Privacy Policy

Effective Date: October 1, 2024

This Privacy Policy outlines how Lumiotech Private Limited ("Company", "we", "us", "our") collects, uses, stores, and protects ("processes") your personal information ("data").

By using our services, you agree to the collection and use of information in accordance with this policy. We will not use or share your information with anyone except as described in this Privacy Policy.

Information Collection and Use

The types of information we may collect include:

• "Personal Data": Information that can identify you personally, such as name and email
• "Usage Data": Information about how you use our services
• "Cookies": Small pieces of data stored on your device
• "Log Data": Information automatically collected when using our services

1. Definitions

For the purpose of this Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person
• "Sensitive Personal Data" includes passwords, financial information, biometric data, physical/physiological/mental health condition, medical records, and other data as defined under the IT Rules, 2011
• "Corporate Data" means any information related to business operations, including but not limited to financial records, operational data, and proprietary information
• "User" refers to any individual or entity accessing or using our Services

2. Information We Collect

2.1 Platform-Specific Information

Depending on the platform you use, we collect:

2.2 Automatically Collected Information

Our systems automatically collect:

• Device information (IP address, browser type, operating system)
• Usage statistics and patterns
• Performance metrics
• Error logs and crash reports
• Authentication data

3. Legal Basis for Processing

We process your information based on:

• Explicit user consent
• Contractual obligations
• Legal compliance requirements
• Legitimate business interests
• Public interest (for defense and law enforcement platforms)

4. Use of Information

We use collected information for:

• Service improvement and optimization
• Security and fraud prevention
• Regulatory compliance
• Customer support

5. Data Storage and Security

We implement comprehensive security measures including:

• Data encryption (in transit and at rest)
• Access controls and authentication
• Regular security audits
• Intrusion detection systems
• Disaster recovery procedures

All data is stored on servers located in India in compliance with data localization requirements. For lumioSentry, additional security measures equivalent to IL6 standards are implemented.

6. Data Sharing and Disclosure

We may share information with:

• Government authorities and regulators (RBI, SEBI, etc.)
• Law enforcement agencies (upon valid request)
• Auditors and professional advisors
• Service providers (with appropriate safeguards)
• Partner organizations (with user consent)

7. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to improve your experience and collect information about how you use our site.

7.1 What Are Cookies?

Cookies are small text files that are stored on your device when you visit a website. They are widely used to make websites work more efficiently and provide information to the owners of the site.

7.2 Types of Cookies We Use

7.3 Managing Cookies

You can manage your cookie preferences through our Cookie Consent Banner or by adjusting your browser settings. Most web browsers allow you to control cookies through their settings preferences. However, restricting cookies may impact your experience and limit some functionality.

7.4 Third-Party Cookies

Some cookies are placed by third parties on our behalf. These third-party services may set cookies on your device. Please review their respective privacy policies for more information about their data practices.

8. Data Protection Rights

Users have the right to:

• Access their personal data
• Correct inaccurate information
• Request data portability
• Withdraw consent
• Lodge complaints with authorities
• Request data deletion (subject to legal requirements)

8. Data Retention

We retain data for:

• Active accounts: Duration of service usage
• Financial records: 8 years (as per Companies Act)
• Security logs: 5 years
• Analytics data: 3 years
• Backup data: 1 year

9. International Data Transfers

While our primary operations and data storage are in India, any international data transfers are conducted with appropriate safeguards and in compliance with applicable laws.

10. Children's Privacy

Our services are not intended for users under 18 years of age. We do not knowingly collect or process data from children.

11. Updates to Privacy Policy

We may update this Policy periodically. Users will be notified of significant changes through our platforms or email. Continued use of our Services after changes constitutes acceptance of the updated Policy.

12. Grievance Redressal

For privacy concerns or to exercise your rights, contact our Grievance Officer:

We will acknowledge your request within 48 hours and resolve it within 30 days.

In certain circumstances, we won't be able to fulfill your data deletion request, such as if the information is required to comply with legal obligations.