PRAMAAN — Gadget Guruz Technologies Pvt Ltd

Privacy Policy

Device Health Diagnostics & Certification Software

DPDP Act, 2023 Compliant IT Act, 2000 Effective: April 2025 Version 1.0
Contents
  1. Introduction
  2. Data Fiduciary Details
  3. Design Principles
  4. Information We Collect
  5. What We Do Not Collect
  6. How We Use Information
  7. Consent
  8. Notice to Data Principals
  9. Software Permissions
  10. Data Storage & Security
  11. Sharing of Data
  12. Data Retention & Deletion
  13. Rights of Data Principals
  14. Children's Privacy
  15. Third-Party Services
  16. Applicable Laws
  17. Grievance Redressal
  18. Policy Changes
  19. Contact Us
Section 01

Introduction

PRAMAAN is a hardware diagnostics and device health testing software developed and operated by Gadget Guruz Technologies Pvt Ltd ("Company", "we", "our", "us"). PRAMAAN is designed to evaluate the performance, stability, and lifecycle health of electronic devices — including laptops, desktops, and other hardware — and to generate verified device health reports and QC certificates.

This Privacy Policy explains how we collect, use, store, disclose, and protect information when you install, access, or use:

This Policy applies to all categories of users:

This Policy is compliant with the Digital Personal Data Protection (DPDP) Act, 2023 and the Information Technology Act, 2000. By installing or using PRAMAAN, you acknowledge that you have read, understood, and agreed to this Privacy Policy.
Section 02

Data Fiduciary Details

As per Section 2(i) of the DPDP Act, 2023, Gadget Guruz Technologies Pvt Ltd is the Data Fiduciary for all personal and diagnostic data processed through PRAMAAN.

Data Fiduciary Information
Company
Gadget Guruz Technologies Pvt Ltd
Registered Address
F 90/31, Okhla Phase 1, New Delhi
Product
PRAMAAN — Device Health Diagnostics & Certification Software
Grievance Officer
Mr. Atul Kishan
Acknowledgment SLA
Within 48 hours of receiving a request
Resolution SLA
Within 30 days of acknowledgment
Section 03

What PRAMAAN Does — Design Principles

PRAMAAN is built on a principle of minimal data collection. It is a hardware diagnostic tool — not a surveillance tool, monitoring tool, or data harvesting platform. Its sole function is to assess the physical health of a device's hardware components and generate a standardised, verifiable health report.

PRAMAAN does NOT access, read, scan, copy, or transmit: personal files, documents, emails, photos, videos, messages, contact lists, browser history, passwords, financial credentials, or any user-generated content. It has no visibility into what you do on your device — only how your device's hardware is performing.

Every permission that PRAMAAN requests from your operating system is used exclusively for hardware diagnostics. See Section 9 for a full list of permissions and the specific reason each is required.

Section 04

Information We Collect

4.1 Account & Registration Data

When you create a PRAMAAN account or purchase a license, we collect:

Data PointPurpose
Full nameAccount identification and license assignment
Company or organisation nameEnterprise license management and reporting
Phone numberAccount verification and support contact
Email addressLicense delivery, account notifications, support
Password (cryptographic hash only)Secure account authentication — never stored in plain text
Purchase detailsLicense issuance, billing reconciliation, and support

4.2 Device Diagnostic Data

When PRAMAAN runs a diagnostic scan, it collects the following hardware-level data:

ComponentData CollectedWhy It Is Needed
CPUModel, clock speed, core count, usage under load, stress scores, thermal throttlingEvaluate processing performance and stability
RAM / MemoryCapacity, usage, health indicators, error rateAssess memory integrity and detect degradation
Storage (HDD/SSD)SMART attributes: sector health, error rates, remaining life, temperatureEvaluate storage reliability and predict failure risk
Battery (laptops)Design vs. current capacity, cycle count, charge/discharge rate, health %Determine battery health and remaining useful life
Thermal SystemCPU temp at idle and load, fan speed, throttling eventsAssess cooling efficiency and stability
DisplayDead pixels, backlight consistency (where applicable)Identify display hardware defects
Network InterfaceAdapter status, connection capability testConfirm network hardware is functional
Sensors & PeripheralsCamera/mic hardware presence check (no recording), USB/port statusVerify hardware components are detectable
System ConfigurationDevice model, manufacturer, OS version, firmware/BIOS, serial numberAssociate results with the correct device

4.3 Usage & Performance Data

This data is collected in aggregated or pseudonymised form where possible and used solely for improving PRAMAAN's diagnostic accuracy and software stability. It is never used for advertising or sold to third parties.

4.4 Enterprise Asset Data

For enterprise deployments, PRAMAAN may collect and maintain: device inventory, diagnostic history per device, component change logs, repair history records, and lifecycle analytics. This data is visible only to authorised administrators within the customer organisation.

4.5 Certification & Report Data

Each completed diagnostic generates a permanent, verifiable record: a device health score, a detailed QC report, a unique Certificate ID, a verification QR code, and the test timestamp and PRAMAAN version used.

Section 05

What PRAMAAN Does Not Collect

Data TypeWhy PRAMAAN Does Not Need It
Personal files, documents, PDFsIrrelevant to hardware diagnostics
Photos, videos, or audio recordingsCamera/mic tests are hardware presence checks only — no recording occurs
Emails, messages, or chat historyIrrelevant to hardware diagnostics
Browser history or internet activityNetwork tests check adapter functionality only — not traffic content
Contact lists or address booksIrrelevant to hardware diagnostics
Passwords, PINs, or credentialsPRAMAAN does not interact with authentication systems
Financial information or banking dataPayments are handled separately at purchase
Precise real-time geolocationDevice location is not relevant to hardware health assessment
User activity or behaviourPRAMAAN is not a monitoring or surveillance tool
Data from users under 18 without consentPRAMAAN is not intended for use by minors
PRAMAAN does not spy on users. It does not monitor what you do on your device. It collects only what is necessary to answer one question: how healthy is this device's hardware?
Section 06

How We Use the Information — Purpose Limitation

In accordance with Section 4 of the DPDP Act, 2023, all data collected by PRAMAAN is used only for the specific purposes stated below.

PurposeData Used
Device health scoring and QC certificationHardware diagnostic data, system configuration data
Generating QC reports and certificatesAll diagnostic data, device identifiers, test timestamps
IT asset lifecycle managementEnterprise asset data, diagnostic history, component change logs
Resale and buyback value estimationHardware health scores, battery status, storage SMART data
Insurance device risk classificationOverall health score, component health breakdown
Fraud prevention in refurbished device marketsComponent change logs, hardware configuration history
Account management and license issuanceRegistration data, purchase details
Customer support and troubleshootingRegistration data, crash logs, diagnostic session data
Software diagnostic model improvementAnonymised/aggregated usage and performance telemetry
Legal compliance and regulatory obligationsMinimum data necessary as required by applicable law
Section 07

Consent (Section 6, DPDP Act 2023)

We process your data only on the basis of free, specific, informed, unconditional, and unambiguous consent, as required by Section 6 of the DPDP Act, 2023.

7.1 How Consent Is Obtained

7.2 Withdrawing Consent

You may withdraw consent at any time without affecting the lawfulness of prior processing. To withdraw consent:

Section 08

Notice to Data Principals (Section 5, DPDP Act 2023)

Before or at the time of collecting your data, PRAMAAN provides a clear Notice that includes:

This Notice is presented as a mandatory consent screen at installation and at first launch, and is also incorporated into the PRAMAAN EULA, available at pramaan.gadgetguruz.com/eula.php.

Section 09

Software Permissions

To perform hardware diagnostics, PRAMAAN requires certain system-level permissions. Below is a complete, transparent list of every permission required and the specific reason it is needed.

