What we collect.And what we never do.

The Data Fiduciary for any personal data collected on this site is Veranox Systems Private Limited, based in Chennai, Tamil Nadu, India. Questions, requests, and grievances may be raised with our Grievance Officer using the details in section 11.

When you submit the access enquiry form on this site, we collect the information you enter into it:

• Your name
• Your email address
• Your role (for example, faculty, placement lead, or student)
• Your institution or organisation
• The message you write to us

We do not run advertising trackers, and we do not build behavioural profiles of visitors. Standard server and hosting logs (such as IP address and request metadata) may be processed transiently by our hosting providers to deliver and secure the site; we do not use these to identify you.

We use the information you submit for a single, clearly stated purpose: to read your enquiry, assess fit for a GradiumOS pilot or access, and reply to you. We may use your contact details to follow up on that conversation. We do not repurpose your data for anything you did not ask for.

We process your personal data on the basis of your consent under the Digital Personal Data Protection Act, 2023 (DPDP Act). You give that consent by choosing to submit the enquiry form. Consent is specific, informed, and freely given, and you may withdraw it at any time (see section 9). Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it.

Enquiry data is held in access-controlled systems and is visible only to the founder and the limited tooling used to operate Veranox. We retain enquiry data only for as long as needed to handle your enquiry and any pilot conversation that follows. Where a conversation does not progress, we delete or anonymise the enquiry within a reasonable period. Where you become a pilot participant, retention is governed by the separate pilot agreement with your institution.

We keep the chain of third parties deliberately short. We use reputable hosting and delivery providers to run this site and our services:

• Hosting and delivery — Vercel and Render host the website and product services. They process data only to provide hosting to us, under their own data-processing terms.
• No data brokers, no ad networks. We do not share or sell your personal data to advertisers, data brokers, or any third party for their own marketing.

GradiumOS is engineered so that verification never requires exposing who you are. This posture extends the same discipline you see on this site into the product itself:

• Bands, not raw scores or PII. The public verifier shows only competence bands and validity. It never shows a name, an institution, contact details, or a raw score.
• No login to verify. Anyone can check a Signal against its Ed25519 signature with no account — the check returns validity and competence bands, never personal data.
• Selective disclosure. The Signal carries a pseudonym plus competence bands — never raw personal data on the public surface.
• Consent-gated, k-anonymity-floored discovery. Inside the product, any discovery of learners is gated on the learner’s consent and floored by k-anonymity so an individual cannot be singled out.

We apply reasonable security safeguards proportionate to the limited data we hold: access controls, encrypted transport (HTTPS), and least-privilege handling. The Signal itself is protected by Ed25519 digital signatures, so a credential cannot be forged or altered without detection. No system is perfectly secure, but we design to minimise both the data we hold and the harm if it were ever exposed.

Under the DPDP Act, you have the following rights over the personal data we hold about you:

• Access — ask what personal data of yours we hold and how we process it.
• Correction — ask us to correct inaccurate or incomplete data.
• Erasure — ask us to delete your data where we no longer need it for the purpose you gave it.
• Withdraw consent — withdraw your consent at any time, as easily as you gave it.
• Grievance redressal — raise a complaint with our Grievance Officer, and escalate to the Data Protection Board of India if unresolved.
• Nominate — nominate another person to exercise your rights in the event of death or incapacity.

To exercise any of these, contact the Grievance Officer in section 11. We will respond within the timelines required under the DPDP Act.

This site is intended for institutional and professional enquiries, not for use by children. We do not knowingly collect personal data from anyone we know to be a child without verifiable parental consent, in line with the DPDP Act.

Data Fiduciary

Veranox Systems Private Limited

Grievance Officer

Uday Volety (Founder)

Email

uday.provenor@gmail.com

Phone

+91 84388 85247

Place

Chennai, Tamil Nadu, India

We may update this policy as the product and our obligations evolve. When we do, we will change the date at the top of this page. Material changes that affect how we use your personal data will be communicated to active pilot participants directly.