Privacy Policy
Aadrila Technologies Private Limited
Aadrila Technologies Private Limited ("Aadrila", "we", "us", or "our") operates the website https://www.aadrila.com, associated subdomains, APIs, mobile applications (if any), and our SaaS platform for identity verification, KYC/AML solutions, document intelligence, fraud detection, underwriting automation, and related AI-powered services (collectively, the "Services").
We are committed to protecting your privacy and handling personal data responsibly in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act), Information Technology Act, 2000 & rules thereunder, and other applicable Indian laws, as well as any sector-specific regulations (RBI Master Directions on KYC, IRDAI guidelines, etc.).
This Privacy Policy explains how we collect, use, disclose, store, protect, and delete personal data when you:
- Visit our website(s)
- Use or interact with our Services (as an enterprise customer, end-user, or in demo/sandbox environments)
- Communicate with us (support, sales, marketing)
Information We Collect
A. Information provided by you or your organization
- Business/contact details: company name, designation, work email, phone, address
- Account credentials and profile data
- Payment/billing information (handled by PCI-DSS compliant third-party processors)
- Any data you upload or submit during onboarding, demos, support tickets, or use of Services
B. Personal data processed as part of the Services (on behalf of our Customers)
We act primarily as a data processor (or data fiduciary in certain limited contexts) when processing personal data on behalf of our enterprise Customers (banks, NBFCs, insurers, healthcare providers, etc.). Typical categories include:
- Identity information (name, date of birth, father's name, PAN, Aadhaar number/masked Aadhaar, Voter ID, passport, driving license, etc.)
- Contact information
- Biometric data / facial images / liveness data (where Customers enable biometric/face-match verification)
- Address proof documents
- Financial / income / employment related documents
- Photographs, selfies, video recordings (for liveness / video KYC)
- Any other data contained in documents or data sources you instruct us to process
C. Automatically collected data
- Device & network information: IP address, browser type/version, OS, device ID, screen resolution
- Usage & performance data: pages visited, time spent, features used, API calls, error logs
- Cookies & similar technologies (see our Cookie Policy below or link)
D. Data from third-party sources (when enabled by Customer)
- Verification results from government databases, credit bureaus, CKYC, DigiLocker, GST portal, MCA, Udyam, etc.
- Publicly available sources for sanctions/PEP screening
How We Use Your Information
We use personal data for the following purposes:
- To provide, maintain, improve, and secure the Services
- To perform identity verification, document extraction, fraud detection, risk scoring, AML screening, underwriting support, etc., strictly as instructed by our Customer
- To communicate with you about your account, support queries, product updates, security notices
- To comply with legal obligations (KYC/AML laws, court orders, regulatory audits)
- To prevent fraud, abuse, unauthorized access
- For internal analytics, product development, debugging (almost always in pseudonymized/de-identified form)
- With your consent (or Customer's consent) — for marketing, case studies, testimonials
Data Retention
- Account & contact data — retained while your account is active + 2 years thereafter (or longer if required by law)
- Service-processed personal data — retained only as long as instructed by the Customer or required by applicable law (typically 5–10 years for KYC/AML records under PMLA/RBI rules)
- Logs & analytics — retained 12–36 months depending on purpose
After retention period, data is securely deleted or irreversibly anonymized.
International Data Transfers
Aadrila is headquartered in India. Some sub-processors and cloud infrastructure may be located outside India (AWS/GCP/Azure regions in Singapore, US, EU, etc.). We ensure appropriate safeguards (Standard Contractual Clauses, adequacy decisions, or binding corporate rules where applicable) for cross-border transfers.
Security
We implement industry-standard technical, organizational, and physical measures (ISO 27001-aligned controls where applicable), including encryption in transit & at rest, access controls, regular penetration testing, and incident response processes. However, no system is 100% secure.
Your Rights (Under DPDP Act & Applicable Law)
Where we are the data fiduciary, or to the extent permitted under the contract with our Customer, you may:
- Access / obtain copy of your personal data
- Correct inaccurate data
- Erase data (subject to legal retention obligations)
- Withdraw consent (where processing is consent-based)
- Grievance redressal
To exercise rights, contact: support@aadrila.com — We will respond within timelines prescribed under the DPDP Act.
Children's Privacy
Our Services are not directed to children under 18. We do not knowingly collect data from children.
Changes to This Policy
We may update this Policy. Continued use after changes constitutes acceptance.
Grievance Officer
Name: Mansi Shukla
Contact Us
Privacy-related queries: support@aadrila.com
Registered Office
Aadrila Technologies Private Limited
Kaithora House, B-1/127, Sector-K, Aliganj,
Lucknow, Uttar Pradesh, India - 226024
CIN: U74999UP2017PTC094688
Corporate Address
Unit 303 and 304, Cosmos, CTS, 399,
Swami Vivekanand Rd, near Golden Tobacco Company,
Gautam Ashish Society, Navpada, Vile Parle West,
Mumbai, 400056