Privacy Policy

1. Introduction

Welcome to VILVOM LLP ("we," "our," or "us"). VILVOM is a technology-driven agricultural services platform developed to empower farmers both large-scale and smallholder with intelligent pest infestation assessment and professional drone-assisted crop management services.

This Privacy Policy describes how VILVOM collects, uses, stores, discloses, and protects the personal information of users ("you" or "User" or "your") who access our services through:

• Our official website: www.vilvom.com
• Our mobile application: VILVOM (available on Google Play Store)
• Any related services, features, or communications offered by VILVOM

By downloading, registering, or using the VILVOM application or website, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. This Privacy Policy is prepared in compliance with the Digital Personal Data Protection Act, 2023 (DPDPA) and the Digital Personal Data Protection Rules, 2025. If you do not agree, please discontinue use of our services.

2. Personal Data We Collect and Process

We provide this itemized description of personal data we collect and the specific purposes for which each category is processed:

2.1 Information You Provide Directly

2.2 Information Collected Automatically

When you use the VILVOM application, the following data may be collected automatically:

2.3 Information from Third Parties

We may receive supplementary data from:

1. Agricultural databases and pest outbreak registries (for improving recommendation accuracy)
2. Payment processors for processing drone service transactions
3. Mapping and satellite services to enhance farm location accuracy

3. How We Use Your Information

We use the collected information solely for the following legitimate purposes:

3.1 Service Delivery

1. Authenticating your identity via OTP verification
2. Processing pest detection requests and generating AI-based assessment reports
3. Scheduling, mobilizing, and organizing drone service operations to your farm location
4. Delivering treatment and recommendation reports

3.2 Communication

1. Sending One-Time Passwords (OTPs) for secure login
2. Issuing booking confirmations, service updates, and drone deployment notifications
3. Responding to your feedback, complaints, and support requests

3.3 Platform Improvement

1. Analyzing aggregated usage patterns to improve app functionality and user experience
2. Identifying and resolving technical issues

3.4 Legal and Safety Compliance

1. Complying with applicable laws, regulations, and legal proceedings
2. Detecting and preventing fraudulent, unauthorized, or illegal activity
3. Enforcing our Terms of Service

4. Specific Data Collection Contexts

4.1 Location Data

The VILVOM application requests access to your device's GPS location for the following specific purposes:

1. Drone service booking: To accurately record the GPS coordinates of your farm for operator navigation and service delivery
2. Nearby recommendations: To provide localized pest management recommendations relevant to your geographic area
3. Field mapping: To assist drone operators in planning flight paths over your land

You retain full control over location access. Location data is only collected when you actively initiate a drone booking or pest assessment. You may revoke location permission at any time through your device settings. We do not track your location continuously or in the background. Disabling location access may limit certain features of the application.

4.2 Camera and Image Data

The VILVOM application requests camera access to enable you to photograph crops and submit images for pest infestation analysis. Please note:

1. Images you submit are processed by our AI pest infestation assessment framework
2. Submitted images are stored on our secure servers to generate and retrieve your assessment history
3. Images are never sold to third parties or used for purposes unrelated to our specified services
4. You may request deletion of your submitted images at any time (see Section 10)

4.3 Push Notifications

VILVOM uses push notifications to:

1. Deliver OTP codes for login authentication
2. Notify you of drone-based services, booking confirmations, scheduling updates, and operator dispatches
3. Alert you to important service updates or pest outbreak advisories in your region

You may manage or disable push notifications through your device's notification settings. Disabling notifications will not affect your ability to use the app, but you may miss time-sensitive service alerts.

5. Data Storage, Security and Retention

5.1 Storage Location

Your personal data is stored on secure servers hosted on VILVOM's backend infrastructure. We take reasonable technical and organizational measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction.

5.2 Security Safeguards

We implement the following reasonable security safeguards to prevent personal data breach:

1. Encryption: All communication between you and our website services uses HTTPS/TLS encryption.
2. Authentication: OTP-based two-factor authentication is required for all account logins
3. Access controls: Only authorized VILVOM personnel have access to personal data on a strict need-to-know basis, enforced through role-based access controls (RBAC) and multi-factor authentication
4. Logging and monitoring: We maintain comprehensive logs of data access and processing activities with appropriate monitoring and review to detect unauthorized access. Access logs enable investigation and remediation to prevent recurrence of security incidents
5. Data backup: We maintain reasonable measures for continued processing in the event of data compromise, including regular encrypted backups
6. Log retention: Access logs and processing records are retained for a minimum period of one year unless longer retention is required by applicable law
7. Data processor agreements: Our contracts with third-party service providers include appropriate provisions requiring them to take reasonable security safeguards

5.3 Data Retention Period

We retain your personal data in accordance with its relevance and appropriateness with the VILVOM's services.

1. Active accounts: Personal data is retained to maintain your active account and service history
2. Inactive accounts: If you do not access your VILVOM account or use our services for a period of 3 years, we will send you a notification at least 48 hours before automatically erasing your personal data, unless you log in or contact us to continue service
3. Account deletion: Upon your request to delete your account, your identifiable personal data is purged within 30 days, except where retention is required by law
4. Minimum log retention: Personal data, associated traffic data, and processing logs are retained for a minimum of one year from the date of processing for audit, security investigation, and compliance purposes, after which they are erased unless further retention is required by law
5. Legal obligations: Data may be retained longer to comply with applicable legal or regulatory obligations, resolve disputes, or enforce our agreements

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to any third party. We may share limited information only in the following circumstances:

Any third-party service providers we engage are bound by confidentiality obligations and are prohibited from using your data for any purpose other than the service they are contracted to provide.

7. Data Breach Response and Notification

7.1 Notification to Users

We will notify affected users without delay through your registered email address, mobile number (SMS), or in-app notification. The notification will include:

1. A description of the breach, including its nature, extent, and timing
2. The consequences relevant to you that are likely to arise from the breach
3. The measures we have implemented or are implementing to mitigate the risk
4. Safety measures you can take to protect your interests
5. Contact information (see Section 9) for queries about the breach

7.2 Notification to Data Protection Board (DPBI)

We will report the breach to the DPBI:

1. Without delay: Initial description including nature, extent, timing, location, and likely impact
2. Within 72 hours: Detailed information on events, circumstances, mitigation measures, findings regarding breach causation, remedial actions, and report of user notifications

8. Cross-Border Data Transfer

While storing your personal data outside India to service providers (such as cloud infrastructure providers), we ensure such transfers comply with DPDP Rules 2025 and any requirements specified by the Central Government of India. We do not make personal data available to foreign states or entities under their control without complying with applicable legal requirements.

9. Contact Information for Data Protection

We have designated the following contact person who can answer your questions about the processing of your personal data:

10. Your Rights and How to Exercise Them

As a VILVOM user, you have the following rights under the DPDPA regarding your personal data:

10.1 Your Rights

1. Right to Access: Request a copy of the personal information we hold about you
2. Right to Correction: Correct inaccurate or incomplete information in your profile
3. Right to Deletion: Request deletion of your account and associated personal data
4. Right to Data Portability: Request your data in a machine-readable format
5. Right to Withdraw Consent: Revoke consent for optional data uses (such as using anonymized images for AI model training) at any time
6. Right to Nominate: Nominate one or more individuals to exercise your rights on your behalf

10.2 How to Exercise Your Rights

To exercise any of these rights, you may:

1. Email us at: info@vilvom.com
2. Contact Support through the VILVOM mobile application

10.3 Consent Withdrawal Mechanism

To withdraw your consent with ease you may:

Email with subject "Consent Withdrawal" to: info@vilvom.com

10.4 Response Timeline

We will acknowledge all requests within 7 business days and provide a substantive response within 90 days of receipt of your verified request.

11. Grievance Redressal Mechanism

If you have any grievances regarding the processing of your personal data, you may contact us at:

We will acknowledge your grievance within 7 business days and provide resolution within 90 days from the date of receipt. If you are not satisfied with our resolution, you may file a complaint with the Data Protection Board of India as per the procedures outlined on their official website.

12. Children's Privacy (Rule 10 Compliance)

The VILVOM application is intended for use by adults and professional agricultural users. We do not knowingly collect personal information from individuals under the age of 18 years. If you believe a minor has provided us with personal information, please contact us immediately at info@vilvom.com and we will take prompt action to remove such data.

13. Third-Party Links and Services

The VILVOM app or website may contain links to partner service pages, third-party websites, or government agricultural portals. This Privacy Policy applies exclusively to VILVOM's own services. We are not responsible for the privacy practices of third-party platforms and encourage you to review their privacy policies independently.

14. Cookies and Web Tracking (Website)

Our website www.vilvom.com may use cookies and relevant tools to:

1. Remember your preferences and settings
2. Analyze website traffic and user behavior (via analytics tools)
3. Improve website performance and content relevance

You may configure your browser to Select/Reject cookies or alert you when cookies are being sent. Please note that some features of the website may not function correctly if cookies are disabled.

15. Changes to this Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our services, legal obligations, or data practices. When we make material changes, we will:

1. Update the "Last Updated" date at the top of this document
2. Display a prominent notice within the VILVOM application
3. Send a notification to your registered email or mobile number, where applicable

Your continued use of VILVOM services after such changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this policy periodically.

16. Governing Law and Jurisdiction

This Privacy Policy shall be governed by and construed in accordance with the laws of the Republic of India, including the Digital Personal Data Protection Act, 2023 (DPDPA) and the Digital Personal Data Protection Rules, 2025. Any disputes arising in connection with this policy shall be subject to the exclusive jurisdiction of the courts of Coimbatore, Tamil Nadu, India.

17. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please reach out to us:

This Privacy Policy has been prepared in compliance with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025.