PRIVACY POLICY

Effective Date: 24 September 2026

Last Updated Date: 24 September 2026

At Solodrop Private Limited (hereinafter referred to as “Solodrop”, “we”, “us”, or “our”), we value your privacy and are committed to safeguarding your Personal Data. This Privacy Policy describes how we collect, receive, store, use, process, disclose, transfer, retain, and otherwise handle your Personal Data when you access or use our website and all related services, features, tools, content, and functionalities made available thereon (collectively, the “Website”).

This Privacy Policy applies to individuals who access, browse, interact with or otherwise use the Website or otherwise provide Personal Data to Solodrop through or in connection with the Website, including individuals who submit enquiries, communicate with us, apply for career opportunities, seek information regarding our products, technologies, business or other activities, or otherwise voluntarily provide Personal Data to us.

By accessing or using the Website, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy.

If you do not agree with this Privacy Policy, you should refrain from accessing or using the Website or providing your Personal Data to us.

Capitalized terms used but not defined in this Privacy Policy shall have the meanings assigned to them in the Terms and Conditions.

1. SCOPE AND APPLICABILITY
   1. This Privacy Policy applies to all individuals who access, browse, interact with, or otherwise use the Website in any manner, including prospective customers, business partners, technology or licensing partners, prospective employees, job applicants, visitors, and other Users, as well as any individual who otherwise provides Personal Data to Solodrop in connection with the Website or the activities of Solodrop.
   2. This Privacy Policy governs the collection, receipt, storage, use, processing, disclosure, sharing, transfer, retention, and deletion of Personal Data by Solodrop in connection with the operation of the Website and the activities undertaken through or in connection with the Website, in accordance with the Applicable Laws, including, without limitation:
      1. the Digital Personal Data Protection Act, 2023, and the rules framed thereunder;
      2. the Information Technology Act, 2000, to the extent applicable; and
      3. any other Applicable Laws, rules, regulations, notifications, governmental directions, or regulatory requirements relating to privacy, data protection, cybersecurity, or information security, as amended from time to time.
   3. This Privacy Policy applies to the Personal Data collected by Solodrop through or in connection with the Website, including information collected when you submit enquiries, communicate with us, apply for career opportunities, seek information regarding our products, technologies, business or other activities, or otherwise interact with the Website or provide Personal Data to Solodrop.
   4. This Privacy Policy does not apply to any third-party websites, applications, products, services, payment gateways, advertising platforms, or other third-party platforms that may be linked to or accessible through the Website. Your interaction with such third-party services shall be governed by their respective privacy policies and terms of use.
   5. SOLODROP DISCLAIMS ALL RESPONSIBILITY AND LIABILITY FOR THE PRIVACY PRACTICES, DATA COLLECTION ACTIVITIES, SECURITY STANDARDS, OR CONTENT OF ANY THIRD-PARTY WEBSITE, APPLICATION, OR SERVICE. USERS ARE ENCOURAGED TO REVIEW THE APPLICABLE PRIVACY POLICIES AND TERMS OF USE OF SUCH THIRD PARTIES BEFORE PROVIDING ANY PERSONAL DATA OR OTHERWISE ENGAGING WITH THEM.
   6. The provisions of this Privacy Policy that correspond to obligations under the Digital Personal Data Protection Act, 2023 or the Digital Personal Data Protection Rules, 2025 which have not yet been brought into force shall operate as statements of Solodrop’s intended practice and shall apply as binding legal obligations from the respective dates on which such statutory provisions are brought into force. Until such provisions come into force, Solodrop shall continue to process Personal Data in accordance with the Applicable Laws in force from time to time.
2. INFORMATION WE COLLECT

   For the purposes of this Privacy Policy, “Personal Data” shall have the meaning assigned to it under the Digital Personal Data Protection Act, 2023.

