Privacy Policy

Information we collect

Enquiries and project estimates

When you contact us or request a calculator estimate, we may collect your name, telephone number, email address, city, enquiry category, message, project requirements, capacity inputs, and the source of your enquiry.

Client portal identity

Portal users may provide an email address for passwordless sign-in. We may also maintain a name, organisation or tenant, role, plant assignments, and access permissions so that each user sees only authorised information.

Plant and operational records

For customers using Aqua's operational or IoT services, we process plant identifiers, sensor readings, equipment status and run-hours, alarms, operator checklists, maintenance records, service notes, compliance reports, and the identity of authorised users who submit or review those records. Operational plant data may relate to a customer site even where it is not personal data by itself.

Technical and security information

Our hosting and security systems may receive IP address, request time, requested URL, browser or device information, response status, and similar diagnostic data. We use IP addresses for short-window abuse prevention and may retain limited server logs for reliability and security.

How we use information

• Respond to enquiries, prepare estimates, and discuss project requirements.
• Provide contracted engineering, operations, maintenance, monitoring, and compliance services.
• Authenticate portal users and enforce organisation-, role-, and plant-level access controls.
• Display live plant conditions, investigate faults, maintain service history, and prepare reports.
• Send service communications, reports, safety or fault alerts, and information you requested.
• Protect the website and platform, prevent abuse, diagnose failures, and maintain availability.
• Meet contractual, regulatory, accounting, dispute-resolution, and legal obligations.

We process information you voluntarily provide for the purpose you requested, to perform our agreement with you or your organisation, to comply with law, and, where required, on the basis of your consent. We do not sell personal data or use enquiry details for third-party advertising.

When information is shared

We disclose information only where necessary for the purposes above:

Information may also be accessed by authorised Aqua personnel and service providers who need it for their work, by your organisation's authorised administrators, or by regulators, courts, law-enforcement bodies, and other parties when required by law or needed to protect legal rights and safety.

Some service providers may process data in locations outside India. Where that occurs, we use the provider's contractual and security safeguards and handle transfers subject to restrictions under applicable Indian law.

Cookies and local storage

The website currently uses only functional storage needed to provide the service. Supabase sets authentication cookies for signed-in portal sessions. The portal can set an aqua_mode cookie for the selected dashboard display mode. The public-site introduction records a session-onlyaqua:intro-seen value in your browser so it does not replay during the same browsing session.

We do not currently use third-party advertising cookies or behavioural analytics cookies. Blocking essential cookies may prevent portal sign-in or preference features from working.

Retention and security

We keep personal data only for as long as reasonably necessary for the stated purpose, our relationship with you, and applicable contractual or legal requirements. Enquiry records are retained while a potential project is active and for a reasonable business-record period afterward. Portal, plant, maintenance, and compliance records may be retained for the customer relationship and any additional period required for operational continuity, audits, regulatory reporting, legal claims, or contractual commitments.

We use access controls, role-based permissions, authenticated sessions, encrypted network connections, input validation, rate limiting, and managed cloud infrastructure. No internet or storage system is completely secure, so we cannot promise absolute security. If a personal-data incident requires notification under applicable law, we will notify affected individuals and the relevant authority as required.

Your privacy rights

Subject to applicable law, you may ask us to:

• Provide a summary of personal data we process about you and relevant processing activities.
• Correct inaccurate or misleading data, complete incomplete data, or update changed data.
• Erase personal data that is no longer needed, unless retention is required by law or another valid purpose.
• Withdraw consent where consent is the basis of processing.
• Address a grievance about how your personal data has been handled.
• Record a permitted nominee to exercise applicable rights in the event of death or incapacity.

We may need to verify your identity and authority before acting on a request. Withdrawal does not affect processing already carried out lawfully and may limit services that require the relevant information.

Our services are intended for businesses, property owners, facility teams, and authorised professionals—not children. We do not knowingly solicit personal data from anyone under 18 through the website.

Contact and grievances

To exercise a privacy right or raise a grievance, email us with the subject “Privacy Request”. Please describe your relationship with Aqua and the data or service concerned so we can locate the correct records.

We will review and respond through our grievance process. If your grievance remains unresolved, you may have the right to approach the Data Protection Board of India in the manner provided by applicable law.

Changes to this policy

We may update this policy when our services, providers, or legal obligations change. The current version will remain available at this URL with its revised effective date. Material changes may also be communicated through the portal or another appropriate channel.