All privacy policies

Privacy Policy

SafeSite - Axiom

A Mobile Safety Observation Application by AutoVRse

Effective Date: Nov 6, 2026
Last Updated: Nov 6, 2026
Version: 1.0

Definitions and Interpretation

"Personal Information" means any information relating to an identified or identifiable natural person. It includes information that does not name you but that can be used to distinguish you from another person, such as a persistent identifier or an IP address.

"Services" means the mobile application "SafeSite - Axiom" (the "App"), together with the servers and AI-assisted analysis features that support it, and related software, documentation, updates, and modifications.

"AutoVRse", "we", "us", or "our" means TDW Technologies Private Limited, a company incorporated in Bengaluru, India, operating under its trademarked name "AutoVRse".

"Account" means the account you create in the App, either by signing in with a Google or Microsoft account or by registering with an email address and password.

"User Content" means the photographs, videos, audio, reference or guideline documents, and text that you upload or record in the App.

"Report" means the safety analysis that the Services generate from your User Content.

"User", "you", or "your" means any person who accesses or uses the Services.

"Processing" means any operation performed on Personal Information, whether or not by automated means, including collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure by transmission, restriction, erasure, and destruction.

"Controller" means the person who, alone or jointly with others, determines the purposes and the means of the Processing of Personal Information. Where applicable law uses a different term for the same role, including "Data Fiduciary" under the Digital Personal Data Protection Act, 2023, or "business" under the California Consumer Privacy Act, that term has the same meaning as Controller in this Policy.

"Processor" means a person who Processes Personal Information on behalf of, and on the documented instructions of, a Controller. Where applicable law uses a different term for the same role, including "Data Processor" or "service provider", that term has the same meaning as Processor in this Policy.

"Data Subject" means the individual to whom Personal Information relates. Where applicable law uses a different term, including "Data Principal" under the Digital Personal Data Protection Act, 2023, or "consumer" under United States state privacy laws, that term has the same meaning.

1. Scope and Applicability

1.1. This Policy governs the collection, storage, use, Processing, and disclosure of Personal Information by AutoVRse in connection with the Services, specifically SafeSite - Axiom. It does not apply to any other AutoVRse application unless that application is named in this Policy.

1.2. This Policy applies to all Users.

1.3. An Account is personal to you. AutoVRse is the Controller for all Personal Information described in Section 3. If a future version of the App allows an employer or other organization to provision accounts or to receive Reports about identified individuals, we will update this Policy before that version is released and will set out the allocation of Controller and Processor roles at that time.

1.4. The App is intended for use by individuals 18 years of age or older. We do not knowingly collect Personal Information from anyone under 18. If you believe a person under 18 has given us Personal Information, contact us using the details in Section 10 and we will delete it.

2. Notice, Consent and Acceptance

2.1. This Policy is the notice we give you about how we handle Personal Information in connection with the Services. Section 3 sets out what we collect and why, Section 4 sets out who receives it, Section 5 sets out how long we keep it, and Section 7.6 sets out the legal basis on which we rely for each category.

2.2. Where we rely on consent, we ask for it separately and in context, for example when the App first asks for access to your camera, microphone, or photo library. You may withdraw that consent at any time using your device settings or the contact details in Section 10, without affecting the lawfulness of Processing carried out before withdrawal.

2.3. Where you are in a jurisdiction in which consent is the primary ground for processing personal data, including India under the Digital Personal Data Protection Act, 2023, you consent to the collection, use, storage, Processing, and transfer of your Personal Information as described in Sections 3, 4, and 8 when you create an Account. You may withdraw that consent at any time as set out in Section 6, and we will tell you what withdrawal means for your continued use of the App.

2.4. If you do not agree with this Policy, you must stop using the Services.

3. Information We Collect and How We Use It

3.1. Categories of Personal Information

3.1.1. Account credentials and identity. If you sign in with Google or Microsoft, we receive your name, email address, and profile photo through the provider's standard OAuth consent screen. We request only the basic profile scope and nothing beyond it. If you register with an email address and password, we collect your email address and the password you choose. Passwords are salted and hashed on our servers using scrypt, and are never stored or logged in plain text. We use this information to create and maintain your Account, to authenticate you, and to identify you when you contact us for support.

3.1.2. User Content: photographs and videos. You can upload photographs and videos of a site you are observing. We send them to AI services for analysis against safety guidelines in order to generate your Report. Your User Content may incidentally show people, vehicles, signage, or other identifiable details at the site. We do not use it to identify individuals, and we do not use facial recognition or other biometric identification. You are responsible for having the right to capture and upload the content, including any permission needed from people who appear in it.

3.1.3. User Content: reference and guideline documents. You can upload reference or guideline documents. We compare your photographs and videos against them when we generate your Report. They may contain Personal Information if you include it.

3.1.4. User Content: audio. If you use a voice feature, the App accesses your microphone only after you have granted the microphone permission. Your audio is sent to speech-to-text providers named in Section 4 to be converted to text. You can prevent this by declining the microphone permission or by not using voice features. The remainder of the App will continue to function.

3.1.5. Reports. We generate Reports from your User Content, store them against your Account, and deliver them to you.

3.1.6. Usage and credit consumption. We record how many credits you use, which features you use, and when, so that we can apply usage limits and bill you correctly.

3.1.7. Tool and model call logs. Our systems record technical logs of the calls they make to AI tools and models, including timing and usage. We use them to debug faults and to track costs. These logs may contain fragments of your User Content.

3.1.8. Purchases. Purchases of credits are made through the Apple App Store or Google Play Store. Apple or Google processes your payment, and we do not receive your payment card or bank details. We receive confirmation of the purchase, which we use to apply the credits to your Account.

3.1.9. Device permissions. Depending on the features you use, the App asks for access to your camera, microphone, and photo library or file storage. You can grant or revoke each permission in your device settings.

3.1.10. IP address. Our servers and our service providers receive your IP address in order to respond to requests from the App. We do not use it to identify you.

3.1.11. Support correspondence. If you contact us, we keep your email address and the contents of your message so that we can respond.

3.1.12. Cookies and similar technologies. The App does not use cookies or any similar tracking technology for advertising.

3.2. Purposes of Processing

We Process the Personal Information described in 3.1 in order to authenticate you, to deliver the Services and generate your Reports, to store your Reports and make them available to you, to apply credits, usage limits and billing, to answer your support requests, to operate and secure the Services, to debug faults and track costs, and to improve the App and develop new features. We do not Process it for advertising, for profiling, or for automated decision-making that produces legal or similarly significant effects.

3.3. AI-generated Reports. Reports are generated by AI and are provided to assist your safety observation. They may be incomplete or inaccurate. They are not a substitute for inspection by a competent person or for your legal duties under applicable safety law. We do not use your User Content to train our own AI models.

4. Disclosure and Third-Party Service Providers

We engage the following third parties. Each of them receives Personal Information even where we do not retain that information ourselves.

4.1. Sign-in providers: Google and Microsoft

Purpose	Single sign-on
Data exchanged	We receive your name, email address, and profile photo. We request only the basic profile scope.
Privacy policy	Google's and Microsoft's handling of your information is governed by their own privacy policies

4.2. AI analysis services: OpenRouter and OpenAI

Purpose	AI analysis of your User Content against safety guidelines to generate Reports, and search indexing of your content
Data received	Photographs, videos, text, and documents that you upload
Use	Generating Reports and indexing your content so that it can be searched and compared
Privacy policy	https://openrouter.ai/privacy and https://openai.com/policies/privacy-policy

OpenRouter routes requests to underlying AI model providers. Those providers may therefore also receive the content that we send to OpenRouter.

4.3. Speech-to-text services: Sarvam AI and ElevenLabs

Purpose	Converting audio you record into text
Data received	Audio that you record in the App
Use	Speech-to-text transcription
Privacy policy	https://www.sarvam.ai/privacy-policy and https://elevenlabs.io/privacy-policy

4.4. Cloud infrastructure providers

We use cloud infrastructure providers to host the Services and to store your Account information, User Content, and Reports. They provide the infrastructure on which our systems run, and they Process Personal Information only on our instructions and do not use it for their own purposes.

4.5. App stores

Apple and Google distribute the App and process the payments you make for credits. Their handling of your information is governed by their own privacy policies.

