Privacy Policy
Last updated: 12 th August 2026
At Peppermint Robotics, operated by Aubotz Labs Private Limited (“we”, “us”, “our”), we are committed to protecting the privacy and security of our customers, the users of our robots, and visitors to our website www.peppermintrobotics.com(the “Site”). This Policy explains what data we collect, how we use and protect it, and your rights under the EU General Data Protection Regulation (GDPR),India’s Digital Personal Data Protection Act, 2023, and other applicable data protection laws. Region-specific rights are set out in Section 10.
1. Who We Are (Data Controller)
The data controller is Aubotz Labs Private Limited, Survey No 116, 3/1, opp. ShubhTej Mangal Karyalay, near Balaji Chowk, Jai Bhavani Nagar, Pashan, Pune, Maharashtra 411021, India.
For any privacy question or to exercise your rights,contact our privacy contact at info@peppermintrobotics.com
2. Our Privacy Approach
We collect as little personal data as possible:
- Our robots run fully offline by default and do not require any personal data or any operational data to perform their cleaning function.
- Robot telemetry is collected only if a customer opts in to features that use it (for example cleaning reports, dashboards, diagnostics or remote monitoring).Depending on the customer's requirements, telemetry is deployed either on-premise via a fleet management system (FMS) or hosted in an appropriate cloud region.
- We collect limited organisation and facility details because we need them to deploy robots to the correct sites and to invoice our customers.
- We collect personal data through the Site or user accounts only where you provide it or request it - see Section 3.
3. Information We Collect
3.1 Website, account, and business data
- Information you submit: name, email, phone number, and any details you provide through forms on the Site.
- User accounts (on request): where a customer asks us to create a user account, we set up that account and process the associated login and contact details. Accounts are created only at the customer's request.
- Organisation and facility data: company name, billing details, and the facilities where robots are deployed - collected so we can deliver, support, and invoice the service.
- Usage data: IP address, browser type, pages visited, and referring URLs when you use the Site.
- Cookies: We use cookies and similar technologies only on our Site. Some are essential to make the Site work; others help us understand how the Site is used.
3.2 Robot operational data
Our robots can run entirely offline and are not designed to store, process, or transmit personal data in order to operate. Operational telemetry is not intended to, and does not normally,contain personal data. Where a customer opts in to reporting or monitoring, we collect operational telemetry (such as run times, area coverage, battery and fault status, and cleaning logs). Based on the customer's requirements, this is kept on-premise through an FMS or in an appropriate cloud region.
4. Why We Process Data(Legal Bases)
We process personal data on the following bases:
- To perform our contract with you: deploying and supporting robots, managing organisation and facility records, and invoicing.
- With your consent: marketing communications, non-essential cookies, and opt-in robot telemetry and reporting. You may withdraw consent at any time.
- To meet our legal obligations: compliance with tax, accounting, and other legal requirements.
5. Our Role: Controller and Processor
Our role depends on the type of data:
- For our own business and website data — such as our website, marketing and our invoicing and business records — we act as the data controller, because we decide why and how that data is processed.
- For customer operational data — the telemetry and reporting data a customer opts in to — to the extent this data contains personal data, the customer is the data controller, and we act as the data processor. Where we act as a processor, we process the data only on the customer’s instructions and put appropriate data-processing terms in place. We process data only to provide the agreed reporting and monitoring services on their behalf. We do not use this data for our own analytics or any other purpose. For customers in the EU, this data is hosted in an EU region. Our support teams are located in India; where the customer requests or authorises support that requires access to this data, such access is limited, logged, and protected by appropriate safeguards for international transfers, including the European Commission’s Standard Contractual Clauses. Where a customer asks us to delete this data, we will do so within the time frame required by applicable law.
6. Sharing Your Information
- Service providers/processors: trusted third parties (e.g., hosting, analytics, payment) who process data on our behalf under written agreements.
- Our EU distributor: where relevant to delivering and supporting the robots in your region.
- Legal compliance: where required by law or legal process.
