Privacy Policy

1. Who we are

DigiNest AIoT Solutions Pvt Ltd ("DigiNest", "we", "our", or "us") is a company incorporated under the laws of India, with its registered office in Pune, Maharashtra. We operate the website at diginest.ai and the DigiNest smart-building platform, including the Arva AI agent (collectively, the "Service").

Questions about this Privacy Policy may be directed to: sales@diginest.ai.

2. Information we collect

2.1 Information you provide directly

• Contact and inquiry data name, business email address, company name, phone number, and any message you send via our contact form or by email.
• Account credentials email address and password (hashed) for platform accounts.
• Contract and billing data organisation name, billing address, VAT/GSTIN number, and payment method details (processed through our payment provider; we do not store full card numbers).

2.2 Information we collect automatically

• Usage data pages visited, features used, session duration, click paths, and error logs, collected via server logs and first-party analytics.
• Device and browser data IP address, browser type and version, operating system, referring URL, and device identifiers.
• Cookies and similar technologies see Section 5 below.

2.3 Building sensor data (platform customers only)

When you deploy the DigiNest platform in a building, sensor telemetry (temperature, occupancy counts, energy consumption, air-quality readings, etc.) is transmitted to our cloud infrastructure. This data relates to physical spaces and systems, not to identified individuals, unless your configuration associates occupancy signals with access-control identifiers. In that case, the data-processing addendum in your enterprise agreement governs how that information is handled.

3. How we use your information

We use the information we collect for the following purposes:

• Service delivery provisioning accounts, operating the Arva AI agent, generating energy and sustainability reports, and providing customer support.
• Product improvement analysing aggregated, anonymised usage patterns to improve platform features and model performance.
• Communications responding to enquiries, sending transactional emails (account confirmations, invoices, security alerts), and, where you have opted in, sending product updates and industry insights.
• Legal compliance meeting obligations under Indian law, including the Information Technology Act 2000 and the Digital Personal Data Protection Act 2023 (DPDPA), and responding to lawful requests from authorities.
• Security detecting, preventing, and investigating fraud, abuse, and security incidents.

4. Legal basis for processing

Under the DPDPA 2023, we process personal data on the basis of:

• Consent for marketing communications and optional analytics cookies. You may withdraw consent at any time.
• Contract performance for data necessary to deliver the Service to paying customers.
• Legitimate interests for security monitoring, fraud prevention, and product analytics, balanced against your rights.
• Legal obligation where processing is required by applicable law.

5. Cookies

DigiNest uses the following categories of cookies on diginest.ai:

• Strictly necessary cookies required for the website to function (session management, CSRF protection). These cannot be disabled.
• Analytics cookies first-party cookies that help us understand how visitors use the site. No data is shared with advertising networks. You may opt out via our cookie preference centre.
• Preference cookies remember your UI preferences (e.g. dark/light theme).

We do not use third-party advertising or tracking cookies.

6. Data sharing and disclosure

We do not sell or rent your personal data. We may share data with:

• Service providers cloud infrastructure, payment processors, and transactional email providers that process data on our behalf under data-processing agreements.
• Professional advisors lawyers, auditors, and insurers where required for business operations.
• Law enforcement and regulators when required by law, court order, or to protect the rights, property, or safety of DigiNest, our customers, or the public.
• Business transfers in connection with a merger, acquisition, or sale of assets, with prior notice to affected users.

7. Data retention

We retain personal data for as long as necessary to fulfil the purposes outlined in this Policy, or as required by law. Specifically:

• Account data: retained for the duration of the contract plus 3 years.
• Billing and tax records: 8 years, as required under Indian tax law.
• Contact enquiry data: 2 years from last interaction.
• Server access logs: 90 days rolling.
• Sensor telemetry: as specified in your enterprise agreement (default 24 months).

8. Data security

We implement industry-standard technical and organisational measures to protect your data, including encryption in transit (TLS 1.2+) and at rest (AES-256), role-based access controls, regular security assessments, and incident response procedures. No transmission over the internet is completely secure; we encourage you to use strong passwords and report any suspected security incidents to sales@diginest.ai.

9. Your rights

Under the DPDPA 2023 and other applicable law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data (subject to legal retention obligations).
• Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
• Raise a grievance with us or lodge a complaint with the Data Protection Board of India.

To exercise these rights, email sales@diginest.ai with the subject line "Data Rights Request." We will respond within 30 days.

10. Children's privacy

The Service is directed at business professionals and is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email (to registered account holders) and by posting a notice on this page with a revised "Last updated" date. Continued use of the Service after the effective date constitutes acceptance of the revised policy.

12. Contact

DigiNest AIoT Solutions Pvt Ltd
Pune, Maharashtra, India
Email: sales@diginest.ai