4.6. Other disclosures

We may disclose Personal Information to law enforcement or governmental bodies where we are required to do so by law, to our professional advisers under obligations of confidentiality, and to a counterparty in connection with a merger, acquisition, or sale of assets.

4.7. What we do not do

We do not sell Personal Information and we do not share it for cross-context behavioral advertising or targeted advertising. We do not use Personal Information for advertising or targeting.

4.8. International transfers

The third parties named in this Section may Process Personal Information outside your country, including outside India. Where applicable law requires a transfer mechanism, such as the EU Standard Contractual Clauses for transfers from the European Economic Area or the United Kingdom, we rely on that mechanism.

5. Security and Retention

5.1. We implement encryption in transit and at rest, access controls, security assessments, and incident response procedures. Passwords are salted and hashed using scrypt. Compliance with data protection law is addressed in Section 7.

5.2. We retain Personal Information for no longer than is necessary for the purposes set out in this Policy, or for such longer period as we are required to retain it by law. The periods that apply are as follows.

Category	Retention period
Account credentials and identity	Until you delete your Account, and in any case until 36 months after your last activity
User Content (photographs, videos, audio recordings, reference and guideline documents)	Until you delete it or your Account, and in any case until 36 months after your last activity
Reports	Until you delete them or your Account, and in any case until 36 months after your last activity
Usage and credit consumption records	Until 36 months after your last activity, or longer where required by Indian tax and corporate law
Tool and model call logs	Until 36 months after your last activity
Support correspondence	Until 36 months after the matter is closed
Data held by third parties named in Section 4	As set out in their own privacy policies

5.3. In the event of a security incident affecting Personal Information, we will notify the relevant supervisory authorities and affected Users without undue delay and in accordance with applicable law.

6. Your Rights

6.1. Subject to 6.3, you have the right to request access to the Personal Information we hold about you, to have it corrected, to have it deleted, to object to or restrict its Processing, to receive a copy of it in a structured, commonly used, machine-readable format, and to withdraw any consent you have given. You also have the right to lodge a complaint with a supervisory authority. A list of authorities in the European Economic Area is available at edpb.europa.eu. In the United Kingdom, the authority is the Information Commissioner's Office at ico.org.uk. In India, it is the Data Protection Board of India.

6.2. To exercise any of these rights, email privacy.vrt@autovrse.in. There is no fee and you do not need to give a reason. We will acknowledge your request within 10 days and respond within 30 days. If we need longer, we will tell you why within that period.

6.3. Verifying your request. We will ask you to confirm the email address of your Account so that we can be satisfied the request is yours. Uninstalling the App on its own does not delete your Account or the records associated with it.

6.4. Deletion. You can delete your Account and your data from inside the App. You can also request deletion by emailing privacy.vrt@autovrse.in from the email address of your Account. We will fulfil a deletion request within 30 days, except where we are required to retain specific information, in which case we will delete everything else and tell you what was retained, why, and for how long. The limited cases in which we retain information are records we are required to keep under Indian tax and corporate law, and information needed to establish, exercise, or defend a legal claim. Copies held in backups are overwritten in the ordinary backup cycle. Data held by the third parties named in Section 4 is deleted in accordance with their own policies and, on request, we will instruct them to delete data associated with your Account.

6.5. Grievance redressal. If you are not satisfied with how we have handled your Personal Information, or with our response to a request under this Section, you may raise a grievance with our Privacy Officer, Angad Raghavan, at privacy.vrt@autovrse.in, or by post at the address in Section 10. Please describe the issue and, if it concerns a particular Report or upload, tell us the approximate date and time, so that we can investigate. We will acknowledge your grievance within 10 days of receipt and respond substantively within 30 days.

6.6. Nomination. If you are in India, you may nominate another individual to exercise your rights under this Policy and under the Digital Personal Data Protection Act, 2023 on your behalf in the event of your death, or of incapacity that prevents you from exercising them yourself. To make, change, or revoke a nomination, email privacy.vrt@autovrse.in with the nominee's full name and contact details. We may ask you and the nominee to verify your identities before we record or act on a nomination, and we will act on a nomination only on receipt of satisfactory evidence of death or incapacity.

