Privacy Policy

1. Introduction

NitroBerry AI Private Limited (“NitroBerry”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, share, and protect personal data when you visit our website, use our products or services, communicate with us, request a demonstration, create an account, or otherwise interact with NitroBerry.

This Privacy Policy is intended to comply with applicable data protection laws, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Digital Personal Data Protection Rules, 2025 (“DPDP Rules”) in India and, where applicable, other data protection laws.

For personal data for which NitroBerry determines the purpose and means of processing, NitroBerry acts as a Data Fiduciary under the DPDP Act.

Where NitroBerry processes personal data on behalf of a customer through our SaaS platform, NitroBerry generally acts as a Data Processor, and the relevant customer acts as the Data Fiduciary.

2. Who We Are

NitroBerry provides manufacturing workflow and operations software designed to help organizations digitize approvals, inspections, reporting, compliance processes, and plant visibility.

If you have questions about this Privacy Policy or how your data is handled, you can contact us at: support@nitroberry.com.

3. Data We Collect

Depending on how you interact with NitroBerry, we may collect the following categories of personal data.

Information You Provide to Us

This may include:

• Full name
• Business or work email address
• Telephone number
• Company or organisation name
• Job title or professional information
• Account information
• Login and authentication information
• Billing and transaction information
• Information submitted through contact forms
• Demo or sales enquiries
• Support requests
• Communications with us
• Feedback
• Information you choose to provide when using our services

We ask that you do not provide personal data that is unnecessary for the purpose of your interaction with us.

Information Collected Automatically

When you visit our website or use our services, we may automatically collect certain technical and usage information, including:

• IP address
• Browser type and version
• Device information
• Operating system
• Pages visited
• Date and time of access
• Referring URLs
• Website interaction information
• Login and activity logs
• Diagnostic and security information
• Cookie and similar technology identifiers

We use this information to operate, secure, maintain, analyse, and improve our website and services.

4. Purposes for Which We Process Personal Data

We process personal data only for lawful purposes.

Depending on your relationship with NitroBerry, we may process your personal data to:

• Respond to enquiries and requests
• Provide product demonstrations
• Create and administer user accounts
• Provide our SaaS products and services
• Authenticate users
• Provide customer support
• Communicate regarding our products and services
• Process payments and maintain transaction records
• Manage subscriptions and contracts
• Improve our products, services, and website
• Diagnose technical issues
• Prevent fraud, misuse, and security incidents
• Protect our systems, customers, and users
• Maintain audit and security logs
• Comply with legal and regulatory requirements
• Establish, exercise, or defend legal claims
• Send marketing communications where permitted by applicable law or where you have provided consent
• Perform other purposes disclosed to you when your personal data is collected

We will not process your personal data for a new purpose that is incompatible with the purpose communicated to you unless permitted by applicable law or we provide an appropriate notice and obtain consent where required.

5. Consent

Where processing is based on your consent, we will request consent through clear affirmative action.

Your consent will be sought for a specified purpose and will be limited to the personal data necessary for that purpose.

You have the right to withdraw your consent at any time.

Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

You may withdraw your consent through the mechanism provided when consent was obtained, through applicable account or communication settings, by using an unsubscribe mechanism where available, or by contacting us at:

privacy@nitroberry.com

Where consent is the basis of processing, withdrawing consent should be as easy as providing consent.

Following a valid withdrawal of consent, we will stop the relevant processing and erase the applicable personal data, and where required cause our Data Processors to erase such data, unless retention or continued processing is required or permitted under applicable law.

6. Certain Legitimate Uses

The DPDP Act permits personal data to be processed without obtaining separate consent in certain circumstances specified by law.

For example, where you voluntarily provide your personal data to us for a specified purpose and have not indicated that you do not consent to its use for that purpose, we may use the information for that purpose as permitted by applicable law.

If you submit your name, business email address, company information, and a message through our Contact Us form, we may use that information to respond to your enquiry.

We may also process personal data without consent where another legitimate use under applicable law applies.

7. Notice at the Time of Collection

Where required, when we request personal data from you we will provide or make available a clear notice describing:

• The personal data being collected
• The specified purpose for which it will be processed
• How you may exercise your rights
• How you may withdraw consent, where applicable
• How you may raise a grievance
• How you may contact NitroBerry regarding the processing of your personal data

The notice may be provided directly on the relevant page, form, application, service, or through a link to this Privacy Policy or another appropriate privacy notice.

8. Marketing Communications

We may send information about NitroBerry products, services, features, events, or offers where permitted by applicable law.

Where consent is required for marketing communications, we will obtain it separately.

You may withdraw your marketing consent or unsubscribe at any time using the unsubscribe mechanism included in our communications or by contacting:

privacy@nitroberry.com

Withdrawing consent for marketing communications will not affect transactional, security, service, billing, or other communications necessary for our relationship with you.

9. Cookies and Similar Technologies

NitroBerry may use cookies and similar technologies to operate and improve our website and services.

These technologies may be used for:

• Essential website functionality
• Authentication
• Security
• Remembering preferences
• Website performance
• Analytics
• Understanding how visitors use our website

Where required by applicable law, optional cookies or similar technologies will be used based on your consent.

You can manage applicable cookie preferences through our cookie controls or through your browser settings.

For additional information, please refer to our Cookie Policy.

10. Sharing of Personal Data

We may share personal data with third parties where reasonably necessary for the purposes described in this Privacy Policy.

These recipients may include:

• Cloud hosting providers
• Infrastructure providers
• Database and storage providers
• Email and communication providers
• Customer support providers
• Analytics providers
• Payment processors
• Security and fraud prevention providers
• Professional advisers
• Auditors
• Government authorities, regulators, courts, or law-enforcement authorities where required by law

We may also disclose personal data in connection with a merger, acquisition, financing, corporate restructuring, sale of assets, or similar business transaction, subject to applicable law.

We require Data Processors and service providers handling personal data on our behalf to process it in accordance with applicable contractual and legal requirements.

11. Customer Data Processed Through NitroBerry

Our customers may submit or process personal data through NitroBerry’s products and services.

Where we process such personal data solely on behalf of a customer and according to that customer’s instructions, the customer generally determines the purposes of processing and acts as the Data Fiduciary or equivalent controller under applicable law.

NitroBerry acts as a Data Processor in relation to such processing.

If your personal data has been submitted to NitroBerry by one of our customers and you wish to exercise rights regarding that information, you should generally contact the relevant customer.

Where appropriate, we will assist our customers in responding to lawful requests relating to personal data processed through our services.

Our processing of customer data may also be governed by our Data Processing Addendum and the applicable agreement with the customer.

12. Data Retention and Erasure

We retain personal data only for as long as necessary to fulfil the specified purpose for which it was collected or processed, or for another period where retention is required or permitted by applicable law.

Retention periods may depend on factors including:

• The nature of the personal data
• The purpose for which it was collected
• The duration of our relationship with you
• Contractual requirements
• Security and fraud prevention requirements
• Applicable tax, accounting, corporate, or regulatory requirements
• Applicable limitation periods
• The need to establish, exercise, or defend legal claims

When the purpose for which personal data was collected is no longer being served, or when consent is validly withdrawn where processing depends on consent, we will erase the relevant personal data as required by applicable law.

Where required, we will also instruct applicable Data Processors to erase personal data provided to them.

Some information may be retained where retention is necessary to comply with applicable law, enforce legal rights, prevent fraud or misuse, maintain necessary security records, or satisfy other lawful requirements.

13. Security of Personal Data

We implement reasonable technical and organisational safeguards designed to protect personal data under our control against unauthorised access, disclosure, alteration, loss, destruction, or other personal data breaches.

Depending on the nature of the processing, these safeguards may include:

• Access controls
• Authentication controls
• Encryption where appropriate
• Secure communications
• Logging and monitoring
• Backup and recovery measures
• Vulnerability and security management
• Role-based access
• Internal security procedures
• Appropriate contractual safeguards with Data Processors

No system can guarantee absolute security. We continually assess and improve our safeguards based on the nature and risks of our processing activities.

14. Personal Data Breaches

If a personal data breach occurs, NitroBerry will take reasonable steps to contain, investigate, mitigate, and remediate the incident.

Where required under applicable data protection law, including the DPDP Act and DPDP Rules, we will provide notifications to affected Data Principals and/or the Data Protection Board of India in the manner and within the requirements prescribed by applicable law.

15. Your Rights Under the DPDP Act

Where the DPDP Act applies to the processing of your personal data, you may exercise the rights available to a Data Principal under applicable law.

Right to Access Information

You may request information regarding personal data that we process about you, including, where applicable:

• A summary of the personal data being processed
• A summary of processing activities
• Information regarding entities with which your personal data has been shared, as provided by applicable law

Certain statutory exceptions may apply.

Right to Correction, Completion and Updating

You may request that we:

• Correct inaccurate or misleading personal data
• Complete incomplete personal data
• Update personal data that is out of date

We may take reasonable steps to verify the accuracy and authenticity of a requested correction.

Right to Erasure

You may request erasure of personal data that is no longer necessary for the specified purpose for which it was processed.

We will erase such personal data unless its retention is necessary for compliance with applicable law or another lawful basis permits or requires continued retention.

Right to Withdraw Consent

Where our processing is based on your consent, you may withdraw that consent at any time.

Right to Grievance Redressal

You have the right to raise a grievance regarding our processing of your personal data or our handling of your rights.

Please contact our Data Protection & Grievance Contact using the details provided below.

We will respond to grievances within the period required under applicable law.

Right to Nominate

You may nominate another individual who may exercise your rights under applicable law in the event of your death or incapacity.

Requests regarding nomination may be submitted using the contact information provided below.

16. Exercising Your Rights

You may exercise applicable privacy rights by contacting:

Email: privacy@nitroberry.com

Please state the nature of your request, such as:

• Access my personal data
• Correct or update my personal data
• Delete my personal data
• Withdraw my consent
• Marketing opt-out
• Raise a privacy grievance
• Nomination request

We may request reasonable information necessary to verify your identity and locate the relevant personal data before fulfilling a request.

We will not request more information than reasonably necessary for verification.

Where the personal data concerned is controlled by one of our customers and NitroBerry acts only as a Data Processor, we may direct your request to the relevant customer or assist that customer in responding.

17. Grievance Redressal

If you have a question, complaint, or grievance concerning the processing of your personal data, please contact:

Data Protection & Grievance Contact
NitroBerry AI Private Limited
Email: privacy@nitroberry.com
Jodhpur, Rajasthan, India

Please include sufficient information to allow us to understand and address your grievance.

We will acknowledge and address grievances in accordance with applicable legal requirements.

If your grievance is not resolved through our grievance redressal mechanism, you may exercise any remedies available to you under applicable law, including approaching the Data Protection Board of India, where applicable and in accordance with the DPDP Act and DPDP Rules.

18. Children’s Personal Data

Our products and services are primarily intended for businesses and professionals and are not directed toward children.

We do not knowingly seek to collect personal data from children for services directed to adults.

Where we process personal data of a child and the DPDP Act requires verifiable consent of a parent or lawful guardian, we will take appropriate measures to obtain and verify such consent before processing the child’s personal data, unless an applicable exemption applies.

We will not knowingly undertake processing of children’s personal data that is prohibited under applicable law.

If you believe that a child has provided personal data to us in circumstances where such processing is not permitted, please contact privacy@nitroberry.com.

19. Cross-Border Processing and Transfers

NitroBerry may use service providers, infrastructure, or systems located outside India.

Accordingly, personal data may be processed or stored outside India.

We will process and transfer personal data internationally in accordance with applicable data protection laws and any restrictions or requirements notified by the Government of India under the DPDP Act.

Where other data protection laws apply, we will implement appropriate safeguards required by those laws.

20. Data Processors and Subprocessors

NitroBerry may engage third-party Data Processors and subprocessors to provide infrastructure, hosting, communications, analytics, security, customer support, and other services.

We take reasonable measures to ensure that processors handling personal data on our behalf are subject to appropriate contractual obligations relating to confidentiality, security, processing instructions, breach management, and deletion or return of personal data.

Where NitroBerry acts as a Data Processor for a customer, our use of subprocessors may additionally be governed by our Data Processing Addendum.

21. Business Transactions

If NitroBerry is involved in a merger, acquisition, restructuring, financing, sale of assets, insolvency, or similar corporate transaction, personal data may be disclosed or transferred as part of that transaction.

Any recipient will be required to process personal data in accordance with applicable data protection requirements.

22. Legal Requirements

We may retain, use, or disclose personal data where reasonably necessary to:

• Comply with applicable laws or regulations
• Respond to lawful requests from government authorities
• Comply with court orders or legal proceedings
• Investigate fraud or security incidents
• Protect NitroBerry, our customers, users, employees, or others
• Establish, exercise, or defend legal claims

Where legally permitted, we will limit such processing to what is reasonably necessary for the relevant purpose.

23. Additional Rights Under Other Laws

Depending on where you are located and which laws apply to the processing of your personal data, you may have additional privacy rights.

These may include rights relating to access, rectification, deletion, restriction, objection, portability, or complaints to an applicable data protection authority.

Nothing in this Privacy Policy is intended to restrict rights available to you under applicable mandatory data protection law.

24. Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect changes to:

• Our products and services
• Our processing activities
• Technology
• Service providers
• Legal or regulatory requirements
• Our privacy and security practices

When we make material changes, we will update the “Last Updated” date and provide additional notice where required by applicable law.

Where a change requires fresh consent under applicable law, we will obtain such consent before carrying out the relevant processing.

25. Contact Us

For questions about this Privacy Policy, our processing of personal data, or your privacy rights, contact:

NitroBerry AI Private Limited
Jodhpur, Rajasthan, India

Privacy & Data Protection:
privacy@nitroberry.com

General Support:
support@nitroberry.com

For privacy rights requests and grievances, we recommend contacting privacy@nitroberry.com so that your request can be handled through our privacy process.