Privacy notice
How vehicle and registration-plate data captured by this system is processed, under the Digital Personal Data Protection Act, 2023 (DPDP Act).
What we collect
Cameras operated at participating sites capture passing vehicles. For each vehicle the system records: the registration plate as read at the edge, the date and time, the camera site, and a still image (the "card") used for verification. Any other key the device attaches to a read is not stored.
Why we process it
- Fleet and site traffic analytics for the operator of each camera site.
- Continuous improvement of on-device recognition models.
- Where required by law, provision to law-enforcement and transport authorities under the Motor Vehicles Act, 1988, and the DPDP Act's legitimate-use provisions.
Data is not sold, advertised against, or used for any purpose beyond those listed. Where the applicable legal basis is consent, it is obtained at the point of collection and may be withdrawn at any time.
Where it is stored
All processing and storage occurs on servers located in India. Data is not transferred to, or stored in, any other country. Backups are encrypted and remain within India.
How long we keep it
We keep each kind of data only as long as its purpose needs, and each period is a fixed, published value:
- Number-plate reads: up to 400 days.
- Vehicle snapshots: up to 45 days in active storage, then up to 395 days in reduced-access storage.
- Access and audit logs: at least 1 year (400 days), as required by the Ministry of Road Transport & Highways' data-sharing policy.
- Device liveness records (device id and time of each heartbeat only): up to 180 days.
After its period each item is automatically deleted. Aggregated, anonymised statistics may be retained longer — they no longer relate to an identifiable vehicle. You can ask us to erase your data sooner (see Your rights below).
Your rights
Under the DPDP Act you may seek access to, correction of, or erasure of your personal data, nominate another individual to exercise these rights, and lodge a grievance; withdraw any consent you have given; and, if unsatisfied with our response, lodge a complaint with the Data Protection Board of India. Requests quoting the vehicle registration number and the date/time and site of the capture can be made to the grievance officer below. We respond as required by the Act.
Security
Access to the data is restricted to authenticated, role-separated accounts with multi-factor authentication for privileged users; every data access is audit-logged and retained for at least one year; data in transit is TLS-protected; backups are encrypted. Hosting and audit practices follow the security requirements of the Ministry of Road Transport & Highways' Policy for Data Sharing from the National Transport Repository.
Grievance officer
Data Protection Officer, Analytigram — it@aeoru.com
This notice is provided for transparency regarding data captured by the system. It is not a consent form and does not affect your statutory rights.