Privacy Policy

Introduction

Debryx (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our construction waste traceability platform, website, and related services (collectively, the “Platform”).

Please read this policy carefully. By accessing or using the Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, do not use the Platform.

Information We Collect

Personal Data

We may collect personally identifiable information such as:

• Name, email address, phone number, and job title
• Company name, designation, and organisation details
• Account credentials (hashed passwords, authentication tokens)
• Billing and payment information (processed securely by third-party payment processors)

Usage Data

We automatically collect certain information when you access the Platform:

• IP address, browser type, device information, and operating system
• Pages visited, time spent on pages, clickstream data, and referring URLs
• Feature usage patterns, batch creation frequency, and report generation metrics

Waste Management Data

As part of our core service, we collect and process construction waste management data including batch records, evidence photos, weighbridge slips, gate pass information, GPS coordinates, transporter details, and disposal facility records. This data is processed on behalf of our customers and is owned by the respective customer organisation.

How We Use Your Information

We use collected information for the following purposes:

• Providing, maintaining, and improving the Platform
• Processing waste batch records and generating compliance reports
• Authenticating users and securing access to the Platform
• Sending administrative notifications, updates, and security alerts
• Responding to support requests and inquiries
• Complying with legal obligations and regulatory requirements (including CPCB guidelines)
• Analysing usage trends to improve user experience and platform performance

Data Sharing and Disclosure

We may share your information with:

• Service Providers: Third-party vendors who perform services on our behalf (cloud hosting, payment processing, email delivery, OCR processing)
• Regulatory Bodies: When required to comply with applicable laws, regulations, or legal processes (including CPCB and state pollution control boards)
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you have given us explicit permission to share your information

We do not sell your personal information to third parties.

Data Security

We implement industry-standard security measures to protect your data, including AES-256-GCM encryption for sensitive fields at rest, TLS 1.3 for data in transit, role-based access control, per-account rate limiting, and regular security audits. Please see our Security Policy for detailed information.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Platform. Waste management records are retained in accordance with applicable regulatory requirements (typically 7 years from the date of creation, per CPCB guidelines). Upon termination of your account, we will delete or anonymise your data unless retention is required by law.

Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data (subject to legal retention obligations)
• Object to or restrict processing of your data
• Request portability of your data to another service provider
• Withdraw consent at any time where processing is based on consent

To exercise these rights, please contact us at privacy@debryx.in.

Cookies and Tracking

We use essential cookies for authentication and security, functional cookies for platform operation, and analytics cookies to understand usage patterns. You can manage cookie preferences through your browser settings. See our Cookie Policy for detailed information.

Third-Party Services

The Platform integrates with third-party services including Cloudinary (image storage), Google OAuth (optional authentication), and OCR processing services. These providers have their own privacy policies governing data handling. We encourage you to review their policies.

Children’s Privacy

The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the “Last updated” date. We encourage you to review this policy periodically.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

• Email: privacy@debryx.in
• Data Protection Officer: dpo@debryx.in
• Address: Debryx Technologies Pvt. Ltd., Bengaluru, Karnataka, India