Running Semantic Kernel or AutoGen in production?Plan your move to Microsoft Agent Framework

Privacy Policy

Last updated: October 2026

This policy is issued by Dewiride Technologies Private Limited and covers dewiride.com (our corporate site and consulting services), dewiride.ai (the Dewiride AI assistant), shop.dewiride.com (our digital storefront) and analytics.dewiride.com (Dewiride Analytics, our web analytics service). We are the data controller for all of them, with one exception: for the traffic data Dewiride Analytics collects from its customers' websites, the customer is the controller and we process that data on their instructions.

This policy is the overview for all of them. Each product also publishes its own privacy policy (Dewiride Analytics, Dewiride AI and Dewiride Shop), which describes its data in more detail and takes precedence for that product where the two differ. Section 7 explains how we use Dewiride Analytics on this site.

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, make a purchase, subscribe to our newsletter, or contact us for support. This may include your name, email address, phone number, company information, and payment details.

We also automatically collect certain information about your device and usage of our services, including your IP address, browser type, operating system, and pages visited.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Process transactions and send related information
  • Send technical notices, updates, and support messages
  • Respond to your comments and questions
  • Communicate with you about products, services, and events
  • Analyze usage patterns and trends

3. Parties We Share Your Information With

We do not sell, trade, or rent your personal information. We share it only with the following categories of recipient, and only to the extent each one needs it. Our service providers act under written contracts and only on our instructions; payment processors also act as independent controllers for payment data, as explained below; advisers, authorities and an acquirer receive it only in the circumstances listed:

  • Payment processors (Stripe, and Razorpay for some payments on shop.dewiride.com) — to take payment, issue receipts and handle refunds and disputes.
  • Cloud hosting and infrastructure providers (Microsoft Azure and our website hosting provider) — to run our websites, databases and backups.
  • AI and model providers (such as Azure OpenAI and OpenAI) — to process the prompts you send to Dewiride AI and return a response.
  • Speech providers (Microsoft Azure AI Speech) — to turn what you say to Dewiride AI into text, and its replies into a voice.
  • Push notification delivery (Google Firebase Cloud Messaging) — to deliver notifications to the Dewiride AI mobile app.
  • Email, forms and communication providers (Microsoft 365) — to send transactional email and receive enquiries.
  • Analytics providers (Google Analytics) — to understand aggregate website usage. On dewiride.com it loads only after you consent to analytics cookies, and on dewiride.ai it collects nothing until you consent. On shop.dewiride.com it asks for consent in the European Economic Area, the UK and Switzerland; elsewhere it measures from the first page you open, with Google signals switched on, which lets Google link visits to signed-in Google accounts for its reporting and advertising features.
  • Advertising measurement (Google) — on the marketing pages of analytics.dewiride.com, Google's tag runs with every kind of storage switched off: it sets no cookie and tells Google, without any identifier, that a page was opened, so that we can tell whether the advertising we buy works. It never receives anything about visitors to our customers' websites.
  • Professional advisers (accountants, auditors and lawyers) — where needed for tax, audit or legal purposes.
  • Government authorities, regulators, courts and law enforcement — where we are legally required to disclose, or where disclosure is necessary to establish, exercise or defend legal claims or to protect the rights, safety or property of any person.
  • An acquirer or successor entity — if we are ever involved in a merger, acquisition or sale of assets. We would notify you before your information became subject to a different privacy policy.

Dewiride Analytics lists the other providers it uses (its hosting and email providers, and the DB-IP and iptoasn.com reference data, to which nothing about visitors is sent) in its own privacy policy.

Payments are processed by Stripe, and some payments on shop.dewiride.com by Razorpay. They handle the payment data you submit on our behalf and, for their own fraud-prevention and legal obligations, as independent controllers under their own privacy policies. Your full card number, expiry and security code are entered directly into the processor's secure fields and are never received or stored on our servers. We retain only the transaction reference, the amount, the currency, the payment status and the last four digits and brand of the card, so that we can issue receipts, provide support and handle refunds and disputes.

4. How and When We Disclose Information

Disclosure to the parties listed above happens in these ways only:

  • Automated, encrypted transmission — data passes to service providers over authenticated API calls encrypted in transit with TLS 1.2 or higher. This is the method used for payments, hosting, AI processing, transactional email and analytics.
  • Access by authorised personnel — a small number of our staff and contractors can access your data through access-controlled administrative tools, only where needed to deliver or support the service.
  • On your instruction — for example when you connect a third-party account to Dewiride AI or ask us to share information with someone.
  • Formal written disclosure — to advisers, authorities or courts, in response to a valid legal request. We review every request, limit what we disclose to what is legally required, and tell you unless we are prohibited from doing so.

Service providers acting on our instructions are bound by written data processing agreements, may not use your data for their own purposes, and must delete or return it when our contract ends; payment processors and Google use data for their own purposes only as described in section 3. We never sell your personal information to data brokers or anyone else, and we do not share it for advertising apart from the Google measurement described in section 3.

