Privacy Policy

• Privacy Consent & Notice: We process enterprise credentials, plant operation logs, and organizational records to maintain secure audit trails and support AI-native ERP services.
• Granular Cookie Control: Users can manage preferences via our interactive consent center for Necessary Cookies (Required for 21 CFR Part 11 audit logs & auth), Performance & Analytics (Google Analytics & Tag Manager), and Matchmaking & Advisory Alerts.
• Multi-Region Compliance: Designed in accordance with European Union GDPR (EU 2016/679), UK GDPR, India Digital Personal Data Protection (DPDP) Act 2023, United States CCPA/CPRA (California), and Australia Privacy Act 1988 (Cth).

• Contact Data: First and last name, salutation, email address, billing and mailing addresses, professional title, company name, plant location, and phone number.
• Demographic Data: City, state, country of residence, postal code, and pharmaceutical industry segment (API, Formulation, Contract Manufacturing).
• Communications Data: Messages, enquiry details, and exchanges when you contact us through the Service or communicate with us via support channels or social media.
• Transactional Data: Information needed to complete enterprise subscription orders, invoice metrics, and transaction history.
• Marketing Data: Your preferences for receiving marketing communications and details about your engagement with them.
• Compliance & Verification Data: Enterprise authorization documents and security contact details.

Automatic Data Collection: We, our service providers, and our analytics partners automatically log device and activity information over time:

• Device Data: Operating system type and version, browser type, screen resolution, IP address, unique identifiers, and location metrics.
• Online Activity Data: Pages viewed, time spent on pages, navigation paths, access times, and interaction logs.

• Data Principal Rights: You have the right to access summary information, seek correction or erasure of personal data, and nominate representatives.
• Lawful Basis: Personal data is processed under legitimate business use or explicit consent obtained via transparent notice.
• Data Fiduciary Accountability: We implement technical & organizational data security safeguards and store personal data within compliant data centers.
• Penalties Notice: Non-compliance under DPDP Act 2023 attracts statutory penalties of up to INR 250 crore per breach instance.

We process personal information for the following business purposes:

• Service Delivery & Operations: Providing the Service, enabling plant security features, sending administrative updates, audit notifications, and customer support messages.
• Service Personalization: Tailoring module workflows to user roles (QA/QC, Auditor, Plant Manager).
• Service Improvement & Analytics: Analyzing aggregated usage trends, evaluating system resilience, and optimizing platform performance.
• Marketing & Advisory: Sending relevant regulatory updates, compliance whitepapers, and software feature notifications.
• Compliance & Legal Protection: Fulfilling statutory requirements under Indian IT Act 2000, IT Rules 2021, and CDSCO Schedule M guidelines.

We may share personal information with:

• Corporate Partners & Affiliates: Controlled entities or partners supporting deployment.
• Infrastructure & Hosting Service Providers: Cloud infrastructure providers (AWS / Azure India region datacenters), customer support platforms, and security monitoring tools.
• Professional Advisors: Legal counsel, statutory auditors, and regulatory consultants.
• Regulatory & Statutory Authorities: Law enforcement or statutory bodies when mandated by applicable law.