OperionAI is an enterprise AI automation platform. This Policy explains how we collect, use, and protect personal data of website visitors and platform users. Here is a snapshot of the key principles:
Operion Technologies Private Limited (trading as OperionAI, hereinafter "we", "us", or "Company") is a company incorporated under the laws of India, with its registered office at [Registered Address], India.
We operate an AI-powered business process automation platform (the "Platform") offering services including Order-to-Cash automation, Intelligent Document Processing, and Custom AI workflow automation to enterprise clients.
For the purposes of applicable data protection law, OperionAI acts as:
This Privacy Policy applies to:
This Policy does not govern the personal data that our enterprise customers upload to and process through the Platform. Such data is governed by the applicable Master Services Agreement (MSA) and Data Processing Agreement (DPA) between OperionAI and the customer. Enterprise customers are responsible for their own compliance obligations in relation to the personal data they submit to the Platform.
For enterprise customers, we maintain records of subscriptions, invoices, and billing information. Where payments are processed, we engage reputable third-party payment gateway providers. OperionAI does not directly store credit or debit card numbers or other sensitive payment instrument details. Payment data is handled by PCI-DSS compliant third-party processors, subject to their own privacy policies. We associate payment records with a subscription reference for invoicing and audit purposes.
| Category | Examples | Source |
|---|---|---|
| Identity Data | Name, job title, company | Directly from you |
| Contact Data | Work email, phone number | Directly from you |
| Usage Data | Pages visited, features used, session logs | Automatically collected |
| Technical Data | IP address, browser, device type | Automatically collected |
| Communications Data | Emails, support tickets, call records | Directly from you |
| Marketing Data | Campaign responses, demo request history | Directly & automatically |
We use the information we collect for the following purposes:
We process personal data under the following legal bases, consistent with the Digital Personal Data Protection Act, 2023 (DPDPA), the Information Technology Act, 2000, and IT (SPDI) Rules, 2011:
We do not sell, rent, or trade personal data. We share information only in the following circumstances:
We engage trusted third-party service providers who assist in operating our Platform and business, including:
All sub-processors are bound by contractual data protection obligations at least as stringent as those in this Policy and applicable law.
In the event of a merger, acquisition, restructuring, or sale of assets, personal data may be transferred to the relevant successor entity, subject to equivalent privacy protections.
We may disclose personal data: (a) where required by applicable law, court order, or governmental authority; (b) to protect the rights, property, or safety of OperionAI, our users, or the public; (c) to support law enforcement agencies in connection with investigations on matters related to public safety, to the extent permitted by applicable law; or (d) in connection with anti-fraud activities and security investigations.
We may share personal data with our subsidiaries, affiliates, and group companies on a need-to-know basis. All such personnel are subject to confidentiality obligations no less stringent than those in this Policy.
Where payment processing is involved, we share necessary billing information with reputable, PCI-DSS compliant third-party payment gateway providers. These providers have their own privacy policies governing how they handle payment instrument data. We encourage you to review their policies before completing a transaction.
We may share information with third parties where you have provided explicit consent to such sharing.
Personal data submitted by enterprise customers to the Platform is processed solely under instruction from the customer as Data Fiduciary. OperionAI does not share such data with third parties except as expressly authorised by the customer or required by law.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.
OperionAI implements industry-standard technical and organisational security measures to protect personal data against unauthorised access, loss, destruction, or alteration, including:
In the event of a personal data breach, OperionAI will notify affected parties and, where required, relevant supervisory authorities, in accordance with timelines prescribed by applicable law.
Subject to applicable law, you may have the following rights in relation to your personal data:
To exercise any of these rights, contact us at [email protected]. We will respond within the timelines prescribed by applicable law (generally within 30 days). We may need to verify your identity before processing your request.
Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse website traffic, and support our marketing efforts. We use the following types:
You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect website functionality. We do not use cookies to personally identify individuals without their knowledge.
We may use third-party advertising partners and social media platforms to display relevant advertisements to business audiences based on browsing behaviour and interaction data. You have the right to opt out of interest-based advertising by:
You may opt out of marketing emails at any time by clicking the "Unsubscribe" link in any marketing communication we send. Note that even after unsubscribing from marketing communications, we may still send you transactional or service-related messages essential to your account or contract.
Some browsers allow you to broadcast a "Do Not Track" (DNT) signal. Our website does not currently respond to DNT signals. We continue to collect usage and analytics data in accordance with this Policy regardless of DNT settings. For more information about DNT, visit allaboutdnt.com.
Our website may contain links to third-party websites or integrate with third-party tools. OperionAI is not responsible for the privacy practices of such third parties. We encourage you to review the privacy policies of any third-party service before providing your personal data to them.
Third-party sub-processors engaged by OperionAI (including Google Cloud and Google AI) operate under their own privacy policies, which are consistent with our sub-processing requirements.
OperionAI primarily processes and stores data within India. Where data is processed outside India — for example, through cloud infrastructure or AI services provided by international third parties — OperionAI ensures appropriate safeguards are in place, including contractual protections consistent with applicable Indian data protection law.
International transfers of enterprise customer data require the explicit prior written consent of the relevant customer, as specified in the applicable MSA and DPA.
The OperionAI Platform and website are designed for enterprise and business use and are not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately at [email protected] and we will take prompt steps to delete such data.
OperionAI's Platform uses Artificial Intelligence and machine learning models to automate business processes. In the context of processing customer data, automated processing is performed solely to deliver the contracted services and under the instructions of the customer as Data Fiduciary.
Where AI processing produces outputs that affect business decisions (such as invoice validation flags, extraction results, or exception alerts), customers are provided with a human-in-the-loop oversight mechanism to review, validate, and override automated outputs. No legally significant decisions are made about individuals solely on the basis of automated processing without human oversight, unless expressly agreed with the customer.
OperionAI does not use Customer Data submitted through the Platform to train, develop, or improve generalised AI or machine learning models for use outside the customer's specific contracted use cases. Any AI model improvement based on Platform interactions is conducted only in aggregate, anonymised form, or with the explicit written consent of the relevant customer. Where OperionAI uses third-party AI infrastructure (such as Google Cloud AI / Vertex AI), such services are governed by API usage terms that similarly prohibit the use of submitted data to train general-purpose models.
Casual visitors to the OperionAI website who have not created an account or submitted any personal data are subject to the data collection described in Section 3.2 (automatically collected data) and Section 10 (cookies). If you have inadvertently accessed this website, you are not required to provide any personal information and may leave at any time. Any personal data incidentally collected through your visit will be handled in accordance with this Policy.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
Continued use of our website or Platform after the effective date of any changes constitutes acceptance of the updated Policy.
In compliance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the Digital Personal Data Protection Act, 2023, OperionAI has designated a Grievance Officer to address privacy-related concerns.
For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us at:
This Privacy Policy is governed by the laws of India. Disputes arising from this Policy shall be subject to the exclusive jurisdiction of the courts at Mumbai, India.
<