1. Introduction

At ZautoAI, we are committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. This Privacy Policy explains how we collect, use, store, and share your personal information when you use our platforms, including Canopus (API Platform), Spica (Unified Data Platform), Regulus (Intelligent Document Processing), Zaurak (Model Playground), and Alhena (IDP-Healthcare). By accessing or using our services, you agree to the collection and use of your information in accordance with this policy. This Privacy Policy is designed to comply with the Information Technology Act, 2000, and related rules, ensuring that we meet the standards required under Indian law.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information when you register, interact with our services, or communicate with us:

• Name and Contact Information: Such as your full name, email address, phone number, and postal address.
• Payment Information: Including credit/debit card numbers, billing details, and payment processing information via Stripe.
• Account Credentials: Passwords and other information used for authentication and account access.

2.2 Sensitive Personal Data or Information (SPDI)

In compliance with Indian law, we recognize the importance of sensitive personal data or information (SPDI), which may include:

• Financial Information: Details such as bank account numbers, credit card numbers, and other payment-related information processed through Stripe.
• Health Information: Health records or medical information processed through our healthcare-related platforms.
• Authentication Information: Biometric data, passwords, or other authentication information.

2.3 Usage Data

We collect information about how our services are accessed and used, including:

• Technical Data: Such as IP addresses, browser type, device information, and operating system.
• Interaction Data: Details of your interactions with our services, including pages visited, features used, and time spent on our platforms.

2.4 Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to enhance your experience on our platforms. Cookies help us understand how you interact with our services, allowing us to improve functionality, personalize content, and provide targeted advertisements.

3. How We Use Your Information

3.1 Service Delivery

We use your personal and sensitive personal data to provide, operate, and maintain our services, ensuring a seamless and personalized user experience.

3.2 Account Management

Your information is used to manage your account, verify your identity, process transactions through Stripe, and respond to your inquiries or requests.

3.3 Service Improvement

We analyze usage data to understand how our services are being used and to identify areas for improvement. This helps us enhance the performance, functionality, and security of our platforms.

3.4 Communication

With your consent, we may use your contact information to send you newsletters, promotional materials, and updates about our services. You can opt out of these communications at any time.

3.5 Legal Compliance

We process your data to comply with legal obligations under Indian law, including responding to lawful requests by public authorities, preventing fraud, and ensuring the security of our platforms.

4. Data Storage and Security

4.1 Data Storage Locations

Personal data, including SPDI, is stored on servers located within India or, where necessary, abroad. All data storage practices are in compliance with applicable legal requirements.

4.2 Data Security Measures

We implement a comprehensive range of security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These measures include encryption, access controls, and regular security assessments. Our security practices align with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

4.3 Data Retention

Your personal information is retained only as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations. We periodically review our data retention policies to ensure that we do not retain data longer than required.

5. Data Sharing and Disclosure

5.1 Third-Party Service Providers

We may share your personal data with trusted third-party service providers who assist us in operating our platforms, conducting our business, and delivering our services. This includes sharing payment information with Stripe for payment processing. These service providers are contractually obligated to maintain the confidentiality of your data and to use it solely for the purposes specified by ZautoAI.

5.2 Legal Obligations and Enforcement

We may disclose your personal information if required to do so by law or in response to valid requests by public authorities, including to meet national security or law enforcement requirements.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity as part of the transaction. We will notify you of any such transfer and ensure that your data remains protected.

6. User Rights and Control

6.1 Access and Correction

You have the right to access the personal data we hold about you and to request corrections if any information is inaccurate or incomplete. We encourage you to keep your account information up to date.

6.2 Withdrawal of Consent

You may withdraw your consent to the processing of your personal data at any time, subject to legal and contractual restrictions. Withdrawal of consent may affect our ability to provide certain services to you.

6.3 Objection to Processing

You have the right to object to the processing of your personal data for specific purposes, including direct marketing. Upon receiving an objection, we will cease processing your data for that purpose unless we have a compelling legitimate ground for the processing.

To exercise any of these rights, please contact us at support@zautoai.com.

7. International Data Transfers

ZautoAI operates globally, and your personal data may be transferred to and processed in countries outside India. We take appropriate steps to ensure that your data is protected in accordance with this Privacy Policy and applicable Indian laws, including the use of standard contractual clauses where necessary.

8. Children’s Privacy

Our services are not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children under 18. If we become aware that we have inadvertently collected personal data from a child under 18, we will take immediate steps to delete such data from our systems.

9. Grievance Redressal

9.1 Grievance Officer

In compliance with Indian law, ZautoAI has appointed a Grievance Officer to address any concerns or grievances regarding the processing of personal data. The Grievance Officer is responsible for ensuring that complaints are handled in a timely and effective manner.

9.2 Contact Information

If you have any concerns, complaints, or requests related to this Privacy Policy or the handling of your personal data, please contact our Grievance Officer at grievance@zautoai.com. We will acknowledge your complaint within 24 hours and aim to resolve it within 30 days, as required by law.

10. Changes to This Privacy Policy

ZautoAI may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. Any significant changes will be communicated to you via email or through notices on our platforms. We encourage you to review this policy periodically to stay informed about how we are protecting your data.

11. Contact Information

For any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us at support@zautoai.com. We are committed to addressing any concerns and ensuring that your privacy is respected and protected.