How ensTera Automations LLP collects, uses, stores, and protects personal data — written in plain language and aligned with the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025.
The full policy is below. If you only read this part, here's the essential picture.
Mostly your name, contact, and message — when you reach out to us. Nothing more.
Never. Not to marketers, not to data brokers, not to anyone. Period.
Access, correct, delete, withdraw consent, file a complaint — all yours under DPDP.
Access controls, encryption where applicable, audit logs — the reasonable safeguards required by law.
One email or call reaches our Grievance Officer. We respond within 90 days, often much sooner.
In the language of the DPDP Act, the "Data Fiduciary" is the entity that decides why and how personal data is processed. That's us.
ensTera Automations LLP
A Limited Liability Partnership registered under the Limited Liability Partnership Act, 2008.
Office details, working hours, and direct contact channels are listed on our Contact page.
This Privacy Policy is issued by ensTera Automations LLP and governs the personal data we collect, use, and protect — across our website, our direct interactions with you, and our products and services.
This Privacy Policy applies to personal data we process when you:
Some of our products — such as ensTram, TeraDFS, and Stock-C — are deployed entirely on your own infrastructure and process data locally. In those cases, we do not collect, see, or store the data flowing through those products. The personal data that flows inside such products is governed by your own data-handling policies, not ours.
We collect personal data in three contexts. We've listed them itemised below, as required under the DPDP Rules, 2025.
Our website does not set tracking cookies, does not run analytics scripts, and does not build profiles of visitors. The only data your browser sends automatically is the standard request information needed to deliver web pages — and that data is not retained or analysed by us.
If you call, message, or email us, we collect:
During scoping, contracting, build, and delivery, we may receive additional personal data about you and your team — names, designations, work emails, project-related correspondence, sample data shared for testing, and so on. We collect only what's necessary for the engagement, and we agree the scope of data handling with you in writing before any sensitive data is shared.
Each purpose is listed below itemised, as required by the DPDP Rules. We do not use your data for any purpose outside this list without your explicit consent.
We do not use personal data for behavioural advertising, automated profiling that affects you significantly, or sale to any third party.
Under the DPDP Act, personal data may be processed only on a clearly stated lawful basis. Ours are:
You may withdraw consent at any time. Withdrawal is as easy as giving consent — a single email or call to our Grievance Officer is sufficient. Withdrawal does not affect the lawfulness of any processing carried out before the withdrawal.
Our website and operations rely on a small number of third-party services. Each operates under its own privacy policy:
We do not embed advertising trackers, social-media widgets, or third-party analytics on this site. If that ever changes, this Policy will be updated and you will be notified through this page.
We implement reasonable security safeguards in line with Rule 6 of the DPDP Rules, 2025. These include:
We are not a "Significant Data Fiduciary" as defined under Section 10 of the DPDP Act, and therefore do not carry the additional obligations specific to SDFs. We do, however, treat the safeguards listed above as a continuous discipline — not a one-time exercise.
We share personal data only in the following narrow circumstances:
We do not sell, rent, or trade personal data. We do not share it with marketers or data brokers under any circumstance.
ensTera Automations LLP is based in India and primarily processes personal data within India. Some third-party services we use (Google, Meta) may process data on servers outside India under their own published policies. Where any cross-border transfer of personal data is necessary for delivering a service to you, it will be carried out in accordance with Section 16 of the DPDP Act and any notifications issued by the Central Government from time to time.
We retain personal data only for as long as necessary for the purpose it was collected, and we delete or anonymise it thereafter. Specific retention periods are:
You may request earlier erasure at any time by contacting our Grievance Officer, except where retention is required by law. Where erasure applies, you will be notified before deletion — in line with Rule 8 of the DPDP Rules, 2025.
Under the DPDP Act, 2023, you — the Data Principal — have the following rights with respect to your personal data:
Send an email to ensteraautomations@gmail.com or call +91 81487 78286 with the subject "Data Principal Request — [Access / Correction / Erasure / Withdrawal / Nomination]". We may need to verify your identity before acting on your request.
We will respond to all rights requests within the timelines specified under the DPDP Rules, 2025 — and within 90 days at the outside, as required for grievance redressal.
Our services are designed for businesses and adults. We do not knowingly collect personal data of children (under 18 years of age) or persons with disabilities who have a lawful guardian — without first obtaining verifiable consent from the parent or lawful guardian, in line with Section 9 of the DPDP Act and Rule 10 of the DPDP Rules, 2025.
We do not undertake any tracking, behavioural monitoring, or targeted advertising directed at children. If you believe a child's personal data has been shared with us inadvertently, please contact our Grievance Officer immediately so we can delete it.
In the event of a personal data breach affecting your information, we will:
As required under Section 8(9) of the DPDP Act and Rule 9 of the DPDP Rules, 2025, we have designated a Grievance Officer to handle any complaints, questions, or requests relating to your personal data.
If your grievance remains unresolved or you are dissatisfied with how we've handled it, you have the right to escalate the matter to the Data Protection Board of India, the statutory body constituted under Chapter V of the DPDP Act. Complaints can be filed through the Board's digital portal once operational.
We may update this Privacy Policy from time to time — for example, when our services change, when new third-party processors are introduced, or when legal requirements evolve.
Material changes will be reflected in an updated effective date at the top of this page and, where the change significantly affects how your personal data is handled, we will take reasonable steps to notify you directly through the contact details you've shared with us.
We encourage you to revisit this page periodically. Continued use of our website or services after a material update constitutes acknowledgement of the updated policy.