Privacy Notice
Draft pending legal reviewThis notice explains what personal data Payana Technologies collects through this website, why we collect it, how long we keep it, who we share it with, and what you can ask us to do with it. It is written to meet India's Digital Personal Data Protection Act, 2023 (DPDP Act). We are the Data Fiduciary for the data described here.
1. Who we are
Payana Technologies, VRA-31, South Chittoor, Kochi, Ernakulam, Kerala 682027, India. We build assistive technology, the Payana Smart Glasses and the Payana Smart Cane, for people with visual impairments.
2. What we collect and why
We only collect what you type into a form on this site. We do not buy data, and we do not run advertising or analytics trackers.
| Where | What we collect | Why (purpose) | How long we keep it |
|---|---|---|---|
| Smart Cane pre-book form | Name, email, phone, chosen cane model, your notes | To reserve your unit and contact you about launch, pricing and delivery | Until your order is fulfilled or cancelled, then 12 months |
| Contact form | Name, email, the role you select, your message | To reply to your enquiry | 24 months from your last message |
| Job application (when open) | Name, email, role applied for, portfolio link, cover letter | To assess your application | 12 months from the decision |
| Data rights request form | Name, email, phone (optional), your request | To verify and act on your request, and to keep a compliance record | 36 months (record of how we handled it) |
| Consent records | The exact wording you agreed to, the purpose, and the date | To prove we asked for and received your consent | As long as we hold the related data, plus 12 months |
| Your browser | A note that you have seen the intro animation, the onboarding tips, and your cookie choice | To avoid repeating things you have already dismissed | Stays in your browser until you clear it |
Retention is not yet automated. The periods above are our commitment; scheduled deletion is an open engineering item, so today records are removed when you ask us or when we review them manually.
3. Our lawful basis: your consent
Every form on this site asks for your consent with a separate, unticked checkbox before you submit. Agreeing to be contacted about launches is always optional and never a condition of using the site or placing a pre-book. We store what you agreed to, the exact wording shown to you, and the date.
4. Who we share it with
- Google (Gmail): we send confirmation and notification emails through a Google Mail connection, so the contents of those emails pass through Google.
- Our hosting and database provider: form submissions are stored in a managed database and served from a global hosting network.
- Google Fonts: typefaces load from Google's servers, which receive your IP address as part of that request.
- WhatsApp (Meta): only if you choose to tap a WhatsApp link and message us there.
We do not sell your data or share it for advertising. Some of these providers process data outside India.
5. Children
This site is not intended for children under 18, and we do not knowingly collect a child's data without verifiable parental consent. If you believe a child has submitted data, tell our Grievance Officer and we will delete it.
6. Your rights
Under the DPDP Act you may ask us to:
- Access a summary of the personal data we hold about you and who we have shared it with.
- Correct, complete or update anything that is wrong.
- Erase your data, unless we must keep it by law.
- Withdraw consent at any time. Withdrawing is as easy as giving it, and we then stop the related processing.
- Nominate someone to exercise these rights on your behalf if you die or are incapacitated.
- Complain to us, and then to the Data Protection Board of India if you are not satisfied.
The quickest way is our data rights request form. We aim to respond within 30 days.
7. Your duties
Please give us accurate details and do not submit someone else's data or a false complaint. The DPDP Act places these duties on Data Principals.
8. How we protect your data
The site is served over HTTPS, database access is restricted so that form submissions cannot be read by the public, and only trusted server-side code can read them. We are open about what is still outstanding: forms do not yet have verified bot protection, stored form fields are not encrypted field-by-field, and the internal email-template page uses a single shared password rather than individual accounts. These items are tracked and prioritised.
9. If something goes wrong
If a personal data breach occurs, we will notify the Data Protection Board of India and every affected person without delay, following our internal breach runbook.
10. Grievance Officer
Email: payanatechnologies@gmail.com
Phone / WhatsApp: +91 82818 91416
Post: VRA-31, South Chittoor, Kochi, Ernakulam, Kerala 682027, India
We respond within 30 days.
Still unhappy? You may complain to the Data Protection Board of India.
11. Changes to this notice
If we change how we use your data, we will update this page, raise the notice version, and ask for fresh consent where the law requires it.