Privacy Policy
Foundational Commitment
PushpakO2 Private Limited (“PushpakO2”, “Company”, “We”, “Us”, or “Our”) operates in domains involving critical technology, environmental intelligence, unmanned aerial systems, and regulatory-facing deployments.
Accordingly, PushpakO2 adopts a privacy-by-design and security-first doctrine where data is treated as critical infrastructure, collection is an exception and not a norm, access is privilege-based, and minimization is the default behavior.
This Privacy Policy reflects PushpakO2’s zero-tolerance stance toward misuse, leakage, or over-collection of information.
Legal & Regulatory Alignment
This Policy is framed in consonance with the Digital Personal Data Protection Act, 2023 (India), the Information Technology Act, 2000, CERT-In directions, and aviation-adjacent regulatory frameworks including DGCA and MoCA guidelines.
Where sector-specific or project-specific regulations apply, those provisions shall prevail over this general policy.
Scope of Applicability
This Policy applies to all interactions including website visits, demonstrations, pilots, proof-of-concepts, environmental monitoring operations, contractual engagements, vendor and employee data handling, and hardware-software interfaces.
Engagement with PushpakO2 constitutes explicit acknowledgment and acceptance of this Policy.
Data Classification Framework
Personal Data is collected strictly on a need-to-know basis and may include official identification details only when legally mandated.
PushpakO2 does not collect biometric identifiers, personal lifestyle data, or behavioral profiling information.
Technical and access data such as IP addresses, session logs, and system audit logs are generated automatically for security, compliance, and forensics.
Operational, sensor, and environmental data generated during missions is treated as non-personal intelligence and is often owned by the commissioning authority.
Purpose Limitation Doctrine
Data is processed strictly for contractual delivery, statutory compliance, environmental analysis, system validation, R&D improvement, and security audits.
Under no circumstances is data used for advertising, resale, cross-project analytics without consent, or training third-party AI systems.
Consent & Lawful Processing
Processing is based on explicit consent, contractual necessity, legal obligation, regulatory directive, or legitimate interest aligned with public and environmental good.
Implied or ambiguous consent is not relied upon for sensitive data processing.
Data Retention & Lifecycle Management
Data is retained only for the duration necessary based on contractual, statutory, or audit requirements.
Upon completion, data is securely erased, anonymized, or archived in encrypted cold storage where legally mandated.
Data Sovereignty & Localization
Core infrastructure prioritizes India-based servers.
Cross-border data transfers are exceptional, legally vetted, and contractually protected.
Information Security Architecture
PushpakO2 implements encryption at rest and in transit, zero-trust principles, multi-factor authentication, continuous monitoring, and hardware-level safeguards.
Unauthorized access or data exfiltration attempts are treated as serious security breaches.
Data Sharing & Disclosure
PushpakO2 does not sell, rent, or commercially exploit data.
Limited disclosure may occur only to government authorities, regulators, courts, or contractually bound service providers under strict NDAs.
Government & Strategic Projects
For sensitive deployments, the client retains ownership of mission data.
PushpakO2 acts strictly as a data processor unless otherwise contractually agreed.
Rights of Data Principals
Subject to applicable law, individuals may request access, rectification, erasure, or restriction of processing.
Requests conflicting with national security, regulatory obligations, or active investigations may be lawfully refused with justification.
Cookies & Digital Footprint
Only essential functional cookies are used.
No third-party advertising trackers or behavioral profiling mechanisms are deployed.
Third-Party Interfaces
PushpakO2 is not responsible for privacy practices of third-party platforms linked through its systems.
Breach Response & Incident Management
In the event of a security incident, PushpakO2 follows immediate containment, forensic assessment, regulatory notification if required, and stakeholder communication as per law.
Policy Revisions
This Policy may be updated to reflect legal, regulatory, or technological changes.
Continued engagement constitutes acceptance of revised terms.
Governing Law & Jurisdiction
This Policy is governed by the laws of India.
Exclusive jurisdiction lies with Indian courts.
Contact & Grievance Redressal
PushpakO2 Private Limited
Email: legal@pushpako2.com
Website: www.pushpako2.com
Final Declaration
PushpakO2 does not treat privacy as a compliance checkbox.
It is a design constraint, ethical boundary, and strategic obligation.
