Privacy Policy & Data Protection Charter

1. Corporate Commitment to Data Protection

Vyomara Technologies Pvt Ltd ("Vyomara", "We", "Us") respects your privacy and is committed to protecting the personal and corporate data of our enterprise clients, university partners, internship candidates, and website visitors. This policy outlines our data collection, processing, storage, and retention practices in compliance with the Digital Personal Data Protection Act, 2023 (DPDP) of India and the General Data Protection Regulation (GDPR).

2. Scope & Categories of Data Collected

We collect only the minimum necessary information required to fulfill our technical and institutional deliverables:

• Enterprise RFP & Commercial Data: Corporate name, business email, project requirements, architectural specifications, and billing details provided during consultation.
• Talent Cohort & Student Data (Nexus): Full name, university affiliation, email, phone number, GitHub profiles, and proof-of-work project repositories submitted for verification.
• Pragati AI Learning Telemetry: Anonymized problem-solving response timestamps and diagnostic score metrics used solely to personalize student learning paths.
• Technical Diagnostics: IP addresses, browser types, and session telemetry used for DDoS mitigation, firewall enforcement, and uptime observability.

3. AI Training & Intellectual Property Isolation

Strict Non-Training Guarantee: Vyomara Technologies never uses proprietary enterprise client source code, confidential business data, or student private communications to train, fine-tune, or calibrate public foundation AI models (e.g. OpenAI, Anthropic, or open LLMs).

All custom RAG vector embeddings and agent execution traces are stored in cryptographically isolated, multi-tenant databases with customer-managed KMS encryption.

4. Security Architecture & Encryption Standards

We implement defense-in-depth security measures, including:

• Encryption at Rest: AES-256 encryption across all storage volumes, databases, and automated backups.
• Encryption in Transit: TLS 1.3 enforced for all public and internal microservice communications.
• Access Control: Zero-trust least-privilege Role-Based Access Control (RBAC) with mandatory hardware MFA.

5. Grievance Redressal & Compliance Officer

In accordance with Indian statutory requirements, any privacy inquiries, data deletion requests, or grievances should be directed to our designated Grievance Officer: