Privacy Policy

This document applies to OSMOAIR™ monitoring products, gateways, firmware, software, cloud services, local interfaces and related services supplied by Arlikat Infotech Pvt. Ltd., operating under the OSMOAIR™ brand.

OSMOAIR™(An Arlikat Infotech Brand)
#3484, 4th 'H' Block, 80 Feet Road,
Banashankari 6th Stage, Raghuvanahalli,
Bengaluru 560062, Karnataka, India

Email: support@osmoair.com

PRIVACY POLICY

In this Privacy Policy, "OSMOAIR", "we", "our" and "us" mean Arlikat Infotech Pvt. Ltd. operating under the OSMOAIR™ brand.

OSMOAIR provides environmental, indoor-air-quality and related monitoring products for professional, commercial and industrial applications.

The way in which OSMOAIR handles data depends primarily on the deployment mode selected by the Customer.

OSMOAIR Products may be deployed in either of the following modes.

A. Cloud-Connected / Remote Monitoring Deployment

In a cloud-connected deployment, authorised OSMOAIR devices transmit measurement, device-status and related operational data to the OSMOAIR Platform through an encrypted communication channel.

Depending on the services selected by the Customer, the Platform may provide:

• remote dashboards;
• historical records;
• reports;
• alarms and notifications;
• escalation;
• multi-site monitoring;
• device management; and
• user and access management.

In this deployment, OSMOAIR receives and processes data required to provide the Platform and related services.

B. Local / Offline Deployment

In a local or offline deployment, the Product operates entirely within the Customer's own network or infrastructure.

The Customer determines how measurement and operational data is collected, stored, transmitted, integrated or otherwise used within its environment.

OSMOAIR does not ordinarily receive, store, transmit or have remote access or visibility to measurement or operational data generated by a Product operating in local/offline mode.

OSMOAIR will receive such data only if the Customer intentionally provides it to OSMOAIR, for example by sending:

• diagnostic logs;
• configuration files;
• screenshots;
• exported measurements; or
• other technical information

for troubleshooting, calibration, warranty or technical-support purposes.

The deployment mode applicable to a particular installation may be recorded in the applicable quotation, purchase order, scope of work, AMC, subscription or other written commercial document.

"Personal data" means information relating to an identifiable individual.

Depending on the Customer's relationship with OSMOAIR and the deployment mode selected, we may process the following personal data.

Business and Commercial Contacts

We may process:

• name;
• business email address;
• business telephone number;
• employer or organisation;
• designation or role;
• correspondence;
• quotation and purchase-related contact information; and
• billing or delivery contact information.

We use this information to communicate with Customers, prepare quotations, fulfil orders, provide services, maintain commercial records and meet legal or accounting obligations.

Platform User Information

This category applies primarily to Customers using the OSMOAIR cloud-connected Platform.

We may process:

• user name;
• business email;
• account identifier;
• user role;
• permission level;
• authentication and account-security information;
• login and access records;
• audit records;
• alert-recipient information; and
• records of actions performed through a Platform account.

This information is used to operate, administer and secure the Platform.

Support Information

Where a person contacts us for technical or customer support, we may process:

• contact details;
• support correspondence;
• support-ticket history;
• screenshots;
• diagnostic information; and
• information voluntarily supplied to us for troubleshooting.

Environmental measurements generated by OSMOAIR Products may include parameters such as:

• temperature;
• relative humidity;
• CO₂;
• particulate matter;
• VOC;
• NOx;
• AQI;
• H₂;
• CO;
• O₂;
• H₂S;
• NH₃; and
• other supported environmental or sensor parameters.

Device and operational information may include:

• device serial number;
• firmware version;
• configuration;
• calibration information;
• connectivity status;
• fault information; and
• installation or site information.

Such information is generally device, operational or environmental data and is not personal data by itself.

It may fall within the scope of personal data only where it is combined with information that identifies or relates to a particular individual.

For example, a sensor reading itself is normally not personal data, while a record showing that a named Platform user changed an alarm threshold or acknowledged a specific alert may constitute personal data relating to that user.

For Customers using OSMOAIR Products exclusively in local/offline mode:

OSMOAIR has no routine access to the Customer's measurement history, operational database or locally stored Product data.

The Customer controls:

• data storage;
• retention;
• deletion;
• network access;
• database configuration;
• integrations;
• access permissions;
• backup;
• cybersecurity; and
• onward transmission of such data.

Where such data never leaves the Customer's environment, its handling is governed by the Customer's own policies and applicable legal obligations and not by this Privacy Policy.

