Privacy Policy
Scope: carbotor.co.in, the Akshaya Dhara field app and the Akshaya Dhara partner portal.
1. Who we are
Carbotor Technologies Private Limited ("Carbotor", "we", "us") is the data fiduciary responsible for the personal data described in this policy. Carbotor manufactures pyrolysis equipment and owns and operates the Akshaya Dhara dMRV platform, the CarboSource deployment programme, and the Akshaya Dhara field application for operators in the field.
Registered office: Flat No. 101, Royal Happy Homes, 8-3-25 & 26, Old Bowenpally, Secunderabad, Hyderabad – 500011, Telangana, India. CIN: U35109TG2020PTC142430. Contact: hello@carbotor.co.in.
2. Scope
This policy covers personal data collected through carbotor.co.in, the Akshaya Dhara field app (the "App") used to capture field evidence, and the Akshaya Dhara partner portal used by partners and implementers (the "Portal"). It is written to align with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025.
This notice is available in English. Telugu and Hindi versions will be provided for farmers and producers in the App and on request.
3. What personal data we collect
| Data | When / why we collect it |
|---|---|
| Mobile number | When you log in to the App (one-time passcode). |
| Consent records | When you accept or decline each purpose in the App (we keep a record of your choice). |
| Location (GPS) and geofence | When you capture field evidence. |
| Photographs | When you capture field evidence. |
| Participant identity and a device key | To identify your device and protect your records. |
| Aadhaar offline verification evidence | Only if you choose Aadhaar-based identity proof. We do not store your Aadhaar number or full Aadhaar file. |
| Name, organisation, email, phone, site/plant details | When you send a CarboSource evaluation request or a partner-access request. |
| IP address, device and browser information, and server logs | When you visit carbotor.co.in. These are collected by our hosting provider (Vercel) to deliver and secure the website. |
We collect this data on the basis of your consent, which you give for each purpose separately and can withdraw at any time (see Sections 7 and 8).
4. Why we use your data (purposes)
- Identity and login — to sign you in and secure your account.
- Field evidence capture — to record biomass/biochar field activity you choose to log.
- Identity proof (optional) — to verify identity via Aadhaar offline evidence, only if you opt in.
- Responding to enquiries — to follow up on CarboSource evaluation or partner-access requests.
We do not sell your personal data, and we do not use it for behavioural advertising or to track, profile, or target children.
5. How your data is stored, shared, and transferred
Records you create in the App are stored on your device and are uploaded only when you choose. Where we process data on our servers, we use third-party service providers acting on our instructions — for example, cloud hosting, email (GoDaddy), WhatsApp Business (Meta), and SMS/identity providers — under contractual data-protection terms.
The website does not store enquiries. The enquiry form opens your own email app or WhatsApp. Your message is received in our mailbox, hosted by GoDaddy, or our WhatsApp Business account, operated by Meta.
Sharing for carbon credit claims. To prepare and support carbon credit claims, we share field custody records with carbon registries, independent verification and validation bodies, and buyers of the related credits. These records may include location data, photographs and participant identifiers. We share only what is needed for the claim to be prepared, checked and supported. Sharing records does not mean a claim has been certified or approved.
Cross-border transfer. Our hosting providers process data outside India, including in the United States and Singapore. Vercel also uses a global delivery network. Our SMS provider, MSG91, processes data in India and Singapore, and other regions used by MSG91's cloud providers. Your personal data may therefore be processed and stored outside India. We transfer data on the basis of your consent and under contractual data-protection terms with these providers, and only to destinations not restricted by the Government of India.
6. How long we keep your data
We keep personal data only for as long as needed for the purpose it was collected for, or as required by law, and then delete or anonymise it. In particular:
- Access and security logs — kept for at least one year.
- Field custody records — kept for the life of the related carbon credit, plus any retention period required by law.
- Enquiry data — kept for 12 months after the last contact, then deleted.
If you withdraw consent or ask us to delete your data, we will delete it unless we must keep it for the reasons set out in Section 8.
7. Your rights
Under the DPDP Act you may:
- Access — ask what personal data we hold about you and how we use it;
- Correct / update — ask us to correct inaccurate or incomplete data;
- Erase — ask us to delete your data;
- Grieve — raise a complaint with our Grievance Officer (Section 9);
- Nominate — nominate another person to exercise your rights if you die or are incapacitated.
To exercise any right, contact us at hello@carbotor.co.in. We will respond within the timelines required under the DPDP Rules.
8. Withdrawing consent
You can withdraw consent for any purpose at any time — in the App under Settings → Privacy & consent, or by emailing hello@carbotor.co.in. Withdrawing consent is as easy as giving it. After you withdraw, we stop the relevant processing and delete the related data, except as described below. Withdrawing does not affect processing that already happened lawfully.
Records already submitted for registry, audit or carbon credit purposes are kept after you withdraw consent. Registries, verifiers and credit buyers rely on these records to check claims that have already been made, and removing them would undermine those claims. We also keep any data that the law requires us to retain. We do not use retained records for any new purpose.
9. Grievance Officer and complaints
Privacy and Grievance Officer: Suresh Solanki, Carbotor Technologies Private Limited, Flat No. 101, Royal Happy Homes, 8-3-25 & 26, Old Bowenpally, Secunderabad, Hyderabad – 500011, Telangana, India. Email: hello@carbotor.co.in.
We will acknowledge and address grievances and resolve them within 90 days. If you are not satisfied, you may complain to the Data Protection Board of India through its official portal.
10. Minimum age
You must be 18 or older to use this website, request a partnership or use the Akshaya Dhara field app.
If we learn that we hold personal data of someone under 18, we will delete it.
11. Aadhaar
Where you choose Aadhaar-based identity proof, we use an offline verification approach and do not store your Aadhaar number or full Aadhaar file. This feature is optional; you may use another method.
12. Security
We use reasonable technical and organisational safeguards (including device-bound keys and access controls) to protect personal data. No system is perfectly secure, but we work to protect your data against loss, misuse, and unauthorised access.
13. Data breach
If a personal-data breach occurs, we will notify affected users without delay. We will also give the Data Protection Board of India a detailed report within 72 hours of becoming aware of the breach, as required by law.
14. Cookies and analytics
Our websites currently use no third-party analytics or advertising trackers. If we add analytics in future, we will update this policy and obtain consent where required.
15. Changes to this policy
We may update this policy. We will post the updated version here with a new "last updated" date and, where required, notify you.
16. Contact
Carbotor Technologies Private Limited — Flat No. 101, Royal Happy Homes, 8-3-25 & 26, Old Bowenpally, Secunderabad, Hyderabad – 500011, Telangana, India. Privacy and Grievance Officer: Suresh Solanki · hello@carbotor.co.in