Privacy Policy

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, make a purchase, subscribe to our newsletter, or contact us for support. This may include your name, email address, phone number, company information, and payment details.

We also automatically collect certain information about your device and usage of our services, including your IP address, browser type, operating system, and pages visited.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send technical notices, updates, and support messages
• Respond to your comments and questions
• Communicate with you about products, services, and events
• Analyze usage patterns and trends

3. Parties We Share Your Information With

We do not sell, trade, or rent your personal information. We share it only with the following categories of recipient, only to the extent each one needs it, and only under a written contract that requires them to protect it and to use it solely on our instructions:

Payments are processed by Stripe, who act as an independent controller of the payment data you submit. Your full card number, expiry and security code are entered directly into the processor's secure fields and are never received or stored on our servers. We retain only the transaction reference, the amount, the currency, the payment status and the last four digits and brand of the card, so that we can issue receipts, provide support and handle refunds and disputes.

• Payment processors (Stripe) — to take payment, issue receipts and handle refunds and disputes.
• Cloud hosting and infrastructure providers (Microsoft Azure and our website hosting provider) — to run our websites, databases and backups.
• AI and model providers (such as Azure OpenAI and OpenAI) — to process the prompts you send to Dewiride AI and return a response.
• Email, forms and communication providers (Microsoft 365) — to send transactional email and receive enquiries.
• Analytics providers (Google Analytics) — to understand aggregate website usage, and only where you have consented to analytics cookies.
• Professional advisers (accountants, auditors and lawyers) — where needed for tax, audit or legal purposes.
• Government authorities, regulators, courts and law enforcement — where we are legally required to disclose, or where disclosure is necessary to establish, exercise or defend legal claims or to protect the rights, safety or property of any person.
• An acquirer or successor entity — if we are ever involved in a merger, acquisition or sale of assets. We would notify you before your information became subject to a different privacy policy.

4. How and When We Disclose Information

Disclosure to the parties listed above happens in these ways only:

Every processor is bound by a written data processing agreement, is prohibited from using your data for its own purposes, and must delete or return it when our contract ends. We do not disclose your personal information for advertising or for sale to data brokers under any circumstances.

• Automated, encrypted transmission — data passes to service providers over authenticated API calls encrypted in transit with TLS 1.2 or higher. This is the method used for payments, hosting, AI processing, transactional email and analytics.
• Access by authorised personnel — a small number of our staff and contractors can access your data through access-controlled administrative tools, only where needed to deliver or support the service.
• On your instruction — for example when you connect a third-party account to Dewiride AI or ask us to share information with someone.
• Formal written disclosure — to advisers, authorities or courts, in response to a valid legal request. We review every request, limit what we disclose to what is legally required, and tell you unless we are prohibited from doing so.

5. Security Practices

We maintain technical and organisational measures designed to protect your personal information against unauthorised access, alteration, disclosure or destruction. These include:

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If you believe your account has been compromised, contact us at support@dewiride.com immediately.

• Encryption in transit — every page and API call is served over HTTPS using TLS 1.2 or higher.
• Encryption at rest — databases, file storage and backups are encrypted on disk, and Dewiride AI conversations are encrypted in storage.
• Card data isolation — full card details are captured by our PCI-DSS compliant payment processor and never traverse or rest on our systems.
• Access control — role-based, least-privilege access, multi-factor authentication on all administrative and cloud accounts, and secrets held in a managed key vault rather than in code.
• Network and platform hardening — managed cloud infrastructure with vendor security patching, firewalling and activity logging.
• Monitoring, logging and backups — access and system logs are retained for review, and backups are taken regularly and tested.
• People and process — confidentiality obligations for staff and contractors, periodic access reviews, and vendor due diligence before we share data with a new processor.
• Incident response — we investigate suspected breaches immediately and, where a breach is likely to affect you, notify you and the relevant authority without undue delay and in line with applicable law.

6. Support Conversations

When you ask us for help — from the Help Center inside Dewiride AI, or from the contact form on this website — we open a support conversation and keep it until it is deleted under section 10. It is read and answered by people. Nothing you write to support is answered automatically.

• What we hold: your name and email address, the subject you gave, every message on the conversation, any files you attach, and the rating and comment you leave afterwards.
• What the app tells us about your session: the build you were running, the language and time zone you were using, your window size, the page you were on, and your browser's user-agent string. The Help Center shows you exactly what is attached before you send it. The contact form collects none of this beyond your browser's user-agent string.
• How it is protected: message bodies, our internal notes, attached file names and the session details above are encrypted in our database. The subject line and your email address are not, so that the support queue can be searched and sorted.
• Who can read it: our support team, while they are handling your conversation. It is not shown to other customers and it is not shared outside the recipients listed in section 3.
• Where AI is involved: our support team can ask an AI assistant to summarise a conversation or draft a reply, which sends the messages on that conversation to the model provider named in section 3. A draft is only ever a suggestion — a person edits it and sends it. Our internal notes are never sent, and nothing reaches you without a person choosing to send it.

If you start a conversation without an account, we email you a private link to it. That link expires, is reissued each time we reply, and stops working once the conversation is closed. Treat it like a password: anyone holding it can read and reply to that conversation.

7. Your Rights

You have the right to:

• Access and update your personal information
• Request deletion of your personal information
• Object to or restrict certain processing of your information
• Withdraw consent where processing is based on consent
• Data portability

8. Cookies and Tracking

We use cookies and similar tracking technologies to collect information about your browsing activities. You can control cookies through your browser settings, but disabling them may affect your experience on our website.

9. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your personal information in accordance with applicable data protection laws.

10. Data Retention

We keep personal information only for as long as we need it. Account and Dewiride AI conversation data is kept while your account is open and deleted within 90 days of closure, unless you ask us to delete it sooner. Order, invoice and payment records are kept for 8 years, as required by Indian tax and company law. Analytics data is retained in aggregated form only.

Support conversations follow whoever opened them. One opened from your account — with its messages, files and session details — is deleted with your account, on the same timetable. One opened without an account, from the contact form, is deleted 180 days after it is closed. Ratings and product feedback you leave are kept after your account goes, with you no longer attached to them, so that the aggregate scores they feed stay correct.

11. Children's Privacy

Our products are not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact us and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on our website and updating the "Last updated" date.

13. Contact Us

If you have any questions about this Privacy Policy, or wish to exercise any of your rights, please contact us — by email, or from the contact form on this website, which opens a conversation with the same team. We respond within 1 business day. If you are not satisfied with our response, you may escalate to our grievance officer, who will acknowledge within 48 hours and resolve within 15 days.

Dewiride Technologies Private Limited

Privacy & data requests: support@dewiride.com

Grievance officer: grievance@dewiride.com

Phone: +91 8955643412 (Monday to Friday, 9:00 AM – 6:00 PM IST)

Address: C/o Jagdish Kumawat, Village Tena, Tehsil Shergarh, Jodhpur – 342028, Rajasthan, India