Aavenza One & AI Assistant v2.4 Live: Production-ready enterprise cognitive architecture
Privacy Policy
At Aavenza Technologies Pvt. Ltd., we engineer mission-critical software, enterprise digitization, and AI automation for government bodies, multinational enterprises, and growing businesses. This policy outlines our uncompromising commitment to client confidentiality, physical record privacy, and digital data sovereignty.
Zero Data Selling
We never sell, monetize, or license client data, records, or inquiries to any third party.
Strict Mutual NDA
All engagements operate under stringent confidentiality and statutory non-disclosure agreements.
Sovereign Data Storage
Indian public sector data remains hosted strictly within MeitY-empaneled sovereign cloud zones.
No AI Training On Client Data
Client proprietary data is never used to train public LLMs or external machine learning models.
01. Introduction & Corporate Entity
This Privacy Policy governs the processing of information collected by Aavenza Technologies Pvt. Ltd. (“Aavenza”, “Company”, “we”, “us”, or “our”), a private limited company registered under the Companies Act in India, headquartered in Kolkata, West Bengal.
We operate as a trusted technology partner providing bespoke enterprise software, AI workflow automation, electronic office (eOffice) platforms, and large-scale physical-to-digital document processing. This document explains how we collect, handle, safeguard, and dispose of information when you interact with our website, solicit project scoping, or contract our services.
02. Scope & Applicability
This policy applies to:
- Visitors to our website and marketing portals.
- Government departments, ministries, public sector undertakings (PSUs), and autonomous bodies engaging in tenders, RFPs, and pilot proofs-of-concept.
- Corporate and enterprise clients utilizing our engineering teams, custom software development, and ERP accelerators.
- Custodians of physical archives, files, and land/revenue records undergoing digitization, OCR extraction, and indexing.
03. Information We Collect
We collect only the minimal data necessary to fulfill commercial, technical, and compliance mandates:
A. Client & Lead Information
Full name, designation, organization name, official government/business email address, telephone contact, country of operation, project budget brackets, and technical specifications submitted via our project scoping portal.
B. Contractual & Project Data
Software architecture requirements, schema definitions, workflow logic, API access credentials for staging environments, and sample datasets provided solely for integration verification.
C. Physical Records (Digitization Engagements)
Paper files, manuscripts, registers, and blueprints received for optical scanning and metadata extraction. We act strictly as a Data Processor under instructions of the client organization.
D. Technical Telemetry & Logs
Non-identifiable network telemetry, anonymized IP addresses, browser types, and session duration to ensure web portal performance, DDOS resilience, and cyber safety.
04. Special Safeguards for Physical-to-Digital Document Processing
For government records, land revenue documents, institutional files, and confidential archives:
- Strict Chain of Custody: Every physical batch is barcoded, logged into our verification ledger upon receipt, and signed off by authorized liaison officers.
- Biometric & CCTV Access Control: On-premise scanning facilities operate in restricted clean-room environments under continuous 24/7 CCTV surveillance with zero personal electronic devices allowed in scanning zones.
- Air-Gapped & Local Scanning Options: For sensitive government departments, scanning and OCR processing are executed on-site inside client premises using air-gapped workstations without external internet connectivity.
- Mandatory Post-Processing Purge: Once digital outputs and indexed records are delivered, validated, and signed off, temporary working copies on scanning terminals are purged using DoD 5220.22-M sanitization standards.
05. AI Governance & Zero Model Training Commitment
As an AI-First software company, we maintain absolute ethical and technical boundaries:
06. Data Sovereignty, Encryption & Storage
We implement defense-in-depth cybersecurity controls across all environments:
- Encryption Standards: Data in transit is enforced over TLS 1.3 with SHA-256 ciphers. All data at rest is protected with AES-256 military-grade encryption.
- Indian Data Localization: In strict compliance with Indian government directives, citizen data and public sector records remain domiciled within MeitY-empaneled data centers in India.
- Role-Based Access Control (RBAC): Engineers are granted access strictly on a need-to-know basis protected by Multi-Factor Authentication (MFA) and hardware security tokens.
07. Non-Monetization & Subprocessors
Aavenza does not monetize personal or business information. We do not engage in behavioral advertising, third-party data broker sharing, or cross-site tracking.
Information is disclosed only to vetted infrastructure subprocessors (e.g. enterprise cloud hosting providers AWS/Azure/GovCloud, secure email gateways) under strict contractual agreements that mandate identical or superior privacy safeguards.
08. Statutory Compliance & User Rights
In alignment with India’s Digital Personal Data Protection Act (DPDPA), 2023 and international data privacy frameworks (such as GDPR for global clients), data principals have the right to:
- Request confirmation and summary of personal data held.
- Request correction or updating of inaccurate records.
- Request erasure of personal information where statutory obligations no longer apply.
- Nominate a representative in the event of incapacity or death.
Data Protection Officer & Privacy Desk
For privacy inquiries, audit verifications, data subject requests, or statutory compliance matters, contact our designated Data Protection Officer: