1. Scope & Privacy Principles
At SREEVIA AI TECHNOLOGIES PRIVATE LIMITED ("SreeVia AI", "we", "us", or "our"), data privacy is treated with the highest standard of engineering rigor. We adhere to the principles of purpose limitation, data minimization, and strong cryptographic storage.
This policy applies to data collected across https://sreeviaai.com, the Rankify AI platform, the Tarang Sand Art Table companion applications, and our enterprise engineering consultations. Our practices comply with India's Digital Personal Data Protection Act, 2023 (DPDP Act), the EU General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA).
2. Information We Collect
We collect personal and technical information strictly to deliver, maintain, and support our products and engineering engagements:
- Account & Contact Data: Name, work email, phone number, company name, billing details, and GST identifiers when booking consultations, signing agreements, or creating a Rankify account.
- Hardware Diagnostics: For the Tarang Sand Art Table, we capture Wi-Fi connection quality, firmware build version, motor temperature metrics, and anonymized pattern load counts.
- Automated Telemetry: IP addresses, browser types, operating systems, and page navigation metrics used to monitor latency, maintain uptime, and defend against malicious attacks.
3. Data Processing & Retention Matrix
The table below outlines our processing purposes, legal bases under the DPDP Act and GDPR, and retention periods:
| Category | Purpose | Legal Basis | Retention |
|---|---|---|---|
| Account Credentials | Authentication & user profile synchronization | Contractual Necessity | Duration of active account + 30 days |
| Hardware Telemetry | Firmware stability & motor safety diagnostics | Legitimate Interest | 90 rolling days (anonymized) |
| Invoices & Billing | Statutory tax compliance & GST records | Legal Obligation | 8 years (statutory tax law) |
| Inquiry Messages | Direct communication and support requests | Consent | 12 months or until revoked |
4. AI Model Disclosures & Non-Ingestion
SreeVia AI explicitly guarantees that customer proprietary codebases, database architectures, enterprise project artifacts, and student test evaluation queries are never used to train public artificial intelligence models.
- We utilize enterprise private API endpoints with zero data retention (ZDR) guarantees.
- Prompts, code snippets, and customer context are ephemeral and cleared following inference completion.
- Data is never pooled into shared foundation model training corpora.
6. Third-Party Sub-Processors
We partner with certified enterprise vendors who adhere to SOC2 and ISO27001 data protection standards:
- Cloud Infrastructure: Amazon Web Services (AWS) & Google Cloud Platform (GCP) for containerized application hosting and encrypted databases.
- Payment Processors: Razorpay and Stripe for PCI-DSS Level 1 compliant payments. We do not store raw credit card numbers.
- Transactional Email: Resend and SendGrid for account notices, verification emails, and invoices.
7. International Data Transfers
Primary database nodes are hosted in Mumbai and Hyderabad, India. Where international clients access our platforms, data transfers occur under Standard Contractual Clauses (SCCs) to maintain equivalent data protection levels.
8. Your Data Subject Rights
Under the DPDP Act 2023, GDPR, and CCPA, you are entitled to:
- Access: Request a complete summary of personal records we hold about you.
- Correction: Update inaccurate or outdated biographical or billing information.
- Erasure: Request the deletion of your account and associated personal data.
- Grievance Redressal: File a formal grievance regarding data processing with our Data Protection Officer.
9. Children's Privacy
Our web platforms and robotics offerings are intended for individuals aged 18 and older. We do not knowingly collect personal information from minors. If you believe a minor has submitted personal data without parental authorization, please contact us at privacy@sreevia.ai and we will remove the record.
10. Data Security Architecture
We implement industry-standard administrative, physical, and technical safeguards:
- Encryption: All data in transit is encrypted using TLS 1.3. Databases and backups utilize AES-256 encryption at rest.
- Access Control: Least-privilege role-based access control (RBAC) and mandatory multi-factor authentication (MFA) for internal engineering systems.
- Vulnerability Management: Automated code scanning, periodic penetration tests, and regular dependency updates.
11. Data Protection Officer Contact
To exercise your privacy rights or contact our designated Data Protection Officer:
Data Protection & Privacy Desk
SREEVIA AI TECHNOLOGIES PRIVATE LIMITED
8-3-230/B/46A & 47, Flat No 401, Plot 45/B, Karthikeya Building, Road No 11, Sravanthi Nagar, Hyderabad, Telangana, India - 500033
Email: privacy@sreevia.ai / legal@sreevia.ai