Privacy Policy

Last updated: September 29, 2026

Introduction

At StatStream (“we,” “us,” or “our”), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our IoT platform services.

By using our services, you agree to the collection and use of information in accordance with this policy.

Information We Collect

1. Personal Information

We may collect the following personal information:

Name and contact information (email, phone number)
Company information and job title
Account credentials and authentication data
Communication preferences

2. Usage Information

We automatically collect certain information about your use of our services:

IP address and location data
Browser type and version
Device information
Pages visited and time spent on our site
Referral sources

3. IoT Data

When using our IoT platform, we may collect:

Sensor data and measurements
Device telemetry and performance metrics
System logs and diagnostic information
Configuration and settings data

How We Use Your Information

We use the collected information for the following purposes:

Service Provision: To provide, maintain, and improve our IoT platform services
Account Management: To create and manage your account, process transactions, and provide customer support
Communication: To send you important updates, newsletters, and respond to your inquiries
Analytics: To analyze usage patterns and improve our website and services
Security: To detect and prevent fraud, abuse, and security incidents
Legal Compliance: To comply with applicable laws and regulations

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except in the following circumstances:

Service Providers: We may share information with trusted third-party service providers who assist us in operating our website and conducting our business
Legal Requirements: We may disclose information when required by law or to protect our rights and safety
Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred
Consent: With your explicit consent for specific purposes

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit and at rest
Regular security assessments and updates
Access controls and authentication mechanisms
Secure data centers and cloud infrastructure
Employee training on data protection

Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. When we no longer need your information, we will securely delete or anonymize it.

Your Rights

Depending on your location, you may have the following rights regarding your personal information:

Access: Request a copy of the personal information we hold about you
Rectification: Request correction of inaccurate or incomplete information
Erasure: Request deletion of your personal information in certain circumstances
Portability: Request transfer of your data to another service provider
Restriction: Request limitation of how we process your information
Objection: Object to our processing of your personal information

To exercise these rights, please contact us using the information provided below.

India: Digital Personal Data Protection Act, 2023

This section applies to personal data of individuals in India and explains how we meet our obligations under the Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and the rules made under it. In this section, “you” is the Data Principal — the person the personal data is about.

Who is responsible for your data

Statocean Technologies (StatStream) is the Data Fiduciary for personal data we collect directly — for example, when you visit our website, book a demo, contact us or create an account.
When a customer uses the StatStream platform to manage data about its own staff or users (such as user accounts or work order assignees), that customer is the Data Fiduciary and we process the data on its behalf as a Data Processor. Please contact that organisation first to exercise your rights over that data.

Why we process your data

We process your personal data only for a lawful purpose, and either:

With your consent, which must be free, specific, informed, unconditional and unambiguous, given by a clear affirmative action; or
For certain legitimate uses permitted by the DPDP Act — for example, when you voluntarily share your data for a specific purpose (such as a demo request) and have not said you do not consent to its use for that purpose, or where processing is required to comply with law.

Notice

When we ask for your consent, we tell you what personal data we will collect, why, how you can exercise your rights and how you can complain to the Data Protection Board of India. You can ask to read this notice in English or in any language listed in the Eighth Schedule to the Constitution of India.

You can withdraw your consent at any time, and it is as easy to withdraw as it was to give — email us at privacy@statstream.ai or use the settings in your account. Withdrawing consent does not affect processing done before you withdrew it. Once you withdraw, we will stop processing your data for that purpose and erase it, unless the law requires us to keep it. Where the DPDP Act allows, you may also give, manage or withdraw consent through a registered Consent Manager.

Your rights

Under the DPDP Act you have the right to:

Access information — a summary of the personal data we process about you and how we process it, and the identities of other Data Fiduciaries and Data Processors we have shared it with, with a description of what was shared.
Correction and erasure — to have inaccurate or misleading data corrected, incomplete data completed, data updated, and data erased when it is no longer needed for the purpose it was collected for, unless the law requires us to keep it.
Grievance redressal — to have your complaints about how we handle your data resolved by us.
Nominate — to nominate another person to exercise your rights if you die or become unable to do so.

To use any of these rights, contact our Grievance Officer (details below). We may need to verify your identity first, and we respond within the time required under the DPDP Act and its rules.

Grievances and the Data Protection Board

If you have a complaint about how we process your personal data, please contact our Grievance Officer first:

Grievance Officer
StatStream (Statocean Technologies)
Email: privacy@statstream.ai
Address: Nagpur, Maharashtra, India

If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India once you have used our grievance process.

Keeping your data safe

We take reasonable security safeguards to prevent personal data breaches, including the measures listed under Data Security above. If a personal data breach occurs, we will inform the Data Protection Board of India and each affected Data Principal as required by the DPDP Act and its rules.

How long we keep your data

We erase your personal data when you withdraw consent, or as soon as it is reasonable to assume the purpose for which it was collected is no longer being served — unless the law requires us to keep it for longer. We also ask our Data Processors to erase it.

Transfers outside India

We may process your personal data outside India, for example on cloud infrastructure. We will not transfer personal data to any country or territory that the Central Government has restricted by notification under the DPDP Act.

Children

Under the DPDP Act, a child is anyone under 18. We do not knowingly process a child’s personal data without verifiable consent from a parent or lawful guardian, and we do not carry out tracking, behavioural monitoring or targeted advertising directed at children.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards to protect your information.

Children’s Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information. For individuals in India, the higher age and parental-consent requirements under the DPDP Act apply, as described in the India section above.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on this page and updating the “Last updated” date.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Data Protection Officer and Grievance Officer (India)
StatStream (Statocean Technologies)
Email: privacy@statstream.ai
Address: Nagpur, Maharashtra, India