Privacy Policy

1. Legal Framework & Compliance

This Privacy Policy is published in accordance with the provisions of the Indian **Information Technology Act, 2000**, the **Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011**, and the **Digital Personal Data Protection (DPDP) Act, 2023**.

2. Data We Collect

We collect data to provide, maintain, and optimize our vending machine setup and servicing operations. This includes:

• Identity & Contact Information: Name, business/organization name, physical installation address (offices, hostels, hospitals, etc.), email address, and phone numbers.
• Site Evaluation Data: Information regarding your premises (space size, power access, security conditions) shared during site assessment requests.
• Usage Data: Anonymized telemetry data from user interfaces or cashless payment logs on our deployed machines to maintain stock tracking and minimize machine downtime.

3. Purpose and Use of Data

Your personal and organizational data is processed under the lawful basis of **Consent** and **Contractual Necessity** for the following purposes:

• To schedule and fulfill free vending machine installations at your target location.
• To coordinate inventory tracking, regular refilling routes, and technical machine servicing.
• To answer customer inquiries, troubleshoot digital payment errors, or handle support calls.
• To comply with regulatory tax liabilities and statutory financial rules in India.

4. Data Sharing and Third-Party Disclosures

We do not sell, rent, or trade your personal data. We only share data with verified third parties under strict confidentiality protocols in the following instances:

• Payment Gateways: To process UPI, credit/debit card transactions securely at our digital vending terminal hubs.
• Logistics & Fleet Personnel: To coordinate physical delivery, maintenance technicians, and routine product refilling operations.
• Legal Enforcements: When mandated by government authorities under Indian law to comply with judicial proceedings or investigation requests.

5. Data Security & Storage Boundaries

We enforce industry-standard security infrastructure (including secure server hosting and encrypted database channels) to protect your corporate and personal records. In compliance with data localization directives under Indian law, all personal data collected from our Bangalore and Indian service footprints is processed and stored on secure cloud databases located **strictly within the geographic boundaries of India**.

6. Your Rights Under the DPDP Act 2023

As a data principal in India, you hold clear entitlements regarding your records, which you may assert by reaching out to our team:

• Right to Access & Review: Request a comprehensive copy of the personal datasets we maintain on file.
• Right to Correction & Erasure: Rectify outdated records or request permanent deletion of your profiling data once your vending lease or rental agreement has formally closed.
• Right to Withdraw Consent: Revoke authorization for marketing or secondary operations at any time.