7. Compliance with Applicable Laws

7.1. India. The Digital Personal Data Protection Act, 2023 and the rules made under it.

7.2. European Economic Area and United Kingdom. The EU General Data Protection Regulation and the UK General Data Protection Regulation, for Users in those territories.

7.3. United States

This paragraph applies to Users resident in California, Virginia, Colorado, Connecticut, Texas, and other states with comparable privacy laws.

(a) Categories collected. In the preceding twelve months we have collected the following categories: identifiers, being your name, email address, and profile photo; commercial information, being the record of credits you purchase and use; internet and device activity, being the usage and credit consumption records and the tool and model call logs described in Section 3; audio, being any voice input you provide; visual information, being the photographs and videos you upload; and, where you contact us for support, the contents of your message. We collect these from you, from your device, and from Google or Microsoft if you sign in with them. We have not collected postal addresses, telephone numbers, government identifiers, financial account or payment card information, precise geolocation, biometric information, or any category that applicable law treats as sensitive personal information. If your User Content contains such information, we process it only to generate your Report.

(b) Purposes and disclosures. We use these categories for the purposes set out in Section 3.2 and disclose them to the service providers named in Section 4. We do not disclose them for any other purpose.

(c) No sale or sharing. We have not sold Personal Information, and have not shared it for cross-context behavioral advertising or targeted advertising, in the preceding twelve months, and we do not do so now. We do not Process Personal Information for profiling in furtherance of decisions that produce legal or similarly significant effects.

(d) Retention. We retain each category for the period set out in Section 5.

(e) Your rights. You may request to know what we have collected about you, to access it, to correct it, to delete it, and to obtain a portable copy. Submit requests to privacy.vrt@autovrse.in.

(f) How we handle requests. We will confirm receipt within 10 business days and respond within the 30-day period set out in 6.2. We verify your request as described in 6.3. Where we cannot verify a request or locate responsive information, we will say so in our response and explain why. An authorized agent may submit a request on your behalf if you provide written permission, and we may contact you to confirm it.

(g) Appeals. If we decline a request, you may appeal by emailing privacy.vrt@autovrse.in with "Appeal" in the subject line within 30 days of our decision. We will respond within 45 days with our decision and the reasons for it. If we deny your appeal, you may contact the Attorney General of your state.

(h) Non-discrimination. We will not deny you the Services, charge you a different price, or provide you a different level of service because you exercised any of these rights.

7.4. Middle East. UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, and the Saudi Personal Data Protection Law, where applicable to Users in those jurisdictions.

7.5. Other regional privacy laws as applicable to a User's location.

7.6. Legal bases

Where the EU or UK General Data Protection Regulation applies, we rely on the following legal bases.

• Account credentials and identity, User Content, Reports, usage and credit records, and support correspondence: necessary for the performance of your contract with us.
• Tool and model call logs, where used to debug faults, track costs, and secure the Services: our legitimate interests in operating and securing the Services, to which you may object as described in Section 6.
• Use of usage records to improve the App and develop new features: our legitimate interests, to which you may object as described in Section 6.
• Audio and microphone access: your consent, requested when the App first uses your microphone, and withdrawable at any time.
• Camera and photo library access: your consent, requested when the App first uses them, and withdrawable at any time.
• Disclosures to law enforcement or governmental bodies: compliance with a legal obligation.

8. Changes to This Policy

We may update this Policy. We will communicate material changes by in-app notification.

9. Governing Law and Jurisdiction

This Policy is governed by the laws of India, and disputes arising out of it are subject to the exclusive jurisdiction of the courts of Bengaluru, Karnataka, India. Nothing in this Section limits any right you have to bring proceedings in the courts of your country of residence, or any protection available to you under the mandatory law of that country.

10. How to Contact Us

Privacy Officer
Angad Raghavan
AutoVRse (TDW Technologies Private Limited)
3rd Floor, Rear Wing, Subham Complex, 1st A Main Road, Sarakki Industrial Area, JP Nagar 3rd Phase, Bengaluru 560078, Karnataka, India

Email: privacy.vrt@autovrse.in

This Policy is available in English. If you require it in another language listed in the Eighth Schedule to the Constitution of India, please contact us at the address above.