Privacy Policy

SGT HydroEdge Private Limited ("SGT HydroEdge", "we", "us", or "our") is a Decarbonisation Infrastructure Company headquartered in Pune, Maharashtra, India. We operate the website www.sgthydroedge.com and related digital platforms including the GreenVision IoT platform (collectively, the "Services").

This Privacy Policy explains what personal information we collect, how we use it, with whom we share it, and the rights you have over your data. It applies to all visitors, customers, business partners, and users of our Services.

We collect information in the following categories:

A. Information You Provide Directly

• Contact details — name, email address, phone number, job title, and company name when you fill in contact forms, request a demo, subscribe to updates, or submit partnership enquiries.
• Business information — fleet size, industry vertical, energy consumption data, and operational details you share during a commercial engagement or assessment.
• Communications — content of emails, enquiries, or feedback you send to us.

B. Information Collected Automatically

• Usage data — pages visited, time spent, links clicked, referring URLs, and browser/device type collected via cookies and analytics tools.
• Technical data — IP address, operating system, browser version, and approximate geographic location derived from IP.

C. IoT and Platform Data (GreenVision Users)

• Device telemetry — HHO system performance metrics, fuel flow rates, engine parameters, emission sensor readings, and operating conditions transmitted by installed GreenDrive, GreenEdge, GreenMarine, or GreenX devices.
• Fleet and operational data — GPS-derived trip data, vehicle identifiers, route information, and driver performance scores where applicable.
• Account data — platform login credentials, user roles, and access logs.

D. Information from Third Parties

• Publicly available company information and business contact details for B2B prospecting and partnership outreach.
• Data from analytics partners (e.g. Google Analytics) in aggregated and anonymised form.

We do not use your personal data for automated decision-making that produces legal effects on you, nor do we sell your personal data to any third party for their marketing purposes.

Under the Digital Personal Data Protection Act, 2023 and applicable data protection law, we process your personal data on the following bases:

• Consent — for sending marketing communications and newsletters. You may withdraw consent at any time.
• Contract performance — to fulfil obligations under a service agreement, hardware supply, or DaaS contract with you or your organisation.
• Legitimate interests — to operate and improve our website, respond to B2B enquiries, and maintain platform security, where these do not override your privacy rights.
• Legal obligation — where processing is required to comply with applicable Indian law, regulatory requirements (BRSR, CPCB), or court orders.

Our website uses cookies and similar technologies to enhance your browsing experience and collect analytical data.

You can manage cookie preferences through our cookie consent banner on your first visit, or via your browser settings. Disabling analytics cookies will not affect your ability to use the website.

We do not sell, rent, or trade your personal data. We may share it in the following limited circumstances:

• Service providers — cloud hosting providers, CRM software, email delivery services, and analytics platforms that process data on our behalf under strict contractual data processing agreements.
• Business partners — consulting, technology, or channel partners involved in delivering a specific project you are part of, only with your knowledge and as required for service delivery.
• Regulatory and legal compliance — government bodies, regulatory authorities (CPCB, MoEFCC, SEBI), or law enforcement when required by law, court order, or to protect our legal rights.
• Corporate transactions — in the event of a merger, acquisition, or asset sale, data may be transferred to successor entities, subject to equivalent privacy protections.

The GreenVision IoT Digital Twin platform processes operational and telemetry data from SGT HydroEdge devices installed at customer sites or on customer vehicles. The following applies specifically to GreenVision data:

• Ownership: Operational and fuel performance data generated by your equipment remains your property. SGT HydroEdge processes this data solely to deliver the platform service, generate reports, and improve system performance.
• Aggregation & anonymisation: We may use anonymised, aggregated operational data across the installed base for benchmarking, product improvement, and research. This data cannot be used to identify individual customers or operations.
• ESG and carbon reports: Reports generated on the GreenVision platform for BRSR, CBAM, or carbon credit documentation are your property and are not shared with any third party without your explicit consent.
• Data access: Your authorised team members may access platform data via role-based access controls. SGT HydroEdge support staff may access your data solely for troubleshooting and service delivery purposes.
• Data hosting: GreenVision data is hosted on secure cloud infrastructure in India. Where data is processed or stored outside India, we ensure adequate protections are in place as required under the DPDP Act.

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required or permitted by law.

When data is no longer required, it is securely deleted or anonymised in a manner that makes identification impossible.

Under the Digital Personal Data Protection Act, 2023 and applicable law, you have the following rights regarding your personal data:

• Right to access — request a copy of the personal data we hold about you.
• Right to correction — request that inaccurate or incomplete data be corrected.
• Right to erasure — request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
• Right to withdraw consent — where processing is based on consent (e.g. marketing emails), you may withdraw at any time without affecting the lawfulness of prior processing.
• Right to grievance redressal — raise a complaint with our Data Protection Officer and receive a response within a reasonable timeframe.
• Right to nominate — nominate another individual to exercise rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, please contact us using the details in Section 14. We will respond within 30 days of receiving your request. We may need to verify your identity before processing your request.

You also have the right to lodge a complaint with the Data Protection Board of India if you believe your data rights have been violated.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These include:

• HTTPS encryption for all data transmitted to and from our website and platform.
• Role-based access controls ensuring only authorised personnel can access personal data.
• Secure cloud infrastructure with regular security assessments and patches.
• Encrypted storage for sensitive operational and account data on the GreenVision platform.
• Employee confidentiality obligations and data handling training.

While we take all reasonable precautions, no transmission over the internet is completely secure. If you suspect any misuse or breach of your data, please contact us immediately at the address in Section 14 and we will investigate promptly.

Our website may contain links to third-party websites, partner pages, media publications (e.g. CNBC-TV18, ABP News), or platform integrations. This Privacy Policy applies only to www.sgthydroedge.com and SGT HydroEdge-operated platforms.

We are not responsible for the privacy practices of third-party websites and encourage you to review their privacy policies before submitting any personal data to them.

Our Services are directed exclusively at business professionals and are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly. If you believe we have such data, please contact us immediately.

We may update this Privacy Policy from time to time to reflect changes in our practices, the Services we offer, or applicable law. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Post a notice on our website homepage for a reasonable period.
• Where required by law or where we have your email address, notify you directly.

We encourage you to review this page periodically. Your continued use of our Services after a policy update constitutes your acceptance of the revised terms, to the extent permitted by applicable law.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:

We aim to respond to all privacy-related queries within 30 business days. If you are not satisfied with our response, you may escalate to the Data Protection Board of India once it is constituted under the DPDP Act, 2023.