPDP Act, 2023

As a recognized "Data Principal" under Indian law, you are legally entitled to the following rights:

• 11.1 Right to Access: To request a comprehensive summary detailing the personal data we hold about you.
• 11.2 Right to Correction: To mandate the immediate update or rectification of inaccurate, incomplete, or outdated data.
• 11.3 Right to Erasure: To request the permanent deletion of your data, strictly subject to overriding statutory retention obligations.
• 11.4 Right to Withdraw Consent: To revoke your consent for data processing at any time, acknowledging that such withdrawal may necessitate the termination of your Services.
• 11.5 Right to Grievance Redressal: To escalate complaints regarding unauthorized data processing directly to our designated Grievance Officer.

12. User Responsibilities

As a User of our Services, you contractually agree to:

• Provide wholly accurate, current, and legally valid data during registration.
• Refrain from uploading illegal, unauthorized, classified, or highly sensitive personal information without explicit authorization.
• Maintain absolute confidentiality regarding your authentication credentials and API keys. We are explicitly not liable for any loss, breach, or compromise of data arising from user negligence or failure to secure credentials.

13. Children's Privacy

Our Services are architected exclusively for enterprise clients, professionals, and adults. They are strictly not intended for individuals below eighteen (18) years of age. We do not knowingly collect or solicit data from minors. If we discover that such data has been inadvertently collected, it will be subjected to immediate, permanent deletion.

14. Breach Notification

In the highly unlikely event of a validated data breach affecting your unencrypted personal data, we are committed to:

• Expeditiously notifying affected Users without undue delay.
• Deploying immediate corrective forensic actions to seal the vulnerability.
• Reporting the incident to the Indian Computer Emergency Response Team (CERT-In) and relevant regulatory authorities as mandated by law.

15. Updates to this Policy

We reserve the right to unilaterally update this Privacy Policy to ensure alignment with evolving statutory mandates or technological architectures. Material changes will be prominently posted on our website, and significant operational updates may be communicated directly via email or your ERP dashboard. Your continued use of the Services post-update constitutes irrevocable acceptance of the revised Policy.

16. Grievance Officer & Contact Information

As explicitly required under Section 5(2) of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and Section 8 of the Digital Personal Data Protection Act, 2023, you may escalate any data privacy concerns directly to our Grievance Officer via the following contact channels.

Applicable Legislation

• India: Information Technology Act, 2000; IT (Reasonable Security Practices) Rules, 2011; Digital Personal Data Protection Act, 2023; Indian Contract Act, 1872.
• European Union: General Data Protection Regulation (GDPR) — applicable to EU/EEA data subjects.
• United States: California Consumer Privacy Act (CCPA) / CPRA — applicable to California residents.
• Brazil: Lei Geral de Proteção de Dados (LGPD) — applicable to Brazilian data subjects.