Privacy Policy (DPDP Act 2023 Compliant)

1Information We Collect

We may collect the following categories of data:

• Personal Information: Name, Email, Phone number, Company name, Billing information, and Communication details.
• Account Information for SaaS: Username, Login credentials, User roles, Organization information, and Subscription details.
• Transaction Information: Order ID, Invoice details, Payment status, and Billing logs. Payment authentication info (CVV, UPI PIN, passwords) is never stored by Aveda Technologies.

2Technical & System Information

We automatically collect technical data such as IP address, browser type, device information, operating system, usage logs, referral URLs, and cookies to ensure security and optimize platform performance.

3How We Use Information

We process personal data to:

• Deliver software development, WaaS, and SaaS services.
• Manage customer accounts, billing, and subscription renewals.
• Provide customer support, troubleshooting, and platform security.
• Detect fraud, unauthorized usage, and infrastructure security risks.
• Comply with Indian legal obligations including the Digital Personal Data Protection Act, 2023 (DPDP Act).

4SaaS Data & Data Fiduciary Responsibilities

When customers use Aveda Technologies SaaS products (CRM, HRMS, Marketing Automation), they upload data into the platform. Customers remain Data Fiduciaries responsible for ensuring proper consent and legal authority to collect data.

Aveda Technologies acts as a Data Processor to maintain, secure, and support the SaaS platform.

5Third-Party Processors & Payment Gateways

We work with trusted third-party providers for payments (Razorpay), cloud infrastructure (AWS/Google Cloud), AI APIs, email, and WhatsApp communications.

Payment processing is governed by Razorpay Privacy Policy and compliance frameworks for secure transaction handling.

6Cookies & Analytics

We use essential cookies for authentication and security, preference cookies, and analytics cookies to evaluate traffic and improve platform experience.

7Data Security & Safeguards

We implement reasonable technical and organizational safeguards including encryption, access controls, logging, and security monitoring to protect personal information.

8Data Retention & Rights Under DPDP Act 2023

Under the DPDP Act 2023, individuals have rights regarding their personal data, including data access, correction, erasure, consent withdrawal, and grievance redressal.

Requests may be sent to privacy@avedatechnologies.com.

9Data Sharing & Regulatory Compliance

We do not sell personal data. Information is only shared with authorized technology providers, payment gateways, legal advisors, or regulatory authorities when legally required.