Privacy Policy

1. Who we are

Fraetech Private Limited is a company incorporated and registered in India. We operate veloora.ai and the Saksham institution management platform — a managed technology service built for Indian educational institutions. For all privacy-related matters, contact us at [email protected].

2. What data we collect

We collect personal data only through the mechanisms described below.

Enquiry form — When you submit a demo or contact request on this website, we collect: your name, institution name and type, email address, phone number, city and state, product interest (e.g., Saksham), and any notes you include in the message field.

Server logs — Cloudflare automatically collects IP address, browser type, and pages visited as part of standard CDN and security operations. This data is used for security, abuse prevention, and aggregate analytics only.

Email verification (OTP) — When you submit our enquiry form, we send a 6-digit one-time password (OTP) to the email address you provide to verify that the address is valid. OTP records are deleted immediately after successful verification, or automatically purged within 10 minutes of expiry if unused.

Cloudflare Turnstile — Our forms are protected by Cloudflare Turnstile, a privacy-preserving bot-detection widget. Turnstile sets cookies necessary for its operation. See our Cookie Policy for details.

What we do not collect through this website — We do not collect payment card data, bank account details, Aadhaar numbers, or any student or staff records through veloora.ai. Student and staff data processed within the Saksham platform is handled under a separate Data Processing Agreement with the relevant institution and is not governed by this policy.

3. How we use your data

We use the personal data you submit only to: (a) respond to your enquiry; (b) arrange a demonstration of Saksham or other Frae services; and (c) contact you in connection with the registered interest you expressed.

We do not use your personal data for advertising, behavioural profiling, or direct marketing unrelated to your enquiry. We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

4. Data storage and residency

Personally identifiable information submitted through this website is stored and processed in India. We use Cloudflare infrastructure with Indian data residency where available. Cloudflare's global network may process metadata (DNS resolution, CDN edge caching) through overseas nodes as part of normal internet routing; however, form submission data and enquiry records are retained within India.

Sub-processors

• Cloudflare Inc. — Infrastructure, CDN, DDoS protection, and Turnstile bot-detection. Data processing subject to Cloudflare's Data Processing Addendum.
• Microsoft Azure Communication Services — Transactional email only: OTP delivery and enquiry confirmation messages. No marketing email is sent through this service.

5. Data about children

This website is directed at institutional decision-makers and administrators, who are adults. We do not knowingly collect personal data from persons under the age of 18 through veloora.ai. If you believe a person under 18 has submitted personal data through this website, please contact [email protected] and we will promptly delete it.

Saksham processes student records (which may include data of minors) on behalf of educational institutions. That processing is governed by the Data Processing Agreement between the institution and Fraetech Private Limited, not by this policy.

6. Data retention

Enquiry data (including all personal information submitted through the contact or demo request form) is retained for 24 months from the date of submission, after which it is permanently deleted.

OTP records are deleted immediately upon successful verification. Unverified OTP records are automatically purged within 10 minutes of the OTP's expiry.

Server log data retained by Cloudflare is subject to Cloudflare's own retention policies.

7. Your rights under the Digital Personal Data Protection Act, 2023

As a Data Principal under the Digital Personal Data Protection Act, 2023 (DPDP Act), you have the following rights in respect of personal data we hold about you:

• (a) Right of access — You may request a summary of the personal data we hold about you and the purposes for which it is processed.
• (b) Right to correction — You may request that we correct any personal data that is inaccurate or incomplete.
• (c) Right to erasure — You may request deletion of your personal data. We will comply unless retention is required by law or legitimate business necessity.
• (d) Right to withdraw consent — Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• (e) Right of nomination — You may nominate another individual to exercise these rights on your behalf in the event of your death or incapacity, in accordance with the DPDP Act.
• (f) Right to grieve — You may file a grievance with us using the process described below.

To exercise any of these rights, email [email protected] with the subject line "DPDP Data Rights Request". We will acknowledge your request within 48 hours and respond substantively within 30 days.

8. Grievance redressal

If you have a concern about how we handle your personal data, you may contact our Grievance Officer:

• Email: [email protected]
• Subject line: "DPDP Grievance"

We will acknowledge your grievance within 48 hours of receipt and resolve it within 30 days. If you are not satisfied with our resolution, you may approach the Data Protection Board of India once it is constituted under the DPDP Act.

9. Cookies

We use only essential cookies. The Cloudflare Turnstile widget on our enquiry forms sets cookies that are strictly necessary for bot detection and form security. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. For full details, see our Cookie Policy.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. Changes take effect when posted to this page. For material changes, we will update the "Last updated" date below and, where appropriate, notify users via the announcement bar on the website.

Last updated: May 2026

11. Contact

For any privacy-related questions or requests, contact us at [email protected].