Where applicable, OSMOAIR may process personal data to:

• respond to enquiries;
• prepare quotations;
• process orders;
• supply and commission Products;
• create and administer Platform accounts;
• provide remote monitoring services;
• configure alerts and notifications;
• provide technical support;
• perform calibration or warranty services;
• maintain security and access records;
• investigate misuse or security incidents;
• maintain accounting and commercial records;
• comply with legal or regulatory obligations; and
• establish, exercise or defend legal claims.

OSMOAIR does not sell personal data.

OSMOAIR does not use Customer measurement data for third-party advertising or behavioural profiling.

Depending on the circumstances, OSMOAIR may process personal data in different capacities.

Where OSMOAIR determines why and how personal data is processed for its own business activities, OSMOAIR acts as the entity responsible for that processing under applicable data-protection law.

Where a Customer determines the purpose for which personal data is processed through the OSMOAIR Platform and OSMOAIR processes that information only to provide services to the Customer, OSMOAIR may act as a processor or service provider on behalf of that Customer.

For local/offline deployments where data remains entirely within the Customer's environment, OSMOAIR does not process that data unless it is intentionally provided to us.

We may provide personal data to service providers where reasonably necessary to operate our business or provide the contracted services, including providers of:

• cloud infrastructure;
• email or communications services;
• technical support systems;
• accounting services;
• installation;
• calibration; and
• field service.

Such providers may process information only for the relevant service and subject to applicable contractual and legal requirements.

We may also disclose information where required by law, court order or lawful governmental request, or in connection with a merger, acquisition, restructuring or transfer of the relevant business.

We do not otherwise sell Customer personal data to third parties.

Cloud-connected Platform data may be stored or processed using infrastructure selected by OSMOAIR for providing the applicable service.

Where personal data is processed outside India, OSMOAIR will handle such transfers in accordance with applicable Indian law.

Data generated by a local/offline deployment and retained entirely within the Customer's infrastructure is not transferred by OSMOAIR.

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected or where retention is required for legal, accounting, contractual, warranty, security or dispute-resolution purposes.

Cloud Platform measurement history and operational records are retained according to the applicable subscription, service configuration or Commercial Documents.

Support and diagnostic material is retained only as reasonably necessary to investigate and resolve the relevant issue and any associated warranty, security or recurrence concern.

Data stored exclusively within a Customer's local/offline environment is retained or deleted according to the Customer's own policies. OSMOAIR cannot access or delete such data.

OSMOAIR applies reasonable technical and organisational safeguards appropriate to the services being provided.

These may include:

• encrypted communications;
• access controls;
• role-based permissions;
• authentication controls;
• logging;
• system monitoring; and
• appropriate infrastructure security measures.

Customers remain responsible for securing their own systems and environments, including:

• passwords and credentials;
• user permissions;
• Ethernet and Wi-Fi networks;
• firewall configuration;
• VLANs and network segmentation;
• servers and databases;
• physical access;
• backups; and
• security of third-party integrations.

Where OSMOAIR becomes aware of a personal-data breach involving personal data under its control, OSMOAIR will take reasonable steps to contain, investigate and address the incident and will make notifications required under applicable law.

Customers should promptly notify OSMOAIR if they suspect unauthorised access to an OSMOAIR Platform account or compromise involving an OSMOAIR Product.

Individuals may exercise rights available to them under applicable data-protection law, which may include rights relating to:

• access to information about processing;
• correction or updating of information;
• erasure where applicable;
• withdrawal of consent where processing is based on consent;
• grievance redressal; and
• nomination or other statutory rights where applicable.

Requests may be sent to:

support@osmoair.com
Subject: Privacy

Requests concerning information stored exclusively within a Customer's local/offline system should be directed to that Customer because OSMOAIR does not have access to such information.

Customers may integrate OSMOAIR Products with third-party systems such as:

• building-management systems;
• SCADA systems;
• databases;
• historians;
• gateways;
• cloud platforms; or
• other software.

OSMOAIR is not responsible for how a third-party system collects, stores, uses or protects information. Such processing is governed by the relevant third party's terms and privacy practices.

OSMOAIR handles personal data in accordance with applicable Indian data-protection and information-technology laws, including provisions of the Digital Personal Data Protection Act, 2023 and related rules as and when applicable.

OSMOAIR may update this Privacy Policy from time to time.

The current version and effective date will be identified in the document. Material changes may also be communicated through the Customer's usual business contact or the OSMOAIR Platform.