Privacy Policy

1.1 Account Information

When you create an account, we collect your name, email address, organization name, and role within your organization.

1.2 Authentication Data

We collect authentication information through Microsoft Entra ID (formerly Azure Active Directory), Google OAuth, or email/password credentials. This includes authentication tokens and session data stored in your browser's session storage.

1.3 Research Data

When you upload videos for analysis, we collect and process video files, metadata (filename, upload date, resolution, duration), project and experiment information, device serial numbers, and analysis parameters. This constitutes your proprietary research data.

1.4 Usage Data

We automatically collect information about how you interact with the Platform, including IP addresses, browser type and version, time zone settings, access times and dates, pages viewed and navigation paths, and system logs for security and troubleshooting.

1.5 Communications

When you contact us via email or contact forms, we collect your message content, email address, and any information you choose to provide.

We use your information for the following purposes:

• Providing and maintaining the Platform services
• Processing your video uploads and delivering analysis results
• Managing orders, device allocation, and credit balances
• Facilitating delivery and training scheduling
• Authenticating your identity and maintaining account security
• Communicating with you about orders, deliveries, and platform updates
• Providing customer support and responding to inquiries
• Monitoring platform performance and troubleshooting technical issues
• Improving our algorithms and services
• Complying with legal obligations and enforcing our Terms of Service
• Preventing fraud and unauthorized access

We process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to fulfill our services under your agreement
• Consent: Where you have provided explicit consent for specific processing activities
• Legitimate Interests: For improving our services, security, and fraud prevention
• Legal Obligations: To comply with applicable laws and regulations

4.1 Data Location

Your data is primarily stored on Microsoft Azure infrastructure in the Canada Central region. Azure maintains additional data centers globally for redundancy and performance.

4.2 Security Measures

We implement industry-standard security measures including: TLS 1.3 encryption for data in transit, encryption at rest for all stored data, role-based access control (RBAC), multi-factor authentication support, regular security audits and monitoring, and secure Azure Blob Storage for video files with private access controls.

4.3 Data Retention

We retain your data as follows: Account data — for the duration of your active account plus 30 days after termination; Research data (videos and results) — for the duration of your active account plus 7 years to support scientific record-keeping requirements; System logs — 90 days for security and troubleshooting; Communications — 3 years for customer service purposes. You may request earlier deletion subject to legal and contractual obligations.

We share your information in the following circumstances:

• Within Your Organization Hierarchy: Partners can view their clients' orders and device allocations. Ananda administrators can view necessary information for order fulfillment and support.
• Service Providers: Microsoft Azure (cloud infrastructure), Google (OAuth authentication), reCAPTCHA (security and fraud prevention)
• Legal Requirements: We may disclose information if required by law, court order, or government request, or to protect our rights and safety.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

Data Ownership. You retain ownership of all research data you upload. We process this data solely to provide analysis services and do not claim any intellectual property rights to your research data or results.

Your data may be transferred to and processed in countries other than your country of residence. Microsoft Azure operates globally and maintains compliance with international data protection frameworks including EU-US Data Privacy Framework, Standard Contractual Clauses (SCCs), and adequacy decisions where applicable. We ensure appropriate safeguards are in place for all international transfers.

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Where processing is based on consent
• Complain: Lodge a complaint with your local data protection authority

To exercise these rights, contact us at privacy@anandadevices.com. We will respond within 30 days.

We use the following technologies:

• Session Storage: Authentication tokens (essential for platform functionality)
• Local Storage: Language preferences and timezone settings
• reCAPTCHA: Google's fraud prevention service (subject to Google's privacy policy)

For detailed information, see our Cookie Policy.

Our Platform integrates with third-party services, each with their own privacy policies:

• Microsoft Entra ID: privacy.microsoft.com
• Google OAuth: policies.google.com/privacy
• reCAPTCHA: policies.google.com/privacy

Our Platform is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of material changes by email and/or through a prominent notice on the Platform at least 30 days before the changes take effect. Your continued use of the Platform after changes become effective constitutes acceptance of the updated policy.

For questions about this Privacy Policy or to exercise your privacy rights, contact us or email privacy@anandadevices.com.