Last Updated: 18/09/2026 · Niranjan Technosoft · Bondel, Mangaluru, Karnataka 575008, India
This Privacy Policy explains how Niranjan Technosoft ("Company", "we", "us") collects, uses, discloses, and protects Personal Data in connection with Veda AI(the "Platform"), in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Digital Personal Data Protection Rules, 2025 ("DPDP Rules").
This Policy should be read alongside our Terms & Conditions, which govern your contractual relationship with us. Where this Policy and the Terms & Conditions address the same subject, this Policy governs on data protection matters.
1.1 As Data Fiduciary: We act as Data Fiduciary for the Personal Data you provide to create and manage your account (e.g., name, email, billing details, usage data). For this data, we determine the purpose and means of processing and are directly accountable under the DPDP Act.
1.2 As Data Processor: For Personal Data contained within Content you upload (including of yourself and any third parties appearing in your Content), we act as your Data Processor. You, as the uploader, are the Data Fiduciary for that Personal Data and are responsible for establishing its lawful basis. See Section 2 of our Terms & Conditions for the full allocation of responsibility.
We collect the following categories of Personal Data:
| Category | Examples | Source |
|---|---|---|
| Identity & contact data | Name, Email ID, Contact Number | Provided by you at signup |
| Account credentials | Username, password (hashed), OAuth tokens | Provided by you |
| Billing data | Payment method details, billing address, transaction history, Payment ID, Subscription Mandate | Provided by you / payment processor |
| Device & technical data | IP address, Device ID, log data, Session Token, Authentication Token, Cookies | Automatically collected |
| Content data | Video/audio files and any Personal Data embedded within them (faces, voices, on-screen information, location metadata) | Uploaded by you |
| AI-derived data | Facial detection markers, voice embeddings, transcripts, inferred attributes | Generated by our AI Processing of your Content |
We do not knowingly collect Personal Data from individuals under 18 years of age. See Section 9.
We process Personal Data for the following specified purposes:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Creating and managing your account | Identity, contact, credential data | Consent (Section 6, DPDP Act) |
| Processing payments | Billing data | Consent / Contractual necessity |
| Providing editing and AI features | Content data, AI-derived data | Consent (as instructed by you) |
| Improving and training our AI models | Content data (Free Plan by default; Paid Plan only if you opt in) | Consent — see Section 4 below |
| Security, fraud prevention, and abuse monitoring | Technical data, usage data | Legitimate use (Section 7, DPDP Act) |
| Customer support | Communications, account data | Consent / Contractual necessity |
| Legal and regulatory compliance | As required | Legal obligation |
We do not use your Personal Data for any purpose beyond what is disclosed in this Policy without obtaining fresh consent.
This is a distinct processing purpose from providing you the editing service, and we disclose it separately as required under the DPDP Act's purpose-specificity requirements.
We do not sell Personal Data. We may share it with:
We do not share Content or AI-derived data across unrelated customers, except where such Content contributes anonymously to AI model training as described in Section 4.
Personal Data may be processed or stored on servers located outside India,. Such transfers are made in accordance with Section 16 of the DPDP Act and are not made to any country restricted by the Central Government of India.
We retain Personal Data only as long as necessary for the purposes described in this Policy, subject to the following:
| Data Category | Retention Period |
|---|---|
| Account data | Duration of account + 30 days post deletion of Account |
| Account Logs | 1 year post deletion of Account |
| Billing/payment records | 8 years (statutory requirement) |
| Raw uploaded Content | 90 days post deactivation or when user decides to delete the data |
| AI-derived data (embeddings, transcripts) | Deleted with, or before, the source Content |
| Content used for AI training | Not Reversible as learned patterns persist even after source deletion. Source Training data is delete able [Sec 4] |
| Inactive accounts | 3 years from last login, erased with 48-hour prior notice |
| Support/communication records | 2–3 years from resolution |
| Consent records | Account lifetime + 3 years after deletion or withdrawal (minimum statutory floor: 1 year per DPDP Rules) |
| Security & access logs | Minimum 1 year, per DPDP Rules |
| Grievance/regulatory records | 7 years |
We will notify you at least 48 hours before erasing data due to inactivity, giving you the opportunity to log in and retain your account.
We implement reasonable technical and organisational measures required under Section 8(5) of the DPDP Act and Rule 6 of the DPDP Rules, including:
In the event of a Personal Data breach, we will notify affected individuals and the Data Protection Board of India as required under applicable law.
The Platform is intended for use only by individuals 18 years of age or older. We do not knowingly permit account registration by anyone under 18, and we do not knowingly collect Personal Data directly from children.
If Content you upload includes a person under 18 (e.g., filmed as part of family or event footage), you are responsible, as Data Fiduciary for that footage, for ensuring verifiable parental/guardian consent has been obtained as required under Section 9 of the DPDP Act.
If we become aware that we have inadvertently collected Personal Data directly from a child without verifiable parental consent, we will take steps to delete it promptly.
Under Chapter III of the DPDP Act, you have the right to:
To exercise these rights, contact us using the details in Section 13. We will respond within the timelines prescribed under the DPDP Rules (generally within 90 days for erasure requests).
If you are a third party appearing in Content uploaded by another user (e.g., a bystander in someone else's video), you may still exercise these rights by contacting us directly; we will coordinate with the relevant uploader (Data Fiduciary) as needed.
In accordance with the DPDP Act and Rules, you may contact our Grievance Officer with any questions, complaints, or requests regarding this Policy:
Grievance Officer: Rashmi Hegde Email: vedahub2026@gmail.com Address: Niranjan Technosoft Bondel, Mangaluru, Karnataka Response timeline: Complaints will be acknowledged within 24 Hours and resolved within 15 days, in accordance with applicable law.
If you are not satisfied with our response, you may approach the Data Protection Board of India.
We may update this Privacy Policy from time to time. Material changes will be notified via email and, where required, fresh consent will be sought before the change takes effect.
For questions about these Terms or our data practices, contact: Niranjan Technosoft Email: vedahub2026@gmail.com, Address: Niranjan Technosoft Bondel, Mangaluru, Karnataka