- Analytics (Google): our Site uses Google Analytics, which may involve transferring usage data to Google in the United States. This transfer is covered by Google’s certification under the EU–US Data Privacy Framework.
- Business transfers: in a merger, acquisition, or asset sale, subject to this Policy.
7. Security of Your Information
We protect personal data through an information security management system aligned to ISO/IEC 27001, and we are in the process of obtaining certification. Our controls are informed by the SOC 2Trust Services Criteria; Measures include role-based access control, encryption of data in transit and at rest, logging and monitoring, vendor management, and staff training.
No method of transmission or storage is completely secure, so we can not guarantee absolute security, but we maintain safe guards proportionate to the risk and follow an incident-response process,including notifying the relevant authority and affected individuals where the law requires it.
8. Data Retention
We keep personal data only as long as necessary for the purpose it was collected for. Where we are required to keep certain records for legal reasons (for example tax and accounting records), we retain them for the period required by law, which may be up to seven years. After the applicable period the data is deleted or anonymised. You may request deletion of your personal data at any time, and we will comply except where we are legally required to keep it.
9. Your Data Protection Rights
Where the GDPR applies, you have the right to:
- Access — obtain a copy of your personal data.
- Rectification — correct in accurate or incomplete data.
- Erasure — request deletion (subject to legal-retention exceptions).
- Restriction — limit how we process your data.
- Data portability — receive certain data in a machine-readable format.
- Object — object to direct marketing at any time.
- Withdraw consent — at any time, without affecting earlier processing.
- Lodge a complaint with your local supervisory authority.
These rights are conditional: some apply only to certain data or where we rely on a particular basis, and we may retain data where a legal obligation requires it. To exercise any right,contact info@peppermintrobotics.com. We will respond within one month,though we may extend this by up to two further months for complex or numerous requests, and we may first need to verify your identity.
10. Region-Specific Privacy Rights
The main sections above apply to everyone. This section sets out additional rights and information that apply depending on where you are located. If more than one applies to you, they operate together.
10.1 European Economic Area and United Kingdom (GDPR / UK GDPR)
If you are in the EEA or the UK, the General Data Protection Regulation (and, in the UK, the UK GDPR) applies to our processing of your personal data. The legal bases in Section 4, the rights in Section 9, the international-transfer safeguards in Section 5 all apply to you.
10.2 India (Digital Personal Data Protection Act, 2023)
As a company established in India,our processing of personal data is subject to India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”). Where the DPDP Act applies, we act as a Data Fiduciary and you are a Data Principal, and the following apply in addition to the rest of this Policy:
- Notice and consent: we process your personal data on the basis of your consent or for other legitimate uses permitted by the DPDP Act, and we give you notice of what we collect and why. You may withdraw consent at any time.
- Your rights as a Data Principal: you may request access to a summary of your personal data and our processing, request correction or completion, request erasure, and nominate another person to exercise your rights in the event of your death or incapacity.
- Grievance redressal: you may raise any grievance about how we handle your personal data with us at info@peppermintrobotics.com. If your grievance is not resolved, you may escalate it to the Data Protection Board of India.
- Withdrawing consent: withdrawing consent will not affect processing carried out before withdrawal, and may affect our ability to provide certain features.
10.3 United States (state privacy laws)
If you are a resident of a U.S. state with a comprehensive privacy law (such as California, Virginia, or Colorado) and that law applies to our processing, you may have rights to know what personal data we hold about you, to access or delete it, to correct it, and to opt out of certain uses. We do not sell personal data. To exercise any of these rights, contact us at info@peppermintrobotics.com, and we will respond as required by the applicable law.
11. Cookies and Third-Party Links
Our Site may link to third-party websites. We do not control their privacy or cookie practices, so please review their policies before providing data.
12. Changes to This Policy
We may update this Policy to reflect changes in our practices or the law; updates are posted here with a reviseddate.
13. Contact Us
Aubotz Labs Private Limited, Survey No 116, 3/1, opp. ShubhTej Mangal Karyalay, near Balaji Chowk, Jai Bhavani Nagar, Pashan, Pune, Maharashtra 411021, India.
Email: info@peppermintrobotics.com.