Privacy Policy

This Privacy Policy (“Policy”) applies to the access and use of the website, platforms, and services, operated by NRV DesignX Private Limited, (“DesignX”, “we”, “us” or “our”).

We are committed to protecting the privacy and security of the personal data of our individual users and enterprise customers (“you” or “your”).

This Policy describes the types of information that are collected and recorded by us, the purposes for which such information is processed, including through its services, products and platforms, and explains how such information is used, shared, stored, and protected, in compliance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000 (“IT Act”), applicable rules, and other applicable laws.

When you access or use our website, applications, products, or related services (collectively, the “Services”), or otherwise provide us with your personal data, you acknowledge that you have read and understood this, Policy.

This Policy applies to all individuals who access or use the Services or otherwise interact with us, regardless of whether an account is created, submit information through our website or applications, or otherwise interact with the Services. It governs the collection, use, and processing of data by us in connection with the Services whether acting as a data fiduciary, where it determines the purpose and means of processing, or as a data processor, where it processes personal data on behalf of an enterprise customer acting as a data fiduciary as applicable under the DPDP Act.

This Policy applies only to information processed by us in connection with the Services and does not apply to personal data collected or processed by third-party applications, or systems.

This Policy does not apply to information collected offline unless explicitly agreed in writing.

Where required by applicable law, we obtain your consent through affirmative mechanisms at the time of collection or processing of your personal data for identified and lawful purposes. Where processing is based on consent, you may withdraw such consent by sending a request to us at support@dfos.ai
‍
Upon withdrawal, we will stop processing the relevant personal data, except where retention is required by law. Processing already undertaken will not be affected, and certain services may become unavailable.

We may collect personal data that you voluntarily provide when you contact us, request information, register for an account, or otherwise interact with us. This may include your name, email address, phone number, company details, the contents of your communications, and any other information you choose to provide.

When you access our Services, we may collect and process data, to the extent applicable to the Services being used, personal data (such as location information, only where expressly enabled and consented to), industrial and operational data, device telemetry, system logs, and metadata generated through IoT devices, factory systems, mobile applications, and platform usage.

We use the information we collect solely for legitimate, specified, and lawful purposes, including to:

• Provide, operate, secure, and maintain our Services
• Improve, personalize, optimize, and expand our Services
• Understand and analyze how users use our Services to optimize performance, reliability, and user experience,
• Communicate with the users, either directly or through one of our partners, including for customer support, service-related updates and other information relating to Services and for marketing and promotional purposes
• Send you transactional, operational, or service-related communications
• Detect, prevent and address fraud, misuse and security incidents.

Data generated within customer environments, including factory production, machine, and operational data, remains the responsibility of the relevant enterprise customer. We process such data only on behalf of the customer and do not use such data for any independent or commercial purposes. We may use anonymized or aggregated information that does not identify any customer or individual to maintain, improve, and enhance its products and/or Services, in accordance with applicable law.

With your explicit permission, we may collect and process information about your actual location only where such information is necessary for the relevant Service. We may use various technologies to determine location, including IP addresses, GPS, and other sensors that may provide information on nearby devices, Wi-Fi access points, and cell towers.

If you choose to disable location services or withdraw consent, you may not be able to use certain safety or location-dependent features of our Services that rely on such location information. We do not access, use, disclose, or otherwise process such data for any independent or commercial purposes.

Location data is collected only with explicit, informed user consent, used strictly for clearly defined and limited purposes such as safety and security, retained for a limited duration necessary to achieve such purposes, and accessed solely by authorized personnel.

When you access or use the Services, we may automatically collect certain technical and usage information through server logs and similar technologies (“Log Files”). The information collected by Log Files include internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks.

The purpose of the information is to monitor performance, ensure system security, detect and prevent misuse, or unauthorized access.

Cookies are files with a small amount of data that is commonly used as an anonymous unique identifier. These are sent to your browser from the website that you visit and are stored on your computer's hard drive. Our website uses these cookies to collect information and to improve our support website functionality, enhance security, and analyze usage patterns. You may manage or disable cookies through your browser settings.

We may use third-party service providers, such as analytics or hosting partners, to support the operation and performance of our Services. These providers may process limited technical information such as IP address or usage data on our behalf for purposes including security, performance monitoring, and usage analysis. Their processing is governed by their respective privacy policies and applicable contractual and data protection obligations.

We retain personal data only for as long as is reasonably necessary to fulfill the purposes for which such data is collected and processed, including to provide and support the Services, comply with applicable legal, regulatory, or contractual obligations, resolve disputes, and enforce agreements.

Retention periods may vary depending on the nature of the data, the Services involved, applicable legal requirements, and contractual arrangements with the enterprise customers. Upon expiry of the applicable retention period, data is securely deleted or anonymized, unless retention is required or permitted by law.

We implement commercially reasonable and appropriate technical and organizational security measures, including, where appropriate, encryption, access controls, secure APIs, monitoring, logging, and third-party security assessments, designed to protect personal data against unauthorized access, disclosure, alteration, loss, or misuse.

While we maintain security practices aligned with industry standards and applicable legal requirements, no method of transmission or storage is completely secure, and we do not guarantee absolute security.

This Policy does not apply to third-party websites, applications, or services that may be linked to or accessible from our Services. We encourage you to review the privacy policies of such third parties before providing any information to them.

We may engage third-party service providers, such as cloud hosting, analytics, communication, and IoT infrastructure vendors, to support the operation of our Services. These providers process data on our behalf and are subject to appropriate confidentiality, contractual and data protection obligations in accordance with applicable law.

You may raise privacy-related queries, complaints, or requests for exercising your rights by contacting the designated grievance officer at support@dfos.ai

We will address such requests in accordance with applicable law, subject to verification of identity where required.

In the event of a personal data breach, we will notify the affected users and, where required, relevant authorities within the timelines and in the manner prescribed in accordance with applicable data protection laws.

We do not knowingly collect any information from children under the age of 18 years or persons with disabilities. If you are a parent or guardian and you are aware that your child/ the person with disabilities has provided us with information, you are requested to contact us so that we may take necessary actions for deletion of the information.

This Policy is effective from 11/02/2026 and it supersedes all existing polices on the subject matter. We may periodically update our privacy practices to ensure better protection of your information. We will notify you of any material changes to this Policy as required by law. We will also post an updated copy of the Policy on the Services. Please check our site periodically for updates and the updated version of the Policy will be effective immediately upon posting.

Any claim relating to the Policy shall be governed by the laws of India and shall be subject to the exclusive jurisdiction of Delhi, India.

If you have any questions or suggestions about our Policy, do not hesitate to contact us at Support@dfos.ai