Privacy Policy

01.Introduction

UROSECURE, operated by Europa Technosoft Pvt. Ltd. ("we", "our", "us"), is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our AI-powered entry security platform, UROGuard hardware, SecureMe application, and UroCloud services. This policy is framed in line with India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology Act, 2000. Under the DPDP Act, an individual whose personal data is processed is a "Data Principal", and the entity that decides the purpose and means of processing is a "Data Fiduciary". For personal data we handle in our own right (e.g. website enquiries and account administration), Europa Technosoft is the Data Fiduciary. For visitor data captured at a client's premises, the client organisation is the Data Fiduciary and we act as a Data Processor on their behalf — see our Data Processing Policy.

02.Information We Collect

• Visitor identity data: full name, photograph, phone number, government-issued ID number, purpose of visit, and host details — captured at UROGuard entry consoles.
• Organisation data: institution name, administrator contact, number of entry points, and site configuration provided during onboarding.
• Usage data: login timestamps, dashboard access logs, report downloads, and feature usage patterns from the UroCloud platform.
• Device data: IP address, browser type, operating system, and device identifiers when accessing the web dashboard or SecureMe app.
• Communication data: emails, messages, and support tickets sent to UROSECURE.

03.How We Use Your Information

• To operate and maintain the UROSECURE platform and UROGuard entry management system.
• To send real-time visitor notifications to hosts via the SecureMe application.
• To generate security reports, attendance logs, and compliance documentation for your organisation.
• To verify visitor identity and maintain a secure entry record for your premises.
• To improve our AI behaviour analytics and anomaly detection algorithms.
• To respond to your enquiries and provide customer support.
• To send service updates, security advisories, and platform notifications.

04.Consent and Its Withdrawal

Where we rely on your consent to process personal data (for example, optional analytics cookies or marketing communications), that consent is sought through a clear affirmative action and can be withdrawn at any time. Withdrawing consent is as easy as giving it: • Cookies/analytics — use the "Cookie Settings" link in the site footer to change or withdraw your choice. • Marketing emails — use the unsubscribe link in any message, or email us. • Enquiry data — email support@urosecure.com to withdraw and request deletion. Withdrawing consent does not affect processing already carried out, and some data may be retained where the law requires it. For visitor data captured at a client's premises, consent is managed by that client organisation as the Data Fiduciary.

05.Data Storage and Security

All visitor and organisational data is stored on UroCloud — our secure, encrypted cloud infrastructure. We implement the following security measures: • AES-256 encryption for all data at rest • TLS 1.3 encryption for all data in transit • Role-based access control for dashboard users • Regular security audits and penetration testing • Data centres located in India compliant with the IT Act 2000 We retain personal data only for as long as necessary for the purpose it was collected, or for a longer period where a law requires it (for example, security and audit records). When the purpose is served and no legal retention obligation applies — or when you validly withdraw consent — the data is erased. Specific retention periods for visitor records are set out in our Data Processing Policy.

06.Data Sharing

• We do not sell your personal data to third parties.
• We may share data with authorised personnel within your organisation based on role permissions you configure.
• We may disclose data to law enforcement or government authorities when required by law or court order.
• We use trusted third-party services (cloud hosting, analytics) bound by strict data processing agreements.
• In case of a merger or acquisition, data may be transferred to the new entity under the same privacy protections.

07.Your Rights as a Data Principal

• Right to access: Obtain a summary of the personal data we process about you and the processing activities involved.
• Right to correction and completion: Request correction of inaccurate or misleading data, and completion or updating of incomplete data.
• Right to erasure: Request deletion of your personal data where it is no longer needed for the purpose and no law requires its retention.
• Right to grievance redressal: Raise a grievance with us about our handling of your data or your rights (see the Grievance Redressal section).
• Right to nominate: Nominate another individual to exercise your rights in the event of your death or incapacity.
• Where we act only as a Data Processor for a client organisation, we will forward your request to that organisation (the Data Fiduciary) and assist them in responding.
• To exercise any of these rights, contact our Grievance Officer at a.singh@urosecure.com. We may need to verify your identity before acting on a request.

08.Cookies

Our website and web dashboard use cookies to maintain session state, remember preferences, and — only with your consent — measure anonymised usage. Analytics cookies are not set until you accept them. See our Cookie Policy for full details, and use the "Cookie Settings" link in the footer to change or withdraw consent at any time.

09.Children's Data

UROSECURE services are procured by organisations, not directly by individuals under 18. Where our school safety module processes data about students (who may be children under the DPDP Act), it does so solely for campus safety and entry-security purposes, and only after the institution has obtained verifiable consent from a parent or lawful guardian as required by Section 9 of the DPDP Act. We do not use children's personal data for behavioural monitoring, profiling for advertising, or targeted advertising. AI behaviour analytics are applied to visitor and operational security data and are not used to track or profile individual children beyond the campus-safety purpose authorised by the institution.

10.Grievance Redressal

If you have any concern about how your personal data is handled, or wish to exercise your rights, contact our Grievance Officer: Mr. Amarjit Singh — Grievance Officer, Data Protection Europa Technosoft Pvt. Ltd. Office No. G02, C-30, C Block Road, Sector 63, Noida, Uttar Pradesh 201309, India Email: a.singh@urosecure.com Phone: +91-9717050201 We aim to acknowledge grievances promptly and resolve them within the timelines prescribed under applicable law.

11.Complaints to the Data Protection Board

If you are not satisfied with our response to a grievance, you have the right to lodge a complaint with the Data Protection Board of India established under the Digital Personal Data Protection Act, 2023, in accordance with the procedure and timelines it prescribes.

12.Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or a prominent notice in the dashboard. The "Last Updated" date above reflects the latest revision.

13.Contact Us

For any privacy-related queries: Europa Technosoft Pvt. Ltd. Office No. G02, C-30, C Block Road, Sector 63 Noida, Uttar Pradesh 201309, India Email: support@urosecure.com Phone: +91-9717050201