Privacy Policy | Aethryva Deeptech

1. Introduction

Aethryva Deeptech Pvt Ltd ("Aethryva", "we", "us", or "our"), a company incorporated in India with its registered office at 301, KR Towers, Banjara Hills, Road #12, Hyderabad, India — 500034, is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information in compliance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other applicable data protection laws.

2. Data We Collect

We may collect the following personal data when you interact with our website:

Contact Information: Name, email address, phone number, organization name, and role/designation — collected through our Express Interest, Research Access, and Pitchdeck Request forms.
Communication Data: Messages, investment focus, and reasons for access submitted through forms.
Technical Data: IP address (stored as a one-way cryptographic hash — we do not store raw IP addresses), browser type, device information, and cookies necessary for security (Cloudflare Turnstile).
Usage Data: Pages visited, time on site, and interaction patterns collected via Vercel Analytics.

3. Purpose of Data Processing

We process your personal data for the following purposes:

To respond to investor, research, and partnership inquiries
To share requested materials (pitchdeck, research access)
To prevent abuse and ensure website security (honeypot fields, Turnstile verification, IP hashing)
To analyse website usage patterns and improve our services
To comply with legal obligations

4. Legal Basis for Processing

Under the DPDP Act 2023, we process your personal data on the basis of:

Consent: You provide consent when you voluntarily submit your information through our contact forms.
Legitimate Use: For security measures (bot prevention, rate limiting) and analytics that do not require explicit consent.

5. Data Storage and Security

Your data is stored securely using Supabase (hosted on AWS infrastructure). We implement the following security measures:

All data is transmitted over HTTPS/TLS encryption
IP addresses are hashed using SHA-256 with a secure salt before storage
Honeypot fields and Cloudflare Turnstile are used to prevent automated abuse
Database access requires authenticated connections with row-level security

6. Data Sharing

We do not sell your personal data. We may share data with:

Service Providers: Supabase (database), Vercel (hosting and analytics), Cloudflare (security), and Google Fonts (typography) — each governed by their respective privacy policies and data processing agreements.
Legal Obligations: When required by Indian law, regulation, or legal process.

7. Data Retention

We retain your personal data only as long as necessary for the purpose for which it was collected. Contact form submissions are retained for a maximum of 24 months unless you request earlier deletion. Technical logs (hashed IPs) are retained for 12 months.

8. Your Rights (DPDP Act 2023)

Under the Digital Personal Data Protection Act 2023, you have the right to:

Access: Request a summary of your personal data being processed
Correction: Request correction of inaccurate or incomplete data
Erasure: Request deletion of your personal data
Withdraw Consent: Withdraw previously given consent at any time
Grievance Redressal: File a complaint with our Data Protection Officer or the Data Protection Board of India

9. Cookies

We use only essential cookies required for security (Cloudflare Turnstile challenge tokens) and analytics (Vercel Analytics). We do not use advertising or tracking cookies. You can control cookie preferences through your browser settings.

10. Third-Party Links

Our website contains links to external websites (GitHub, LinkedIn, ORCID, MOISSCode). We are not responsible for the privacy practices of these sites. We encourage you to read their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the "Last updated" date at the top of this page.