Privacy Policy

1. Introduction

GPUVolt ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our GPU cloud computing services at gpuvolt.ai. This policy is compliant with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and applicable Indian data protection laws.

By using our services, you consent to the practices described in this Privacy Policy. If you do not agree, please discontinue use of our services.

2. Information We Collect

3. How We Use Your Information

4. Disclosure of Your Information

We do not sell, trade, or rent your personal information to third parties. We disclose your information only in the following circumstances:

5. Method of Disclosure

Where disclosure of your information to third parties is necessary, it is transmitted using the following methods:

• • Encrypted API calls — data shared with service providers is transmitted over TLS 1.2/1.3-encrypted HTTPS connections.
• • Tokenisation — payment information is tokenised by our payment processors; we never transmit or store raw card numbers.
• • Secure file transfer — any bulk data transfers for legal or business-transfer purposes are conducted via encrypted, access-controlled channels.
• • Minimum necessary data — we share only the data strictly required for the stated purpose; we do not share full data sets when a subset suffices.

6. Security Practices

We implement industry-standard security measures in compliance with the IT (SPDI) Rules, 2011, including:

• • Encryption in transit: All data is transmitted over TLS 1.2 or higher.
• • Encryption at rest: Databases and storage volumes are encrypted using AES-256.
• • Access controls: Role-based access control (RBAC) ensures only authorised personnel can access personal data.
• • Authentication: Multi-factor authentication (MFA) is enforced for all internal systems and encouraged for user accounts.
• • Regular audits: We conduct periodic security assessments and vulnerability scans of our infrastructure.
• • Incident response: We maintain a documented incident response plan. In the event of a data breach, affected users will be notified as required by applicable law.

However, no method of transmission over the internet is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as your account is active or as necessary to provide services. We also retain data as required by law (e.g., financial records for a minimum of 8 years under Indian accounting standards). Upon account deletion or upon your written request, personal data will be purged within 30 days, except where retention is required by law.

8. International Data Transfers

Your information may be processed on servers located outside India. When we transfer data internationally, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses or equivalent protections) to maintain the level of protection required under Indian law.

9. Your Rights

You have the following rights with respect to your personal information:

• • Access: Request a copy of the personal data we hold about you.
• • Correction: Request correction of inaccurate or incomplete personal data.
• • Deletion: Request deletion of your personal data, subject to legal retention obligations.
• • Opt-out: Unsubscribe from non-transactional communications at any time via the unsubscribe link in our emails or by contacting us.
• • Grievance redressal: Lodge a complaint with our Grievance Officer (see Section 11).

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days of receiving your request.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a prominent notice on our platform at least 14 days before the changes take effect. Your continued use of our services after such notice constitutes acceptance of the updated policy.

11. Grievance Officer & Contact

In accordance with the Information Technology Act, 2000 and applicable rules, our Grievance Officer can be contacted at:

Grievances will be acknowledged within 48 hours and resolved within 30 days of receipt.