1. Privacy Policy

Version 1.0 | Effective Date: To be updated before website publishing

This Privacy Policy explains how MedCuore Medical Solutions Pvt. Ltd., operating under the Nippo Airvue brand ("Nippo Airvue", "Company", "we", "us" or "our"), collects, uses, stores, shares and protects personal data and product data when customers, visitors, dealers, channel partners, service partners or users access our website, mobile application, web dashboard, e-commerce pages, service portals or connected products.

1.1 Scope

This Privacy Policy applies to all Nippo Airvue products and services, including but not limited to air purifiers, air quality monitors, dehumidifiers, filters, mosquito repellent and lifestyle consumables, mobile applications, web dashboard, warranty registration, installation, AMC, service requests, customer support, D2C orders and future product categories under the Nippo Airvue brand.

1.2 Data Controller and Contact Details

Data Controller	MedCuore Medical Solutions Pvt. Ltd. operating under the Nippo Airvue brand
Registered Office	No. 11/2, Venkateswara Nagar, 7th Street, Thoraipakkam, Chennai - 600097, Tamil Nadu, India
Website	www.nippoairvue.com
Customer Support / Data Protection Contact	service@nippoairvue.com
Support Hours	Monday to Saturday, 9:00 AM to 6:00 PM IST

1.3 Personal Data We May Collect

• Identity and contact information: name, mobile number, email address, billing address, shipping address, company name, GST details and authorised contact person details.
• Order and transaction information: products purchased, invoice details, payment status, order ID, delivery details, installation schedule, service history and AMC details.
• Device and product information: model number, serial number, batch number, EAN/UPC/GTIN, warranty registration, installation location, product health status and service diagnostics.
• Connected product and IAQ data: air quality readings such as PM1, PM2.5, PM10, CO2, TVOC, temperature, humidity, device uptime, alerts, filter life, usage pattern and dashboard access logs, where applicable.
• App, website and dashboard data: login details, user ID, IP address, browser/device details, approximate location, cookies, session logs, pages viewed, feature usage and error logs.
• Support and communication data: service tickets, call notes, WhatsApp or email communications, customer feedback, complaint details, photos/videos shared for warranty or damaged delivery claims and consent preferences.
• Marketing data: campaign responses, enquiry source, lead source, event or demo registration details and communication preferences.

1.4 How We Use Personal Data

• To process orders, payments, invoices, deliveries, warranty registration and returns.
• To install, commission, maintain, troubleshoot, repair and service Nippo Airvue products.
• To provide mobile app, web dashboard, device connectivity, alerts, notifications, analytics and customer support.
• To improve product quality, filter life estimation, sensor performance, app experience, service efficiency and product roadmap decisions.
• To communicate order updates, service schedules, AMC reminders, subscription renewals, product safety notices and support responses.
• To send marketing or promotional communication where permitted by consent, customer relationship or applicable law. Users may opt out of promotional messages.
• To detect fraud, misuse, unauthorised access, cyber threats or violation of our website, app or product terms.
• To comply with legal, tax, accounting, regulatory, product safety, consumer protection and law enforcement obligations.

1.5 Legal Basis for Processing Under GDPR

• Contract: when data is required to process an order, deliver a product, provide installation, support, warranty, app/dashboard access or AMC services.
• Consent: for optional marketing communication, certain cookies, optional location-based features or voluntary sharing of information.
• Legal obligation: for tax records, consumer complaints, product safety, statutory requests and regulatory compliance.
• Legitimate interests: for business operations, fraud prevention, product improvement, service quality, analytics, network security and customer relationship management, provided such interests do not override user rights.

1.6 Connected Product and Air Quality Data

Certain Nippo Airvue products, especially Air Quality Monitors and smart Air Purifiers, may generate environmental and device data. Indoor air quality data may not identify a person by itself; however, when linked to a user account, installation address or organisation, it may be treated as personal data. We use such data to provide dashboard services, alerts, trend reports, product diagnostics, filter life indication, service planning and performance improvement. We may use aggregated or anonymised air quality data for product development, research, benchmarking, reporting and commercial insights, provided it does not identify individual users or customers.

1.7 Cookies and Similar Technologies

Our website, app and dashboard may use cookies, pixels, SDKs or similar technologies for login sessions, security, analytics, performance, customer support, marketing attribution and user experience improvement. Users may control cookies through browser settings or cookie consent tools where provided. Disabling certain cookies may affect website or dashboard functionality.

1.8 Data Sharing and Third Parties

We do not sell personal data. We may share data only where required for legitimate business, service or legal purposes, including with:

• Payment gateways, banks and financial service providers.
• Logistics, delivery, warehousing and installation partners.
• Authorised service engineers, AMC partners and customer support partners.
• Cloud hosting, email, SMS, WhatsApp, CRM, analytics, cybersecurity and IT service providers.
• Marketplace, D2C, dealer or channel partners when products are purchased through such channels.
• INL group entities, investors, auditors, consultants and professional advisers where required for business operations, governance, compliance, audit or strategic support.
• Government authorities, courts, regulators, law enforcement or statutory bodies where legally required.

1.9 International Data Transfers

Our service providers, cloud infrastructure, analytics systems or business partners may be located outside India or outside the country where the user resides. Where personal data is transferred internationally, we aim to use reasonable contractual, technical and organisational safeguards consistent with applicable law, including GDPR-aligned transfer mechanisms where applicable.

1.10 Data Retention

• Order, invoice and tax records are retained as required under applicable tax, accounting and statutory laws.
• Warranty, installation and service records may be retained for the warranty period, AMC period and a reasonable period thereafter for dispute resolution, product safety and service history.
• AQM dashboard data and device logs may be retained according to the active subscription or plan. Basic dashboard data retention may vary by plan and may be deleted after expiry unless the customer renews or upgrades.
• Marketing data is retained until consent is withdrawn or the data is no longer required for the purpose collected.
• Aggregated or anonymised data may be retained for product improvement, research and business analytics.

1.11 Security and ISO-Aligned Controls

We apply reasonable technical and organisational controls to protect personal data and product data. These controls are designed to align with ISO/IEC 27001 information security principles and ISO/IEC 27701 privacy information management principles, where applicable. Such controls may include role-based access, vendor confidentiality obligations, secure data storage, restricted administrative access, backup practices, vulnerability management, incident response processes and periodic internal review. No digital system is completely risk-free, and customers are encouraged to use strong passwords and secure networks for connected products.

1.12 User Rights

Subject to applicable law, users may request access to personal data, correction of inaccurate data, deletion, restriction of processing, portability, objection to processing, withdrawal of consent and opt-out from marketing communication. Requests may be sent to service@nippoairvue.com. We may verify identity before acting on such requests and may retain certain records where required by law, warranty, tax, fraud prevention or dispute resolution obligations.

1.13 Children's Privacy

Our website, app, dashboard and products are not directed to children. We do not knowingly collect personal data from children without appropriate parental or guardian consent where required by law.

1.14 Data Breach and Incident Response

If we become aware of a data security incident affecting personal data, we will assess the nature and impact of the incident and take reasonable steps to contain, investigate and remediate it. Where legally required, we will notify affected users or regulatory authorities in accordance with applicable law.

1.15 Updates to This Privacy Policy

We may update this Privacy Policy from time to time. Updated versions will be posted on the Nippo Airvue website and will become effective from the date mentioned in the updated policy. Continued use of our website, app, dashboard or products after publication of the updated policy indicates acceptance of the updated terms, where permitted by law.