Privacy Policy
Last updated: 15 April 2026
This Privacy Policy explains how ElaraRise Technologies Private Limited (“ElaraRise”, “we”, “us”, or “our”) collects, uses, discloses, and protects personal data when you visit our website at www.elararise.in, engage with us as a prospective or existing customer, or use the ElaraRise platform and services.
This Policy is issued in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (“DPDP Act”) of India. Where personal data of individuals in the United Republic of Tanzania is processed, this Policy also reflects our commitments under the Personal Data Protection Act, 2022 of Tanzania.
1. Who we are
ElaraRise Technologies Private Limited is a company incorporated under the Companies Act, 2013 of India, with its registered office at Nellore, Andhra Pradesh, India. We are recognised as a startup by the Department for Promotion of Industry and Internal Trade (DPIIT) under Startup India recognition number DIPP248096. Our Tanzanian operations are conducted through DSM IOT AND ICT Company Limited (BRELA 190321487), based in Dar es Salaam, Tanzania.
2. Scope of this Policy
This Policy applies to personal data processed in connection with:
- Your visits to our website and any sub-domains;
- Enquiries, demonstrations, and consultations that you request;
- Customer agreements and the use of our Vision AI and commerce services;
- Recruitment and career-related communications;
- Any communication by email, WhatsApp, or telephone with our team.
3. Categories of data we process
3.1 Personal data you provide to us
- Identity data — name, job title, employer;
- Contact data — email, phone, business address;
- Enquiry content — the substance of your messages to us;
- Recruitment data — CVs, qualifications, right-to-work information.
3.2 Platform and service data (where you are a customer)
- Account and user profile information for administrators and operators;
- Site and device configuration data;
- Business transaction metadata, including order, receipt, and settlement records;
- Audit logs of user and administrator actions within the platform.
3.3 Vision AI and video-derived data
Where a customer deploys our Vision AI product, cameras at the customer site generate video feeds that are processed locally on the Jetson edge device. Raw continuous video streams are not transmitted to ElaraRise cloud infrastructure. Only structured event outputs, and, where required for evidence purposes, specific image frames, are transmitted to our cloud tier. These outputs may include:
- Structured alert and event records (type, time, confidence, site);
- Blurred image frames for operational review;
- Unblurred evidence frames, isolated in a separate storage container and released only under authorised investigation workflows.
3.4 Technical and website data
- IP address, device and browser type, operating system;
- Referral URL, pages visited, time on site;
- Cookie and similar-technology data (see Section 10).
4. How we use personal data
We process personal data for the following purposes:
- To respond to your enquiries and provide information you have requested;
- To negotiate, conclude, and perform contracts with customers and partners;
- To operate, secure, and improve the ElaraRise platform and services;
- To comply with legal, regulatory, and tax obligations in India and Tanzania;
- To detect, investigate, and prevent fraud, unauthorised access, or security incidents;
- To analyse the use of our website for legitimate business purposes;
- To pursue recruitment and hiring where applicable.
5. Lawful basis for processing
Depending on the processing activity and the applicable law, our lawful basis may be:
- Consent — where required, for example in respect of certain marketing communications;
- Contractual necessity — where processing is required to enter into or perform a contract with you or your organisation;
- Legitimate interests — for the security of our services, the prevention of fraud, and the day-to-day operation of our business, where such interests are not overridden by your rights;
- Legal obligation — where we are required to process data to comply with Indian or Tanzanian law.
6. Disclosure of personal data
We may disclose personal data only to:
- Group entities — including DSM IOT AND ICT Company Limited, for the joint operation of our business in East Africa;
- Service providers — cloud infrastructure (Microsoft Azure), payment processors (Pesapal), messaging providers (Meta WhatsApp Business), and professional advisers, each under appropriate contractual protections;
- Authorities — where disclosure is required by law, court order, or a lawful regulatory request;
- Successors — in the event of a corporate reorganisation, subject to equivalent protection of your data.
We do not sell personal data. We do not disclose personal data to third parties for their independent marketing purposes.
7. International transfers
Personal data processed by ElaraRise may be stored or processed in India, Tanzania, or other jurisdictions where our service providers operate. Where such transfers occur, we rely on appropriate safeguards including contractual commitments from our providers, encryption of data in transit and at rest, and compliance with applicable cross-border transfer rules under the DPDP Act and the Personal Data Protection Act of Tanzania.
8. Retention
We retain personal data only as long as is necessary for the purposes described in this Policy. Specific retention commitments include:
| Category | Typical retention period |
|---|---|
| Website enquiry correspondence | Up to 24 months after last contact |
| Customer contract and invoice records | Up to 8 years (statutory tax and audit) |
| Vision AI audit logs | Up to 7 years (insert-only, immutable) |
| Evidence-grade image frames | Up to 90 days in hot storage, archived thereafter, with customer controls |
| Recruitment data (unsuccessful candidates) | Up to 12 months unless you ask us to retain longer |
9. Your rights
Subject to the DPDP Act and other applicable laws, you have the following rights in respect of your personal data:
- The right to access a summary of the personal data we hold about you;
- The right to correction, completion, updating, and erasure of inaccurate or no-longer-required data;
- The right to grievance redressal through our designated officer;
- The right to nominate another individual to exercise these rights in the event of your death or incapacity;
- The right to withdraw consent at any time, where consent is the lawful basis for processing.
To exercise any of these rights, please contact our Grievance Officer at privacy@elararise.in. We will respond to your request within the period prescribed by applicable law, and in any event not later than thirty (30) days.
10. Cookies and similar technologies
Our website uses strictly necessary cookies to function correctly, and anonymised analytics cookies to understand website usage in aggregate. We do not use cookies for cross-site behavioural advertising. You can control cookies through your browser settings; please note that disabling strictly necessary cookies may prevent parts of the website from working.
11. Children
Our services are intended for business operators and their staff, and are not directed at children under the age of eighteen (18). We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will take appropriate steps to delete it.
12. Security
We maintain reasonable security practices and procedures appropriate to the nature of the personal data we process, including:
- TLS encryption for data in transit;
- Encryption at rest for personal data stored in our infrastructure;
- Centralised secrets management with hardware-backed key storage;
- Role-based access control and multi-factor authentication for administrative access;
- Regular code review, dependency scanning, and infrastructure audits.
No system is perfectly secure. If you believe you have identified a security issue, please write to info@elararise.in.
13. Changes to this Policy
We may update this Policy from time to time to reflect changes in our services, technology, or applicable law. The date at the top of this page indicates when the Policy was last revised. Material changes will be notified to active customers through the administrator contact on record.
14. Grievance officer and contact
In accordance with the Information Technology Act, 2000, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the DPDP Act, 2023, the contact details of our Grievance Officer are:
Grievance Officer
ElaraRise Technologies Private Limited
26-2-809, 11th Street, Chandra Mouli Nagar, Vedayapalem, Nellore — 524004, Andhra Pradesh, India
Email: privacy@elararise.in
15.WhatsApp Business Data
When customers contact us through WhatsApp, we may receive their name, phone number, message details, order details, delivery or service request information, and receipt-related information.
For more information on how Meta processes data, see WhatsApp Business Privacy Policy.
This data is used only for customer communication, order confirmation, receipt generation, customer support, and operational reconciliation.
For Tanzania operations, DSM IOT AND ICT Company Limited may support local coordination and settlement-related operational activities.
We do not sell WhatsApp customer data, and we do not use WhatsApp messages for unrelated advertising or profiling.
For general enquiries, see our Contact page. For our terms of use, see the Terms of Service.