   1. Information provided by you:

      We may collect the following Personal Data that you voluntarily provide while accessing or using the Website:

      • Contact information, including your name, email address, mobile number, postal address, organization or company details, designation, and other contact details;
      • Information contained in enquiries, feedback, requests, applications, communications, correspondence, or other information submitted through the Website or otherwise provided to us in connection with the Website;
      • Information provided in connection with career opportunities or applications, including your name, contact details, curriculum vitae or resume, educational qualifications, professional experience, skills, employment history, and other information contained in your application or supporting documents;
      • Information relating to your interest in or enquiries concerning Solodrop, its products, technologies, business, research and development, licensing, technology transfer, collaboration, commercial opportunities, or other activities;
      • Any other Personal Data voluntarily provided by you while using the Website or communicating with Solodrop.
   2. Information collected automatically:

      When you access or use the Website, we may automatically collect certain technical and usage-related information through cookies and similar technologies, including:

      • Device information, browser type, operating system, device identifiers, and other technical information;
      • Internet Protocol (IP) address and approximate location information;
      • Log data, browsing activity, pages viewed, session duration, referring or exit pages, and interaction with the Website; and
      • Cookie identifiers and other technical information used to operate, maintain, secure, improve, and analyse the functionality and performance of the Website.
   3. Cookies and similar technologies:
      1. When you access or use the Website, we may use cookies and similar technologies, including pixels, web beacons, and server logs (collectively, “Cookies”), to operate, secure, maintain, and improve the Website. Where such Cookies collect or generate information that constitutes Personal Data, including IP addresses, device identifiers, or persistent identifiers capable of being linked to you, such collection and processing shall be governed by this Privacy Policy and the Applicable Laws, including the Digital Personal Data Protection Act, 2023 and the rules made thereunder, in the same manner as any other Personal Data collected through the Website.
      2. Cookies are small text files stored on your device that enable the Website to recognize your browser, remember your preferences, maintain functionality, analyze usage patterns, improve performance, and enhance your overall user experience.
      3. We may use:
         • Essential Cookies, which are necessary for the operation, security, and basic functionality of the Website;
         • Analytics Cookies, which help us understand how Users interact with the Website and improve its functionality and performance;
         • Functional Cookies, which remember your preferences and enhance your user experience; and
         • Advertising or Targeting Cookies, where applicable, which may be used to deliver relevant advertisements or content and measure their effectiveness, including Cookies placed by third-party advertising partners.
      4. Third-party Cookies: Certain Cookies on the Website may be placed by third-party service providers, including analytics providers, advertising networks, website service providers, or other third-party providers, acting on our instructions or in their own capacity. Such third parties may process Personal Data collected through Cookies in accordance with their respective privacy policies and applicable terms. We do not control the privacy practices of independent third parties and encourage you to review their respective policies.
      5. You may manage or disable Cookies through your browser settings. However, disabling certain Cookies may affect the functionality or availability of certain features of the Website. Where required under the Applicable Laws, we shall obtain your consent before placing or using non-essential Cookies that involve the processing of Personal Data on the basis of consent. We shall implement an appropriate mechanism on the Website for obtaining and managing such consent, where required.
   4. Information obtained from third parties:

      We may receive Personal Data relating to you from third parties, including service providers, business partners, recruitment or employment-related sources, or other persons or entities, where such collection is permitted under the Applicable Laws and is necessary for the purposes for which such Personal Data is processed.

   5. Aggregated and de-identified information:

      We may generate or use aggregated, anonymized, or de-identified information that does not identify you personally for research, analytics, service improvement, business analysis, and other lawful business purposes.

3. HOW WE USE PERSONAL DATA

   We may use the Personal Data collected from or provided by you for the following purposes:

   1. To operate, maintain, administer, and improve the Website and its features, tools, content, and functionalities;
   2. To respond to and manage enquiries, requests, feedback, communications, and other correspondence submitted by you;
   3. To communicate with you in relation to your enquiries, requests, applications, communications, or other interactions with Solodrop;
   4. To process and evaluate applications for career opportunities and recruitment-related purposes;
   5. To provide you with information relating to Solodrop, including its products, technologies, research and development, business activities, opportunities, and other information that may be relevant to your interaction with us;
   6. To understand how Users access and use the Website, analyse trends and usage patterns, and improve the functionality, performance, security, and user experience of the Website;
   7. To detect, prevent, investigate, and address fraud, unauthorised access, security incidents, technical issues, misuse, or other activities that may violate the Terms and Conditions or Applicable Laws;
   8. To comply with Applicable Laws and respond to lawful requests, directions, orders, or requirements of governmental, regulatory, judicial, law enforcement, or other competent authorities;
   9. To establish, exercise, protect, or defend our legal rights, interests, property, or the safety of Solodrop, its personnel, Users, or other persons;
   10. To send you communications, updates, information, or promotional or marketing communications, where permitted under Applicable Laws and in accordance with your preferences and applicable consent requirements; and
   11. For any other purpose for which you have provided your Personal Data or where such processing is otherwise permitted or required under the Applicable Laws.
4. HOW WE SHARE YOUR INFORMATION

   We share your Personal Data only in a manner that is consistent with the purposes outlined in this Privacy Policy and strictly in accordance with Applicable Laws, including the Digital Personal Data Protection Act, 2023. We do not sell, rent, or trade your Personal Data to third parties.

   1. With service providers:

      We may share your information with trusted third-party service providers who assist us in operating, maintaining, securing, and improving the Website, including:

      • Cloud hosting providers and data storage partners;
      • Website analytics, communication, and performance monitoring service providers;
      • IT support, infrastructure, security, and maintenance service providers; and
      • Professional advisors, auditors, consultants, and other service providers engaged under appropriate confidentiality obligations.

      Such service providers are authorized to process your information only for the purposes specified by us and are required to maintain appropriate confidentiality and security measures.

   2. With business partners and other third parties:

      We may share your information with business partners, technology partners, licensing partners, recruitment or employment-related service providers, consultants, or other third parties where such sharing is necessary to facilitate enquiries, communications, career opportunities, technology or licensing discussions, collaborations, business activities, or other interactions initiated through or in connection with the Website, subject to the Applicable Laws.

      Where you upload, submit, or otherwise provide to us the Personal Data of any other identifiable individual, including any authorized signatory, representative, employee, or contact person, you represent and warrant that you have obtained all consents and authorizations required under the Applicable Laws for such disclosure and for the processing of such Personal Data as contemplated under this Privacy Policy, and you shall remain solely responsible for such disclosure.

   3. With legal and regulatory authorities:

      We may disclose your information if:

      • required to do so by the Applicable Laws, judicial order, governmental direction, or regulatory authority;
      • necessary to respond to a lawful request, investigation, or legal process;
      • required to prevent, detect, investigate, or address fraud, security incidents, intellectual property infringement, or other unlawful activities; or
      • necessary to establish, exercise, or defend our legal rights, enforce our Terms and Conditions or other policies, or protect the rights, property, or safety of Solodrop, its Users, or the public.
   4. With affiliates and business partners:

      We may share your information with our affiliates, group companies, business partners, or subsidiaries for internal business operations, customer support, service integration, business continuity, or to provide and improve the Website and the activities undertaken through or in connection with the Website. Such entities shall process your information in accordance with this Privacy Policy or equivalent contractual confidentiality obligations.

   5. With your consent:

      In all other circumstances not expressly set out in this Privacy Policy, we shall obtain your consent, where required under the Applicable Laws, before sharing your information with third parties for purposes not covered under this Privacy Policy.

5. CONSENT FOR DATA PROCESSING
   1. We collect and process your Personal Data only after obtaining your consent, where such consent is required under the Applicable Laws, or where the processing is otherwise permitted or required under the Applicable Laws. Prior to seeking such consent, we shall provide you with a clear and itemized notice, in plain language, specifying the Personal Data proposed to be collected and the specific purpose(s) for which it shall be processed, either as a standalone notice or through appropriate notifications on the relevant page or form of the Website, and such consent shall be free, specific, informed, unconditional, and unambiguous, indicated by clear affirmative action.
   2. You shall have the option to access the contents of the notice referred to in this Clause in English or in any of the languages specified in the Eighth Schedule to the Constitution of India.
   3. Upon the consent manager framework under the Digital Personal Data Protection Rules, 2025 becoming operational, you may also give, manage, review, and withdraw your consent through a Consent Manager registered with the Data Protection Board of India, and any consent so given, managed, reviewed, or withdrawn shall have the same legal effect as if given, managed, reviewed, or withdrawn by you directly under this Privacy Policy.
   4. Notwithstanding anything to the contrary contained in this Clause, we may process your Personal Data without obtaining separate consent for certain legitimate uses recognised under Section 7 of the Digital Personal Data Protection Act, 2023, including: (a) where you have voluntarily provided your Personal Data to us for a specified purpose and have not indicated that you do not consent to its use for such purpose; (b) where processing is necessary for compliance with any law, judgment, decree, or order; (c) for responding to a medical emergency involving a threat to your life or health or that of another individual; and (d) for taking measures to ensure your safety, or to provide assistance or services, during any disaster or breakdown of public order.
   5. Your consent may be obtained through clear affirmative actions, including when you:
      • submit an enquiry, request, or other communication through the Website;
      • apply for a career opportunity through the Website;
      • provide your information through forms made available on the Website; or
      • otherwise voluntarily provide your Personal Data to us through or in connection with the Website for a specified purpose.
   6. You may withdraw your consent as easily as you gave it at any time by using the consent withdrawal mechanism made available on the Website, where applicable, or by writing to us at solodroppvtltd@gmail.com. Please note that such withdrawal will not affect data already processed prior to your withdrawal, but may limit or disable your access to certain features or functionalities of the Website that rely on such consent.
   7. Where you withdraw your consent, we may be unable to provide certain functionalities of the Website that require the processing of your Personal Data.
   8. We maintain records of consents obtained from Users in accordance with the Applicable Laws.
   9. By providing your contact details through the Website, or by submitting an enquiry, career application, request, or other communication, you authorize Solodrop to contact you through telephone calls, SMS, WhatsApp or other messaging services, e-mail, or other means of communication for the purposes of responding to or otherwise addressing your enquiry, career application, request, or other communication. Any promotional or marketing communications shall be undertaken only in accordance with the Applicable Laws and applicable consent and communication preferences.
6. YOUR RIGHTS IN RELATION TO YOUR PERSONAL DATA
   1. As a User of the Website, you are entitled to exercise certain rights over the Personal Data that we collect and process. These rights empower you to manage your privacy and ensure that your data is handled transparently and fairly. Subject to Applicable Laws, your rights include the following:
      • Access to information: You may request a summary of the Personal Data we hold about you and the purposes for which it is being used.
      • Correction of inaccuracies: If any of the information you have provided is outdated, incorrect, or incomplete, you may request that it be updated or corrected.
      • Withdrawal of consent and deletion: Where processing is based on your consent, you may withdraw it at any time. Upon such withdrawal, or where the Personal Data is no longer required for the original purpose, you may also request deletion of such Personal Data, unless retention is required by law or necessary for legal or operational reasons.
      • Lodging complaints: If you believe that your Personal Data is being processed in violation of this Privacy Policy or Applicable Laws, you may raise a complaint with Solodrop through the grievance redressal mechanism provided under this Privacy Policy.
      • Nomination of an alternate contact: You may nominate another person to exercise your rights under this Privacy Policy on your behalf, in the event of your incapacity or death, as permitted under Applicable Laws.
   2. You can exercise any of these rights by contacting us at solodroppvtltd@gmail.com. Please include sufficient information to verify your identity and specify the right you wish to exercise.
   3. For your security and to prevent misuse, we may require you to verify your identity before acting on your request. In rare cases, we may not be able to comply with your request, for example, where it would interfere with legal obligations, compromise the privacy of others, or where we are otherwise unable to comply under the Applicable Laws. In such cases, we will provide a clear explanation.
   4. We shall publish on the Website, and keep updated, the means by which you may make a request to exercise your rights under this Clause, the particulars or verification details, if any, required to identify you in relation to such request, and the applicable timelines and procedure for grievance redressal, in accordance with the Digital Personal Data Protection Rules, 2025.
   5. While exercising your rights under this Privacy Policy, you shall comply with the duties prescribed under Section 15 of the Digital Personal Data Protection Act, 2023, including the duty not to impersonate another person, not to suppress any material information while providing your Personal Data, not to register a false or frivolous grievance or complaint, and to furnish only such information as is verifiably authentic while exercising your right to correction or erasure. You acknowledge that a breach of such duties may attract a penalty under the Digital Personal Data Protection Act, 2023, which is presently up to INR 10,000 (Indian Rupees Ten Thousand).
7. DATA RETENTION AND STORAGE
   1. We retain your Personal Data only for as long as is reasonably necessary to fulfil the purposes for which it was collected, including operating and maintaining the Website, responding to enquiries and communications, processing career applications, facilitating business or technology-related interactions, complying with our legal, regulatory, contractual, or operational obligations, resolving disputes, enforcing our rights, and preventing fraud or misuse of the Website.
   2. The criteria used to determine our retention periods include:
      • The nature and purpose for which the Personal Data was collected;
      • The nature of the Personal Data;
      • Whether the Personal Data is necessary to operate the Website, respond to enquiries and communications, process career applications, facilitate business or technology-related interactions, resolve disputes, enforce our Terms and Conditions, or detect and prevent fraud;
      • Legal and regulatory requirements under the Applicable Laws, including statutory record-keeping and audit obligations; and
      • The period for which the Personal Data may be required for the establishment, exercise, or defence of legal claims.
   3. Once the applicable retention period expires, or upon your request where permissible under the Applicable Laws, we will:
      • Delete your Personal Data in a secure manner; or
      • Anonymize such Personal Data so that it can no longer be associated with you and may be used for research, analytics, service improvement, or other lawful business purposes.

      We may retain limited Personal Data, including audit logs and other records, where required under the Applicable Laws or for security, fraud prevention, dispute resolution, or operational continuity. Without prejudice to the foregoing, where the Applicable Laws require retention of Personal Data, associated traffic data, or processing-related logs for a minimum period of one (1) year for specified purposes, including ensuring compliance with the Applicable Laws and responding to lawful requests of governmental agencies, we shall retain such Personal Data and logs for the period so required, after which they shall be erased unless their retention is otherwise required or permitted under the Applicable Laws.

   4. Your Personal Data may be stored on servers located in India or in such other jurisdictions as may be permitted under the Applicable Laws. We implement reasonable technical and organizational measures to safeguard your Personal Data, including appropriate access controls, encryption, and periodic security assessments.
   5. Where your Personal Data is transferred outside India for processing or storage by our affiliates or service providers, such transfer shall be carried out in accordance with the Applicable Laws, including the Digital Personal Data Protection Act, 2023 and any restrictions or conditions prescribed by the Government of India from time to time. Prior to any such transfer, we shall ensure that the concerned affiliate or service provider processes such Personal Data in accordance with the Applicable Laws and appropriate contractual obligations relating to confidentiality and security.
8. DATA SECURITY AND PROTECTION
   1. We implement reasonable technical, administrative, and organizational security measures to protect your Personal Data against unauthorized access, disclosure, alteration, misuse, loss, destruction, or other unauthorized processing. Such measures may include:
      • Encryption of Personal Data, where appropriate;
      • Access control and authentication mechanisms;
      • Firewalls, monitoring systems, and other security measures;
      • Role-based access to Personal Data on a need-to-know basis;
      • Periodic security assessments, vulnerability testing, and software updates; and
      • Other reasonable security safeguards as may be implemented from time to time.
   2. Access to your Personal Data is restricted to our authorized employees, agents, contractors, affiliates, and service providers who require such access for the purposes set out in this Privacy Policy. Such persons are subject to appropriate confidentiality obligations and are required to process your Personal Data only for authorized purposes.
   3. In the event of a Personal Data Breach, we shall take such measures as may be required under the Applicable Laws, including taking appropriate remedial actions to contain and mitigate the impact of the breach and notifying the affected Users, the Data Protection Board of India, or other competent authorities, where required under the Applicable Laws.
   4. While we take reasonable measures to safeguard your Personal Data, no method of electronic transmission or storage is completely secure. Accordingly, we cannot guarantee the absolute security of your Personal Data. You are responsible for taking reasonable precautions while accessing or using the Website and should promptly notify us of any unauthorized access to or misuse of your Personal Data that comes to your knowledge.
9. GRIEVANCE REDRESSAL AND DATA PROTECTION CONTACT
   1. If you have any questions, concerns, or complaints regarding the processing of your Personal Data, this Privacy Policy, or your rights under Applicable Laws, you may contact our designated Grievance Officer / Data Protection Officer using the details below:
      Grievance Officer / Data Protection Officer
      Name: Atharva Modgi
      Designation: Data Protection Officer
      Email: solodroppvtltd@gmail.com
      Working Hours: Monday to Friday, 10:00 AM to 6:00 PM (IST)
   2. We shall acknowledge your complaint or query within forty-eight (48) hours of receipt and shall endeavour to resolve it within fifteen (15) Business Days from the date of receipt, in accordance with the Applicable Laws. Where the nature or complexity of a complaint requires additional time, we shall inform you of the anticipated timeline for resolution.
   3. If you are not satisfied with the resolution provided or believe that your data rights have been violated, you may escalate the matter to the Data Protection Board of India or such authority as prescribed under Applicable Laws.
10. CHILDREN'S POLICY
    1. The Website is not intended for or directed at individuals under the age of 18 (eighteen) years. We do not knowingly collect, process, or store Personal Data from children. By accessing or using the Website, you represent and warrant that you are at least 18 (eighteen) years of age. We reserve the right to request age verification where reasonably necessary or where inconsistencies arise.
    2. If we become aware that we have inadvertently collected Personal Data from a child under 18 without verified parental consent, we will take immediate steps to delete such information from our records. Where any feature of the Website is knowingly directed at or made available to children, we shall process the Personal Data of such children only upon obtaining verifiable consent of their parent or lawful guardian, and shall not undertake tracking, behavioural monitoring, or targeted advertising directed at children, in each case as required under the Applicable Laws. We shall likewise obtain the verifiable consent of the parent or lawful guardian before processing the Personal Data of a person with disability who is unable to give legally valid consent, in the manner prescribed under the Applicable Laws.
    3. If you are a parent or legal guardian and believe that your child has provided us with their Personal Data in violation of this Privacy Policy, you may contact our Grievance Officer, and we will assist you in removing the relevant information.
11. POLICY UPDATES AND NOTIFICATIONS
    1. We may update or modify this Privacy Policy from time to time to reflect changes in our practices, legal or regulatory developments, technological advancements, or enhancements to the Website. When we do, the revised Policy will be posted on the Website with the “Last Updated Date” revised accordingly.
    2. You are encouraged to review this Privacy Policy periodically to remain informed about how we collect, use, and protect your Personal Data. Where any update to this Privacy Policy requires your consent under the Applicable Laws, we shall obtain such consent before processing your Personal Data in accordance with the updated Privacy Policy.
    3. Where required under Applicable Laws, including but not limited to significant changes in the purpose of processing or types of data collected, we will notify you by email, pop-up alert, or similar means prior to such changes becoming effective and, where applicable, seek your fresh consent.
    4. If you do not agree to any updated terms of this Privacy Policy, you must immediately cease using the Website and may request deletion of your Personal Data by contacting our Grievance Officer in accordance with Clause 9 of this Privacy Policy.