Privacy Policy
Applies to carbotor.co.in, chamelion.ai, and the Carbotor field application.
1. Who we are
Carbotor Technologies Private Limited ("Carbotor", "we", "us") is the data fiduciary responsible for the personal data described in this policy. Carbotor manufactures pyrolysis equipment and owns and operates the Chamelion.ai evidence platform, the CarboSource deployment programme, and the Carbotor field application used by operators in the field.
Registered office: Flat No. 101, Royal Happy Homes, 8-3-25 & 26, Old Bowenpally, Secunderabad, Hyderabad – 500011, Telangana, India. CIN: U35109TG2020PTC142430. Contact: support@carbotor.co.in.
2. Scope
This policy covers personal data we collect through our marketing websites (carbotor.co.in, chamelion.ai) and through the Carbotor field application (the "App") used to capture field evidence. It is written to align with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025.
3. What personal data we collect
| Data | When / why we collect it |
|---|---|
| Mobile number | When you log in to the App (one-time passcode). |
| Consent records | When you accept or decline each purpose in the App (we keep a record of your choice). |
| Location (GPS) and geofence | When you capture field evidence. |
| Photographs | When you capture field evidence. |
| Participant identity and a device key | To identify your device and protect your records. |
| Aadhaar offline verification evidence | Only if you choose Aadhaar-based identity proof. We do not store your Aadhaar number or full Aadhaar file. |
| Name, organisation, email, phone, site/plant details | When you submit the "express interest" form on our websites. |
We collect this data on the basis of your consent, which you give for each purpose separately and can withdraw at any time (see Sections 7 and 8).
4. Why we use your data (purposes)
- Identity and login — to sign you in and secure your account.
- Field evidence capture — to record biomass/biochar field activity you choose to log.
- Identity proof (optional) — to verify identity via Aadhaar offline evidence, only if you opt in.
- Responding to enquiries — to follow up on "express interest" submissions.
We do not sell your personal data, and we do not use it for behavioural advertising or to track, profile, or target children.
5. How your data is stored, shared, and transferred
Records you create in the App are stored on your device and are uploaded only when you choose. Where we process data on our servers, we use third-party service providers acting on our instructions — for example, cloud hosting, email, and SMS/identity providers — under contractual data-protection terms.
Cross-border transfer. Some of these providers are located outside India (currently in the United States). Your personal data may therefore be processed and stored outside India. We transfer data on the basis of your consent and under contractual data-protection terms with these providers, and only to destinations not restricted by the Government of India.
6. How long we keep your data
We keep personal data only for as long as needed for the purpose it was collected for, or as required by law, and then delete or anonymise it. Account-related data is kept while your account is active and for a reasonable period afterwards. If you withdraw consent or ask us to delete your data, we will delete it unless we are legally required to keep it.
7. Your rights
Under the DPDP Act you may:
- Access — ask what personal data we hold about you and how we use it;
- Correct / update — ask us to correct inaccurate or incomplete data;
- Erase — ask us to delete your data;
- Grieve — raise a complaint with our Grievance Officer (Section 9);
- Nominate — nominate another person to exercise your rights if you die or are incapacitated.
To exercise any right, contact us at support@carbotor.co.in. We will respond within the timelines required under the DPDP Rules.
8. Withdrawing consent
You can withdraw consent for any purpose at any time — in the App under Settings → Privacy & consent, or by emailing support@carbotor.co.in. Withdrawing consent is as easy as giving it. After you withdraw, we stop the relevant processing and delete the related data unless the law requires us to keep it. Withdrawing does not affect processing that already happened lawfully.
9. Grievance Officer and complaints
Grievance Officer: support@carbotor.co.in. We will acknowledge and address grievances and resolve them within 90 days. If you are not satisfied, you may complain to the Data Protection Board of India through its official portal.
10. Children's data
The App is intended for adults. If a user is under 18, we require verifiable parental consent before processing their data, using a legally recognised verification method, and we do not track, profile, monitor, or run behavioural targeting on children.
11. Aadhaar
Where you choose Aadhaar-based identity proof, we use an offline verification approach and do not store your Aadhaar number or full Aadhaar file. This feature is optional; you may use another method.
12. Security
We use reasonable technical and organisational safeguards (including device-bound keys and access controls) to protect personal data. No system is perfectly secure, but we work to protect your data against loss, misuse, and unauthorised access.
13. Data breach
If a personal-data breach occurs, we will notify affected users and the Data Protection Board of India without undue delay, as required by law.
14. Cookies and analytics
Our websites currently use no third-party analytics or advertising trackers. If we add analytics in future, we will update this policy and obtain consent where required.
15. Changes to this policy
We may update this policy. We will post the updated version here with a new "last updated" date and, where required, notify you.
16. Contact
Carbotor Technologies Private Limited — Flat No. 101, Royal Happy Homes, 8-3-25 & 26, Old Bowenpally, Secunderabad, Hyderabad – 500011, Telangana, India. Privacy: support@carbotor.co.in · Grievances: support@carbotor.co.in