Privacy Policy & Data Protection Charter

This Privacy Policy and Data Protection Charter details how Opera AI (“we”, “our”, or “Platform”) collects, processes, stores, and protects data. We operate strictly under the statutory mandates of the Digital Personal Data Protection Act, 2023 (`DPDPA`), the Information Technology Act, 2000 Section 43A / SPDI Rules 2011, and global privacy standards including ISO/IEC 27701 (PIMS) and ISO/IEC 27018 (Public Cloud PII).

1. Who We Are & Fiduciary Scope

Opera AI is an autonomous, AI-native Enterprise Resource Planning (`ERP`) and CRM operating system specifically engineered for Indian MSMEs, SMBs, and factory owners (`Morbi, Rajkot, Surat, Ludhiana context`). When your commercial organization registers a workspace on Opera AI:

• You are the Data Fiduciary (`Controller`): Under DPDPA 2023 Section 2(i), your organization determines the purpose and means of processing personal data belonging to your customers, dealers, distributors, and employees.
• We are your Data Processor: Under DPDPA 2023 Section 2(k), Opera AI processes customer inquiries, WhatsApp voice notes, proforma orders, and inventory lookups solely on your behalf per your explicit configurations and automated guardrails.

2. Statutory Categories of Data Collected

We strictly practice data minimization under DPDPA 2023 Section 5. We collect only what is essential for commercial workflow execution:

3. DPDPA 2023 & Consent Architecture

In accordance with DPDPA 2023 Section 6, all personal data is processed either upon explicit, verifiable consent from the Data Principal or under statutory legitimate uses (such as responding to a customer’s direct WhatsApp inquiry to purchase commercial goods).

Notice & AI Transparency (`ASCI Mandate`)

All automated WhatsApp interactions generated by Opera AI clearly identify the conversational agent (`e.g., "Opera AI Assistant"`), ensuring complete transparency under ASCI digital advertising rules and consumer protection frameworks.

4. Sovereign Data Localization & Security

To ensure strict sovereign alignment with DPDPA 2023 Section 16 (Cross-Border Data Transfers) and RBI Data Localization mandates, all primary database storage resides in AWS Asia Pacific 1 (Singapore — `ap-southeast-1`), maintaining sub-100ms latency (~45ms to Morbi and Rajkot industrial belts).

• Hardware Row-Level Security (`FORCE RLS`): Every database table is hard-enforced with `FORCE ROW LEVEL SECURITY`. Even application background workers (`operaai_app`) cannot read across tenant boundaries.
• Encryption at Rest & in Transit: All storage buckets, database volumes, and sensitive credentials (`tenant_secrets`) are encrypted using `AES-256-GCM` with envelope key rotation (`SECRETS_ENCRYPTION_KEY`). All network ingress/egress requires strictly `TLS 1.3`.

5. AI Sub-Processors & WhatsApp Cloud API

Opera AI operates on a zero-trust, “Bring-Your-Own-Key” (`BYOK`) and sovereign platform foundation. We partner strictly with audited, enterprise-grade sub-processors:

• Meta Platforms, Inc. (`WhatsApp Cloud API v19.0`): Encrypted delivery of conversational messaging between factory numbers and customers.
• OpenAI / NVIDIA API Gateways (`LLM Inference`): Processing structured prompts and embeddings. Under our enterprise data agreements, zero commercial prompts, voice notes, or customer records are ever used by OpenAI or NVIDIA to train foundational AI models.
• Neon Serverless Postgres & Vercel Pro: Sovereign high-frequency cron execution (`maxDuration: 300s`) and database pooling.

6. Data Retention & Immutable Audit Trails

We enforce dual-tiered statutory data retention schedules:

• Commercial & Financial Ledgers (`8 Years`): In strict compliance with Companies Act, 2013 Rule 3(1) (Audit & Edit Logs), all financial transactions, proforma invoices, NIC IRP E-Invoice logs, and accounting modifications (`audit_logs`) are retained immutably with cryptographic checksums (`record_locks`) for a minimum of 8 financial years.
• Conversational & AI Cache (`User Configurable`): WhatsApp chat histories and embedding vector caches (`embedding_cache`) are retained per the tenant administrator’s retention schedule (`retention_days`), after which automated garbage collection (`drainCampaignQueue` & cleanup crons) purges them permanently.

7. Data Principal Rights & Erasure

Under DPDPA 2023 Sections 11–14, Data Principals (`your customers and users`) possess absolute rights over their data:

• Right to Information & Access: You can export 100% of your workspace data in JSON/CSV formats anytime via `/settings/audit` or `exportWorkspaceData()`.
• Right to Correction & Erasure: Tenants can trigger instant soft/hard deletions (`add_intent_soft_delete` & right-to-be-forgotten workflows). When a customer requests erasure, Opera AI purges all matching personal identifiers across active tables within 72 hours.

8. Statutory Grievance Redressal (`RGO`)

In compliance with DPDPA 2023 Section 13 and IT Rules 2011 Rule 5(9), we have designated a dedicated Statutory Grievance Officer (`Resident Grievance Officer — RGO`) to resolve complaints within 24 hours of receipt: