Privacy Policy

DEXAR SOLUTIONS LLP • Website • Applications • IoT Devices • AI-Enabled Services

1. Scope and Applicability

This Privacy Policy outlines how Dexar Solutions LLP (“Dexar”, “we”, “our”, or “us”) collects, uses, stores, and protects personal data across all of our operational touchpoints, including:

• Our primary web platform (www.dexarsolutions.com), subdomains, and customer portals.
• Dexar mobile applications (iOS and Android) and cloud APIs.
• Dexar Smart Switches, IoT controllers, hub hardware, and connected automation ecosystems.
• Support tickets, commercial inquiries, and direct business interactions.

This policy applies to website visitors, end-user account holders, authorized enterprise users, and business partners. It does not extend to third-party services or platforms operating outside Dexar's direct control.

Dexar is an IoT and AI product company; this policy applies to all current and future Dexar hardware and software products, including but not limited to smart switches, IoT controllers, hubs, sensors, and AI-enabled services, unless a product-specific policy states otherwise.

2. Information We Collect

We collect personal and technical information necessary to deliver secure, reliable IoT services and application management. The categories of data collected are detailed below:

3. How We Collect Information

• Direct Submissions: Data provided directly when registering accounts, filling out contact forms, placing orders, or submitting support tickets.
• Automated IoT Streams: Data generated automatically as your connected Dexar smart hardware syncs operational telemetry with our cloud infrastructure.
• Third-Party Integrations: Information provided by business accounts granting individual user permissions, or via third-party smart home integrations authorized by you.

4. Purpose of Processing

Dexar processes personal data strictly for specified, legitimate operational purposes:

• Core Operational Delivery: Remote state control, automation rule execution, OTA (Over-The-Air) firmware updates, and account authentication.
• Customer Support: Diagnosing physical device glitches, resolving cloud syncing delays, and processing warranty claims.
• System Security & Stability: Detecting illegal network activity, mitigating cyber threats, and verifying API requests.
• Operational Communications: Sending critical service alerts, network outage reports, billing notices, and system updates.
• Marketing & Analytics: Providing promotional announcements, product updates, and user surveys (subject to explicit consent).

5. Connected Device & Hardware Telemetry Rules

When deploying any Dexar connected hardware — including smart switches, IoT controllers, hubs, and sensors — specific operational rules govern your telemetry:

• Real-Time Control: Device identification metrics (MAC/IP) and current device state (for example, relay ON/OFF status on smart switches, or the equivalent operational state for other connected hardware) are transmitted continuously to maintain responsive cloud control via mobile applications.
• Usage & Sensor Analytics: Historical usage metrics — such as power/energy consumption for smart switches, or other relevant sensor and operational readings for different Dexar hardware — are compiled and stored to render usage trends within customer dashboards, and, where applicable, to inform Dexar's AI-driven insights and automation features.
• Automated Diagnostics: Hardware crash dumps and connectivity loss logs, across all Dexar connected devices, are evaluated to push stability fixes and firmware patches automatically.

6. Legal Basis for Processing

We process personal data in compliance with applicable privacy legislation (including India's Digital Personal Data Protection Act, 2023). Legal bases include:

• Contractual Performance: Execution of hardware warranties, SaaS agreements, and mobile application functionality.
• Consent: Explicit permission granted for opt-in features, promotional alerts, or optional analytics.
• Legal Obligation: Compliance with tax regulations, statutory accounting, and lawful law enforcement requests.
• Legitimate Interest: Standard business defenses, infrastructure optimization, and cybersecurity operations.

7. Cookies and Web Tracking

Our web interfaces utilize functional, session, and analytical cookies to remember login credentials, optimize dashboard latency, and analyze site traffic. Non-essential tracking cookies are disabled by default until consent is provided via our cookie banner. You can manage or block cookies through your individual browser controls at any time.

8. Information Sharing and Disclosure

Dexar does not sell, rent, or trade personal data to third parties. We disclose information solely under the following operational conditions:

• Vetted Service Providers: Cloud hosting vendors (e.g., AWS/Azure), authentication services, SMS/email gateways, and payment processors bound by strict confidentiality obligations.
• Enterprise Administrators: Account telemetry for devices registered under corporate/enterprise master licenses is accessible to designated corporate administrators.
• Legal Requirements: Disclosure required by law, subpoena, court order, or regulatory mandate.
• Corporate Transactions: Transferred assets resulting from mergers, acquisitions, or restructuring, bound by matching privacy protections.

9. Enterprise and B2B Processing

Where Dexar acts as a Data Processor providing managed IoT solutions to business customers (Data Fiduciaries):

• We process operational telemetry solely according to the master B2B commercial contract and lawful customer instructions.
• End-users operating under enterprise accounts should submit data rights inquiries directly to their organization’s internal system administrator.

10. Data Security and Retention

Security Safeguards

• In-Transit Encryption: TLS 1.3 encryption applied to all data moving between hardware switches, mobile apps, and cloud servers.
• At-Rest Encryption: AES-256 encryption applied to master database credentials, tokens, and sensitive logs.
• Access Controls: Strict Role-Based Access Controls (RBAC) limiting employee access to production databases.

Data Retention Rules

• Active Accounts: Data is retained throughout the operational lifecycle of an active user account.
• Inactive Telemetry: Purged or permanently anonymized after 24 months of continuous account inactivity.
• Financial Data: Retained for statutory periods mandated by applicable tax laws (typically 7–8 years).

11. Your Statutory Data Rights

Under applicable data protection frameworks, you maintain specific rights regarding your personal data:

• Right to Access: Request a copy of your personal data processed by Dexar.
• Right to Rectification: Request corrections for inaccurate or incomplete information.
• Right to Erasure: Request complete deletion of personal data where legal retention rules no longer apply.
• Right to Withdraw Consent: Revoke marketing or optional processing permissions at any time.
• Right to Nominate: Nominate a representative to exercise data rights in the event of incapacity or death.

12. Grievance Officer & Contact Details

In accordance with applicable privacy laws, Dexar Solutions LLP has appointed a designated Grievance Officer to handle data protection inquiries, access requests, or privacy concerns:

Response SLA: We acknowledge all formal privacy grievances within 48 hours and aim to issue resolutions within 30 days (or applicable legal deadlines).