Privacy Policy

1. Who we are

This Privacy Policy is issued by Aura Systems (“Aura Systems”, “we”, “us”, or “our”). We design, build, and maintain mission-critical physical security infrastructure for government, defence, and industrial operations, and we operate related internal corporate systems and communications tools for our organisation and affiliated companies.

2. Scope of this policy

This policy describes how we collect, use, share, and protect personal information in connection with:

• General business operations — our public website at aurasystems.in (and related domains we operate), consultation and enquiry forms, careers-related submissions, team login / internal corporate portal access, project delivery, maintenance and AMC support, and ordinary business communications with customers, partners, suppliers, and job applicants.
• WhatsApp Business Platform Tech Provider operations — our use of Meta’s WhatsApp Business Platform as a Tech Provider to send and manage business messaging for Aura Systems and our own affiliated / portfolio companies (internal marketing and customer communications), as described in Section 3 and on our Business communications page.

This policy applies to personal information we process as a business. It does not govern Meta’s own processing of information under Meta’s products, which is described in Meta’s policies linked in Section 6.

3. Our role as a WhatsApp Business Tech Provider

Aura Systems is onboarding to, and intends to operate as, a Meta WhatsApp Business Platform Tech Provider. In that capacity we configure and operate WhatsApp Business Accounts (WABAs) and related messaging capabilities so that Aura Systems and its affiliated / portfolio companies can communicate with their own customers and contacts for legitimate business purposes such as service updates, appointment or project coordination, support responses, and internal marketing messages where permitted by applicable law and WhatsApp policies.

This is not a public multi-tenant messaging SaaS offered for resale to unrelated third-party businesses. We do not operate a general “WhatsApp for any business” product with public signup, pricing pages, or reseller onboarding for unaffiliated customers. Messaging is limited to Aura Systems’ own group and portfolio companies under our control or affiliation.

In this role we may process:

• Business profile and WABA configuration data for Aura Systems and affiliated companies;
• Phone numbers and identifiers of message recipients who interact with those WABAs;
• Message content and metadata necessary to deliver, log, and support conversations;
• Technical and usage logs required to operate, secure, and troubleshoot the integration.

Message delivery and certain platform functions are provided by Meta Platforms, Inc. and its affiliates through the WhatsApp Business Platform. Meta’s role and terms are described in Section 6.

4. Information we collect

Depending on how you interact with us, we may collect the following categories of information.

4.1 Website and contact data

• Identity and contact details you submit (for example name, organisation, official email, phone number, and the content of consultation or career enquiries);
• Account or authentication-related data if you use team login / internal portal features;
• Basic technical data such as IP address, browser type, device information, and pages requested, collected through ordinary server and security logs.

4.2 WhatsApp Business Account (WABA) data

• Business display name, profile information, and WABA identifiers for Aura Systems and affiliated companies;
• Phone numbers registered to WABAs and related configuration settings;
• Template, quality, and compliance-related status information provided by the WhatsApp Business Platform.

4.3 End-customer messaging data

• Recipient phone numbers and WhatsApp identifiers;
• Inbound and outbound message content, media attachments, and delivery / read status metadata;
• Opt-in / opt-out preferences and conversation history needed to honour consent and support requests.

4.4 Usage and log data

• API call logs, error logs, timestamps, and security event records;
• Operational metrics used to maintain availability, prevent abuse, and investigate incidents.

We do not intentionally collect special categories of personal data through our public website forms. If you choose to include sensitive information in a free-text message or attachment, we will process it only as needed to respond and will apply heightened care consistent with Section 8.

5. How we use information

We use personal information for the following purposes:

• To respond to consultation requests, project enquiries, and career applications;
• To deliver, support, and improve our security infrastructure products and services (including CCTV / ISR project handling, security installation, PIDS / ATEX deployments, maintenance and AMC, specialised equipment, infrastructure design, turnkey implementation, electric smart fencing / ESPF, and face / biometric systems);
• To operate internal corporate systems and authorised team access;
• To send and manage WhatsApp business messages for Aura Systems and affiliated / portfolio companies, including customer support and permitted marketing communications;
• To maintain message quality, prevent spam or abuse, and comply with WhatsApp / Meta platform rules;
• To secure our systems, detect fraud or unauthorised access, and maintain audit trails;
• To comply with legal, regulatory, contractual, and law-enforcement obligations;
• To establish, exercise, or defend legal claims.

We process information where we have a lawful basis under applicable law, which may include consent (for example WhatsApp marketing opt-ins), performance of a contract or pre-contractual steps, our legitimate interests in operating and securing our business (balanced against your rights), and legal obligation.

6. How information is shared

We do not sell personal information. We may share information only as follows:

• Meta / WhatsApp. When we use the WhatsApp Business Platform, message-related and WABA-related data is processed by Meta Platforms, Inc. and its affiliates as described in Meta’s Business Data Processing Terms and Privacy Policy. Meta provides the underlying messaging infrastructure; Aura Systems configures and operates WABAs for its own group and portfolio companies.
• Affiliated / portfolio companies. Where messaging or support is conducted on behalf of an affiliated company, relevant conversation and contact data may be accessible to that company for the business purpose of the communication.
• Service providers. Hosting, email, security, analytics (if any), and IT support providers who process data only on our instructions and under appropriate confidentiality and security obligations.
• Professional advisers and authorities. Lawyers, auditors, insurers, regulators, or law-enforcement agencies where required or permitted by law.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to appropriate safeguards.

7. Data retention

We retain personal information only for as long as needed for the purposes described in this policy, including to provide services, maintain security and audit records, resolve disputes, and meet legal or contractual retention requirements.

• Website / consultation enquiries: typically retained for up to 24 months after the last meaningful contact, unless a longer period is required for an active project, claim, or legal obligation.
• Career applications: typically retained for up to 12 months unless you are hired or a longer period is required by law or agreed with you.
• WhatsApp message content and metadata: retained for the minimum period needed to deliver conversations, handle support, demonstrate compliance, and meet legal obligations; operational logs may be retained for up to 12 months unless a security or legal investigation requires longer retention.
• WABA configuration data: retained for the life of the account relationship and a reasonable period thereafter for wind-down and compliance.

When retention ends, we delete or irreversibly anonymise information where feasible.

8. Data security

We implement administrative, technical, and organisational measures appropriate to the nature of the data and our risk profile. Our public materials reference ISO 27001-aligned practices and compartmentalised handling of sensitive programme information. Measures may include access controls, authentication for internal systems, encryption in transit where supported, least-privilege access, logging and monitoring, and vendor due diligence.

No method of transmission or storage is completely secure. If we become aware of a personal data breach that requires notification under applicable law, we will notify affected individuals and authorities as required.

9. Rights and choices

Subject to applicable law (including the Digital Personal Data Protection Act, 2023 in India, where applicable), you may have rights to request access, correction, updating, or deletion of your personal information, to withdraw consent where processing is consent-based, and to raise a complaint with a competent authority.

To exercise these rights, contact us using the details in Section 12. We may need to verify your identity before fulfilling a request.

WhatsApp opt-out

If you receive WhatsApp messages from Aura Systems or an affiliated company operating through our Tech Provider setup, you can opt out at any time by:

• Replying STOP, UNSUBSCRIBE, or an equivalent opt-out keyword in the WhatsApp chat; or
• Using any in-thread opt-out instruction we provide in the message; or
• Emailing Contact@aurasystems.co.in with your WhatsApp number and a request to stop messages.

After opt-out, we will stop marketing or non-essential messages to that number. We may still send essential service or legally required messages where permitted, or retain minimal records needed to honour the opt-out.

10. Children’s privacy

Our website, services, and WhatsApp business messaging are directed to organisations and adults acting in a business or professional capacity. We do not knowingly collect personal information from children under 18. If you believe a child has provided personal information to us, contact Contact@aurasystems.co.in and we will take appropriate steps to delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will change when we do. Material changes will be posted on this page and, where required by law or platform rules, communicated through additional appropriate channels. Continued use of our website or messaging services after an update constitutes notice of the revised policy, except where applicable law requires a different form of consent.

12. Contact us

For privacy questions, data-subject requests, or WhatsApp opt-out assistance, contact: