Privacy Policy

Welcome to OPAAI Private Limited (“OPAAI,” “we,” “our,” or “us”). We are a deep-tech robotics and artificial intelligence enterprise incorporated in India, operating from the Incubation Center, Indian Institute of Technology (IIT) Patna, Bihta, Patna, Bihar - 801106, India.

This Privacy Policy governs the processing of personal and technical data collected through our website (https://opaai.in), our enterprise cloud platforms, proprietary computer vision analytics engines, digital twin modeling services, API integrations, and field-deployed autonomous drone operations (collectively, the “Services”).

By accessing or utilizing our Services, you acknowledge that you have read, understood, and agreed to the practices outlined in this policy. If you represent an organization or governmental entity, you certify that you possess the requisite authority to bind that entity to this Privacy Policy.

Depending on your engagement with OPAAI, we collect and process several categories of information:

OPAAI processes collected data strictly for lawful, legitimate enterprise purposes:

• Digital Twin & Analytics Generation: Transforming aerial photogrammetry and LiDAR data into millimeter-accurate 3D point clouds, progress tracking models, and automated engineering reports.
• Autonomous Mission Planning & Flight Safety: Computing collision avoidance vectors, path optimization algorithms, and validating flight paths against airspace restrictions (DGCA Digital Sky).
• Computer Vision Neural Network Inference: Running proprietary deep learning models to identify infrastructure anomalies, road surface cracks, structural corrosion, and site safety violations.
• Platform Administration & Identity Security: Authenticating enterprise logins, managing role-based access permissions, preventing unauthorized access, and executing disaster recovery.
• Customer Support & Technical Consultation: Responding to client service requests, diagnosing software or telemetry issues, and providing operational updates.
• Regulatory & Legal Compliance: Maintaining statutory flight logs mandated by civil aviation authorities and complying with Indian taxation and corporate disclosure requirements.

As an autonomous drone and computer vision provider, OPAAI strictly adheres to Privacy-by-Design principles. We recognize the importance of individual privacy during aerial data acquisition over infrastructure corridors and construction environments.

OPAAI does not sell, rent, lease, or monetize client data or personal information. We disclose data only in the following limited, legally regulated scenarios:

• Accredited Cloud Infrastructure Partners: We host data in Tier-IV enterprise facilities (e.g., Amazon Web Services, Microsoft Azure, Google Cloud) that provide AES-256 encryption at rest and ISO/IEC 27001 certifications.
• Civil Aviation & Law Enforcement Authorities: When required by statutory mandates from the Directorate General of Civil Aviation (DGCA), Ministry of Civil Aviation, or under valid judicial subpoenas.
• Enterprise Authorized Collaborators: With third-party subcontractors or flight operators specifically authorized by your organization under signed non-disclosure agreements (NDAs).
• Corporate Restructuring: In the event of a merger, acquisition, or sale of company assets, client contracts and data protections will remain intact under the acquiring entity.

We employ state-of-the-art technological and organizational measures to defend your data against accidental loss, unauthorized access, alteration, and exfiltration:

Our engineering infrastructure isolates each enterprise tenant into separated logical or physical storage partitions, preventing any intermingling or unintended exposure between clients.

We store telemetry, survey imagery, and 3D digital models for as long as your enterprise subscription or contractual engagement remains active, or as needed to resolve disputes, enforce agreements, or satisfy statutory requirements (e.g., aviation safety records).

In accordance with the Digital Personal Data Protection Act (DPDP Act 2023) and national digital infrastructure directives, client project data generated within India is primarily localized and stored on servers located within the Republic of India.

Upon contract termination or written request, OPAAI initiates secure data erasure or provides a complete cryptographic export of client assets within thirty (30) business days.

Under applicable data protection legislation (including India’s DPDP Act 2023 and the General Data Protection Regulation for EU residents), you are entitled to the following rights:

• Right to Access: Request a complete summary of personal data held about you by OPAAI.
• Right to Rectification: Request correction of inaccurate, incomplete, or out-of-date information.
• Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data when no longer necessary for contractual or legal purposes.
• Right to Data Portability: Obtain a structured, machine-readable copy (e.g., JSON or CSV) of your data.
• Right to Withdraw Consent: Withdraw previously granted consent for non-essential analytics or communications.
• Right of Grievance Redressal: File a complaint directly with our Data Protection Officer or the relevant Data Protection Board.

To exercise any of these statutory rights, please submit an email request to privacy@opaai.in or info@opaai.in. We respond to verified inquiries within thirty (30) days.

Our web portal employs cookies and similar browser storage mechanisms to enhance user experience, remember dark/light visual theme preferences, and track telemetry loading performance.

You may configure your browser to reject all non-essential cookies. Please note that disabling essential cookies may impact certain interactive capabilities, such as 3D canvas rendering or authenticated session persistence.

OPAAI reserves the right to revise this Privacy Policy periodically to reflect technological advancements, operational enhancements, or statutory amendments. When changes occur, the “Effective Date” at the top of this document will be updated.

For material changes affecting data usage rights, we will provide prominent notification on our website or notify account administrators directly prior to implementation.

If you have questions, feedback, or grievances regarding this Privacy Policy or our data handling practices, please contact our designated compliance officer: