Privacy Policy

This policy is issued by Dewiride Technologies Private Limited and covers every website and product we operate: dewiride.com (our corporate site and consulting services), dewiride.ai (the Dewiride AI assistant) and shop.dewiride.com (our digital storefront). We are the data controller for all of them.

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, make a purchase, subscribe to our newsletter, or contact us for support. This may include your name, email address, phone number, company information, and payment details.

We also automatically collect certain information about your device and usage of our services, including your IP address, browser type, operating system, and pages visited.

2. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our services
Process transactions and send related information
Send technical notices, updates, and support messages
Respond to your comments and questions
Communicate with you about products, services, and events
Analyze usage patterns and trends

3. Parties We Share Your Information With

We do not sell, trade, or rent your personal information. We share it only with the following categories of recipient, only to the extent each one needs it, and only under a written contract that requires them to protect it and to use it solely on our instructions:

Payment processors (Stripe) — to take payment, issue receipts and handle refunds and disputes.
Cloud hosting and infrastructure providers (Microsoft Azure and our website hosting provider) — to run our websites, databases and backups.
AI and model providers (such as Azure OpenAI and OpenAI) — to process the prompts you send to Dewiride AI and return a response.
Email, forms and communication providers (Microsoft 365) — to send transactional email and receive enquiries.
Analytics providers (Google Analytics) — to understand aggregate website usage, and only where you have consented to analytics cookies.
Professional advisers (accountants, auditors and lawyers) — where needed for tax, audit or legal purposes.
Government authorities, regulators, courts and law enforcement — where we are legally required to disclose, or where disclosure is necessary to establish, exercise or defend legal claims or to protect the rights, safety or property of any person.
An acquirer or successor entity — if we are ever involved in a merger, acquisition or sale of assets. We would notify you before your information became subject to a different privacy policy.

Payments are processed by Stripe, who act as an independent controller of the payment data you submit. Your full card number, expiry and security code are entered directly into the processor's secure fields and are never received or stored on our servers. We retain only the transaction reference, the amount, the currency, the payment status and the last four digits and brand of the card, so that we can issue receipts, provide support and handle refunds and disputes.

4. How and When We Disclose Information

Disclosure to the parties listed above happens in these ways only:

Automated, encrypted transmission — data passes to service providers over authenticated API calls encrypted in transit with TLS 1.2 or higher. This is the method used for payments, hosting, AI processing, transactional email and analytics.
Access by authorised personnel — a small number of our staff and contractors can access your data through access-controlled administrative tools, only where needed to deliver or support the service.
On your instruction — for example when you connect a third-party account to Dewiride AI or ask us to share information with someone.
Formal written disclosure — to advisers, authorities or courts, in response to a valid legal request. We review every request, limit what we disclose to what is legally required, and tell you unless we are prohibited from doing so.

Every processor is bound by a written data processing agreement, is prohibited from using your data for its own purposes, and must delete or return it when our contract ends. We do not disclose your personal information for advertising or for sale to data brokers under any circumstances.

5. Security Practices

We maintain technical and organisational measures designed to protect your personal information against unauthorised access, alteration, disclosure or destruction. These include:

Encryption in transit — every page and API call is served over HTTPS using TLS 1.2 or higher.
Encryption at rest — databases, file storage and backups are encrypted on disk, and Dewiride AI conversations are encrypted in storage.
Card data isolation — full card details are captured by our PCI-DSS compliant payment processor and never traverse or rest on our systems.
Access control — role-based, least-privilege access, multi-factor authentication on all administrative and cloud accounts, and secrets held in a managed key vault rather than in code.
Network and platform hardening — managed cloud infrastructure with vendor security patching, firewalling and activity logging.
Monitoring, logging and backups — access and system logs are retained for review, and backups are taken regularly and tested.
People and process — confidentiality obligations for staff and contractors, periodic access reviews, and vendor due diligence before we share data with a new processor.
Incident response — we investigate suspected breaches immediately and, where a breach is likely to affect you, notify you and the relevant authority without undue delay and in line with applicable law.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If you believe your account has been compromised, contact us at support@dewiride.com immediately.

6. Your Rights

You have the right to:

Access and update your personal information
Request deletion of your personal information
Object to or restrict certain processing of your information
Withdraw consent where processing is based on consent
Data portability

7. Cookies and Tracking

We use cookies and similar tracking technologies to collect information about your browsing activities. You can control cookies through your browser settings, but disabling them may affect your experience on our website.

For website analytics we use two tools, both of which load only after you accept analytics cookies in our cookie banner:

Google Analytics — a third-party service operated by Google, used to understand aggregate website usage.
Dewiride Analytics — our own analytics software, self-hosted by us at analytics.dewiride.com. It records aggregate page views and visit data, and that data stays on our infrastructure rather than being shared with a third-party analytics provider.

If you decline analytics cookies, neither tool is loaded and neither receives any data about your visit. You can change your choice at any time using the cookie banner. See our Cookie Policy for more detail.

8. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your personal information in accordance with applicable data protection laws.

9. Data Retention

We keep personal information only for as long as we need it. Account and Dewiride AI conversation data is kept while your account is open and deleted within 90 days of closure, unless you ask us to delete it sooner. Order, invoice and payment records are kept for 8 years, as required by Indian tax and company law. Support correspondence is kept for 3 years. Analytics data is retained in aggregated form only.

10. Children's Privacy

Our products are not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on our website and updating the "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy, or wish to exercise any of your rights, please contact us. We respond within 1 business day. If you are not satisfied with our response, you may escalate to our grievance officer, who will acknowledge within 48 hours and resolve within 15 days.

Dewiride Technologies Private Limited

Privacy & data requests: support@dewiride.com

Grievance officer: grievance@dewiride.com

Phone: +91 8955643412 (Monday to Friday, 9:00 AM – 6:00 PM IST)

Address: C/o Jagdish Kumawat, Village Tena, Tehsil Shergarh, Jodhpur – 342028, Rajasthan, India