5. Security Practices

We maintain technical and organisational measures designed to protect your personal information against unauthorised access, alteration, disclosure or destruction. These include:

  • Encryption in transit — every page and API call is served over HTTPS using TLS 1.2 or higher.
  • Encryption at rest — databases, file storage and backups are encrypted on disk, and Dewiride AI conversations are encrypted in storage.
  • Data minimisation in Dewiride Analytics — visitors' network addresses are erased after 72 hours, nothing typed into a page is collected, and visits are grouped by a key rebuilt with a fresh secret every day, which cannot be traced back to a person or matched across days or websites.
  • Card data isolation — full card details are captured by our PCI-DSS compliant payment processor and never traverse or rest on our systems.
  • Access control — role-based, least-privilege access, multi-factor authentication on all administrative and cloud accounts, and secrets held in a managed key vault rather than in code.
  • Network and platform hardening — managed cloud infrastructure with vendor security patching, firewalling and activity logging.
  • Monitoring, logging and backups — access and system logs are retained for review, and backups are taken regularly and tested.
  • People and process — confidentiality obligations for staff and contractors, periodic access reviews, and vendor due diligence before we share data with a new processor.
  • Incident response — we investigate suspected breaches immediately and, where a breach is likely to affect you, notify you and the relevant authority without undue delay and in line with applicable law.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If you believe your account has been compromised, contact us at support@dewiride.com immediately.

6. Your Rights

You have the right to:

  • Access and update your personal information
  • Request deletion of your personal information
  • Object to or restrict certain processing of your information
  • Withdraw consent where processing is based on consent
  • Data portability

7. Cookies and Tracking

We use cookies and similar tracking technologies to collect information about your browsing activities. You can control cookies through your browser settings, but disabling them may affect your experience on our website.

On dewiride.com, for website analytics we use two tools, both of which load only after you accept analytics cookies in our cookie banner:

  • Google Analytics — a third-party service operated by Google, used to understand aggregate website usage.
  • Dewiride Analytics — our own analytics service, which we run at analytics.dewiride.com. It sets no cookies and stores nothing on your device. For each visit it records the page you open, where you came from and when, what your browser reports about itself (its user agent, window size, language and time-zone offset), how long the page was on screen and how far down you read, whether you used a pointer or keyboard, and which links, buttons or fields you used, with their labels and where links lead (never what you type). It also records your network address, works out from it roughly where you are (country, region and usually the nearest sizeable town) and whose network you are on, and keeps those; the address itself is erased after 72 hours. The full list is on analytics.dewiride.com. The data stays with us rather than going to a third-party analytics provider.

If you decline analytics cookies, neither tool is loaded and neither receives any data about your visit. You can change or withdraw your choice at any time from the "Cookie settings" link in the footer. See our Cookie Policy for more detail.

The form on our contact page is provided by Microsoft Forms and loads only when you open it. What you send through it reaches us through Microsoft 365, as described in section 3. Once the form has loaded, Microsoft may set its own cookies; the Cookie Policy explains this.

Each product's own privacy or cookie policy describes the cookies and measurement on its website.

8. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your personal information in accordance with applicable data protection laws.

9. Data Retention

We keep personal information only for as long as we need it. Account and Dewiride AI conversation data is kept while your account is open and deleted within 90 days of closure, unless you ask us to delete it sooner. Order, invoice and payment records are kept for 8 years, as required by Indian tax and company law. Support correspondence is kept for 3 years, except that a Dewiride AI support conversation opened from your account is deleted with your account, and one opened without an account is deleted 180 days after it is closed. Dewiride Analytics erases your network address after 72 hours and keeps the rest of each visit record, including the approximate location worked out from the address, for 12 months. Google Analytics keeps user-level and event-level data for the retention period set on our property, at most 14 months from your most recent visit, and deletes it in a monthly clean-up once that period ends; its standard aggregated reports are not affected by that setting.

For Dewiride Analytics customers, account and organisation records are kept while the account is open; the traffic data collected from your websites, and the classifications made from it, are kept for 12 months, with visitors' network addresses erased after 72 hours. If you close the account, everything it holds is kept for 30 days so that it can be restored, then deleted, apart from invoices and payment records.

10. Children's Privacy

Our products are not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on our website and updating the "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy, or wish to exercise any of your rights, please contact us. We respond within 1 business day. If you are not satisfied with our response, you may escalate to our grievance officer, who will acknowledge within 48 hours and answer within 15 days.

Dewiride Technologies Private Limited

Privacy & data requests: support@dewiride.com

Grievance officer: grievance@dewiride.com

Phone: +91 8955643412 (Monday to Friday, 9:00 AM – 6:00 PM IST)

Address: C/o Jagdish Kumawat, Village Tena, Tehsil Shergarh, Jodhpur – 342028, Rajasthan, India