Privacy Policy

1. Who We Are

This Privacy Policy applies to the CalfAvas campaign website operated by INNOPOLY TECHNOLOGY LLP (LLP Identification Number: ACG-2617), registered at 505, 5th Floor, No. 3 Palm Spring, Link Road, Malad West, Mumbai – 400064, Maharashtra, India.

We are committed to protecting your personal data in accordance with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable laws.

2. Data We Collect

When you register your interest or back this campaign, we collect:

We do not collect payment card details directly. All payment processing is handled by our third-party payment processor (Stripe or Razorpay), which maintains its own PCI-DSS compliant privacy practices.

3. How We Use Your Data

We use your personal data to:

• Process and fulfil your campaign pledge or pre-order
• Send order confirmation and campaign update emails
• Deliver your pen deployment certificate, photos, and GPS coordinates
• Send quarterly calf update videos and farmer connection details
• Respond to your enquiries and support requests
• Comply with legal and regulatory obligations

We will not sell, rent, or share your personal data with third parties for marketing purposes without your explicit consent.

4. Legal Basis for Processing

Under the DPDP Act 2023, we process your personal data on the following bases:

• Consent — you provide your data voluntarily when registering interest
• Contract performance — processing necessary to fulfil your pledge
• Legitimate interests — analytics and fraud prevention
• Legal obligation — compliance with applicable Indian laws

5. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this policy, or as required by law. Specifically:

• Campaign interest registrations: 3 years from the date of submission
• Transaction records: 7 years (as required by Indian accounting and tax laws)
• Marketing communications: until you unsubscribe

6. Your Rights

Under the DPDP Act 2023, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Erasure — request deletion of your data (subject to legal retention requirements)
• Withdrawal of consent — withdraw consent at any time without affecting prior processing
• Grievance redressal — raise a complaint with our Data Protection Officer

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

7. Cookies & Analytics

This website uses anonymised analytics to understand visitor behaviour and improve the campaign experience. We do not use advertising cookies or cross-site tracking. You can disable cookies in your browser settings at any time without affecting your ability to register interest in the campaign.

8. International Transfers

Your data may be processed on servers located outside India (for example, by our cloud infrastructure and payment processor). Where this occurs, we ensure appropriate safeguards are in place in accordance with the DPDP Act 2023 and applicable cross-border data transfer rules.

9. Children's Privacy

This campaign is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data through this website, please contact us immediately and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to registered backers via email. The "Last updated" date at the top of this page will reflect the most recent revision.

11. Contact & Grievance Officer

For any privacy-related queries, complaints, or to exercise your rights under the DPDP Act: