Privacy Policy
How Proto Corp collects, uses, shares, protects and deletes personal data, and the rights you have over it.
1. Who we are
PROTO CORP PRIVATE LIMITED ("Proto Corp", "we", "us") is the Data Fiduciary for personal data processed through our websites, cloud services, mobile applications and devices (the "Services"). This policy is published in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
Where we process data on behalf of business customers (for example media or files they upload), we act as a Data Processor and the customer's own privacy policy applies to that data.
2. Data we collect
| Category | Examples | Source |
|---|---|---|
| Contact & enquiry data | Name, work email, company, enquiry topic, message | Forms you submit |
| Account data | Name, email, organisation, hashed password, account settings | You, when you sign up |
| Billing data | Billing name and address, GSTIN, invoices, transaction IDs | You and our payment providers |
| Customer Content | Media streams, files and samples submitted for transcoding or analysis | You, while using the Services |
| Usage & device data | IP address, browser and device type, operating system, app version, logs, crash reports | Automatically, when you use the Services |
| Hardware data | Device serial number, firmware version, diagnostics, delivery address | Our devices and your orders |
| Support data | Messages, attachments and call notes | You, when you contact us |
We do not intentionally collect sensitive personal data such as health, biometric or financial account passwords. Card details are entered directly with our payment providers and are not stored by us.
3. How we use data
- To provide, operate, maintain and secure the Services and your account.
- To process payments, issue GST-compliant invoices and meet accounting obligations.
- To respond to enquiries, provide support and send service-related notices.
- To detect, prevent and investigate fraud, abuse and security incidents.
- To improve performance and reliability using aggregated or de-identified data.
- To send product updates or marketing, only where you have consented. You can opt out at any time.
- To comply with law, lawful requests from authorities and enforce our Terms.
We process personal data on the basis of your consent, or for legitimate uses permitted under Section 7 of the DPDP Act, such as providing a service you requested or complying with law. We do not sell personal data, and we do not use it for targeted advertising or to track you across other companies' apps and websites.
4. Sharing
We share personal data only as needed, with:
- Service providers (Data Processors) such as cloud hosting, form handling, email delivery, payment gateways and logistics partners, bound by contract to protect the data and use it only on our instructions;
- Authorities where required by law, court order or to protect rights, safety and security;
- A successor entity in a merger, acquisition or sale of assets, subject to this policy.
Our website loads fonts from Google Fonts, which receives your IP address when the page loads. Enquiry forms are delivered through a third-party form service.
5. International transfers
Some service providers may process data outside India. We transfer data only to countries not restricted by the Government of India under the DPDP Act, and with safeguards appropriate to the data.
6. Retention
- Account data: for as long as your account is active, then deleted or anonymised within 30 days of closure unless law requires longer.
- Billing records: for the period required by tax and accounting laws, including GST record-keeping requirements.
- Customer Content: until you delete it or your account is closed, subject to backup cycles.
- Enquiry and support data: up to 24 months after the last interaction.
- Security logs: for the period required under applicable directions issued by CERT-In.
7. Security
We use reasonable security practices including encryption in transit, access controls, least-privilege access, monitoring and isolated environments for malware analysis. No system is completely secure; if a personal data breach occurs, we will notify affected users and the Data Protection Board of India as required by law.
8. Your rights
Subject to applicable law, you have the right to:
- obtain a summary of your personal data and the processing we carry out;
- correct, complete or update inaccurate personal data;
- request erasure of your personal data (see Account & Data Deletion);
- withdraw consent at any time, as easily as you gave it, without affecting processing before withdrawal;
- nominate another person to exercise your rights in the event of death or incapacity;
- raise a grievance with us, and if unresolved, with the Data Protection Board of India.
To exercise these rights, email support@protocorp.in. We may need to verify your identity before acting on a request.
9. Children
The Services are not directed at children under 18. We do not knowingly process a child's personal data without verifiable consent of a parent or lawful guardian, and we do not track, behaviourally monitor or target advertising at children. If you believe a child has given us data, contact us and we will delete it.
10. Cookies
We use only cookies and similar technologies needed to run the Services. See our Cookie Policy.
11. Mobile applications
Our apps request device permissions (such as camera, microphone, network or notifications) only when needed for a feature you use, and you can revoke them in your device settings. Data handling in our apps follows this policy and matches the disclosures in our App Store and Google Play listings.
12. Grievance Officer
In accordance with the Information Technology Act, 2000 and the DPDP Act, our Grievance Officer is [Grievance Officer name], reachable at support@protocorp.in. We acknowledge grievances within 24 hours and aim to resolve them within 15 days. More details are on our Support & Grievances page.
13. Changes
We may update this policy. We will post the new version with an updated effective date and notify you of material changes by email or in the Services.