गोपनीयता नीति

1. Introduction & Statutory Scope

Unmukti Technology Private Limited (CIN: U72300UP2010PTC039466), having its office at Unit 313, Ocus Quantum, Sector 51, Samaspur, Gurugram, Haryana 122003 ("Company", "we", "us", or "Hopbox"), is committed to safeguarding the digital personal data of all individuals. This Privacy Policy is formulated in strict accordance with the Digital Personal Data Protection Act, 2023 (DPDPA 2023) and applicable rules framed thereunder. It applies to all digital personal data collected directly through our websites (hopbox.net, unmukti.in, blogs.hopbox.net), customer dashboards, sales communications, and technical support channels.

2. Personal Data We Collect

In accordance with the principle of data minimization (Section 6 of the DPDPA), we collect only the personal data necessary to provide our services and respond to your requests: • Contact & Inquiry Data: Name, business email address, phone number, organization name, country, website URL, and details provided in contact inquiries. • Customer Account & Portal Data: Name, email address, corporate role, authentication credentials, and session tokens when accessing our management consoles. • AI Assistant Interactions: Conversational queries submitted to our official Hopbox AI assistant for answering product and configuration questions. • Technical & Diagnostics Telemetry: Anonymized IP addresses and device information processed via privacy-preserving, first-party analytics (Umami) and client-side proof-of-work security verification (CAPTCHA). We do NOT inspect, store, or log the payload content of customer network traffic routed through Hopbox SD-WAN appliances or encrypted VPN tunnels.

3. Purpose of Processing & Lawful Grounds

We process your personal data exclusively for specified, explicit, and lawful purposes under Section 4 and Section 6 of the DPDPA 2023: • Responding to your sales inquiries, consulting requests, and scheduling product demonstrations. • Delivering, configuring, and supporting Hopbox SD-WAN appliances, software updates, and managed network services. • Account management, authentication, billing, and administrative notices. • Ensuring network security, preventing cyber threats, fraud, and unauthorized access to our platforms. Processing is based on your freely given, specific, informed, and unambiguous consent obtained at the time of data collection, or for legitimate uses recognized under Section 7 of the DPDPA.

4. Notice & Withdrawal of Consent

Under Section 6(4) of the DPDPA 2023, you have the statutory right to withdraw your consent at any time. Withdrawing consent is as easy as giving it: you may withdraw consent by sending an email to support@hopbox.in. Upon receipt of a valid withdrawal request, we will cease processing your personal data within a reasonable timeframe, unless continued processing or retention is required by applicable law.

5. Data Retention & Purpose Limitation

Under Section 8(7) of the DPDPA 2023, we retain personal data only for as long as necessary to fulfill the specified purpose for which it was collected, or as mandated by statutory compliance obligations (including CERT-In cyber security retention directives and accounting regulations). Once the specified purpose is fulfilled or consent is withdrawn, personal data is irreversibly erased or anonymized across our operational databases and ticketing systems.

6. Technical & Organizational Safeguards

In compliance with Section 8(5) of the DPDPA 2023, we implement robust technical and organizational security safeguards: • Transport Layer Security (TLS 1.3 / HTTPS) with strict HSTS across all web properties and APIs. • Role-based access control (RBAC) and credential segregation for customer data and infrastructure. • Segregated database environments with regular security audits and threat assessments. • Strict no-logs policy for routed VPN and enterprise SD-WAN customer payload traffic.

7. Data Processors & Third-Party Sharing

We do not sell, rent, or trade your personal data. We engage third-party data processors only under valid contracts as required by Section 8(2) of the DPDPA 2023: • Infrastructure & Hosting: Cloud infrastructure providers hosting our website services, ticketing system, and secure backups within Indian or compliant jurisdictions. • AI Model Infrastructure: Query processing for the Hopbox AI assistant under strict confidentiality terms. • Regulatory Disclosures: We may disclose personal data to law enforcement or regulatory authorities only when strictly required by a court order or binding statutory obligation under Indian law.

8. Rights of the Data Principal

The DPDPA 2023 grants you enforceable rights regarding your digital personal data: • Right to Access (Section 11): Right to obtain a summary of personal data processed, identities of third parties with whom data has been shared, and any other relevant information. • Right to Correction & Erasure (Section 12): Right to correct inaccurate data, complete incomplete data, update outdated records, and request erasure of personal data that is no longer required. • Right of Grievance Redressal (Section 13): Right to seek redressal for any privacy grievance through our designated Grievance Redressal Officer. • Right to Nominate (Section 14): Right to nominate any other individual to exercise your rights under the Act in the event of death or incapacity. To exercise any of these rights, submit your request to support@hopbox.in.

9. Grievance Redressal Officer

In accordance with Section 8(9) of the DPDPA 2023, our designated Grievance Redressal Officer handles all data privacy questions, requests, and disputes: Email: support@hopbox.in Company: Unmukti Technology Private Limited Address: Unit 313, Ocus Quantum, Sector 51, Samaspur, Gurugram, Haryana 122003, India We acknowledge all grievance submissions within 48 hours and resolve verified requests within 30 days.

10. Escalation to the Data Protection Board of India

If you are not satisfied with the resolution provided by our Grievance Redressal Officer, or if you do not receive a response within 30 days, you have the right under Section 13(3) of the DPDPA 2023 to register a complaint with the Data Protection Board of India (DPBI).