PermissionWhat PRAMAAN AccessesWhat PRAMAAN Does NOT Do
System hardware accessCPU model, clock speed, core metrics, load under stressDoes not read files or user data stored on the CPU cache
Memory (RAM) accessRAM capacity, usage statistics, error indicatorsDoes not read the content of memory (running processes, open documents)
Storage health monitoringDrive SMART attributes: sector health, error rates, temperatureDoes not read, copy, or scan the content of any file on the drive
Battery & power accessBattery design vs. current capacity, cycle count, charge rateDoes not control or modify battery charging behaviour
Thermal sensor accessCPU and system temperature readings, fan speedDoes not modify thermal settings or fan control
Network interface accessAdapter presence and connectivity statusDoes not monitor network traffic, websites visited, or data transmitted
Display diagnosticsScreen resolution, display hardware statusDoes not capture screenshots or record screen content
Camera hardware checkDetects whether a camera device is present and functionalDoes not capture images, video, or activate the camera in any recording capacity
Microphone hardware checkDetects whether a microphone device is present and functionalDoes not record audio or activate the microphone in any recording capacity
USB/Port statusConnected port types, port healthDoes not read data from connected USB devices or peripherals
System identifierDevice model, OS version, BIOS/firmware version, serial numberDoes not use the identifier for tracking beyond associating with the device's own health records
Section 10

Data Storage and Security (Section 8, DPDP Act 2023)

We implement appropriate technical, administrative, and organisational safeguards to protect your data. Our security measures include:

In the event of a personal data breach likely to result in a risk to your rights and interests, we will notify the Data Protection Board of India and affected Data Principals within the timelines prescribed under the DPDP Act, 2023.

Section 11

Sharing of Data

We do not sell, rent, or trade your personal or diagnostic data. Data is shared only in the following specific and limited circumstances:

11.1 Enterprise Administrators

For enterprise deployments, device diagnostic data is shared with authorised enterprise administrators as contracted, governed by the PRAMAAN Enterprise License Agreement and a Data Processing Addendum (DPA).

11.2 Service Providers & Sub-Processors

We engage trusted third-party vendors for cloud infrastructure, software hosting, customer support tools, and analytics. All sub-processors are bound by Data Processing Agreements requiring DPDP-equivalent data protection standards.

11.3 Certificate Verification

PRAMAAN-generated certificates include a Certificate ID and QR code for independent third-party verification. When scanned, the verifier receives a read-only summary of the device health report. No personal data about the device owner is included in the publicly verifiable certificate summary.

11.4 Legal Requirements

We may disclose data when required by applicable law, court order, or regulatory directive, including to the Data Protection Board of India. We will, where legally permissible, notify affected users before such disclosure.

11.5 Business Transfers

In the event of a merger, acquisition, restructuring, or asset sale, PRAMAAN data may be transferred as part of the transaction. We will notify affected Data Principals prior to such a transfer and ensure the receiving entity is bound by equivalent privacy obligations.

11.6 Cross-Border Transfers

If processing involves transferring personal data outside India, such transfers are conducted only to countries notified as permissible by the Central Government under the DPDP Act, or where adequate contractual safeguards are in place. Enterprise customers requiring data residency within India may request this — contact privacy@gadgetguruz.net.

Section 12

Data Retention & Deletion

We retain data only for as long as necessary to fulfil the stated purpose or to comply with legal obligations. On expiry, data is securely deleted or irreversibly anonymised.

Data TypeRetention Period
Active account dataFor the duration of the active account/license
Inactive individual user accounts3 years from last login, then permanently deleted
Diagnostic reports — individual usersActive license period; deleted within 90 days of account closure or on request
Diagnostic reports — enterpriseDuration of enterprise license + 1 year; deleted 30 days after contract termination
Enterprise asset & lifecycle recordsDuration of enterprise contract + 1 year
QC Certificates (issued)5 years from date of issue (for audit trail and verification)
Crash logs and error reports12 months on a rolling basis
Anonymised usage telemetry24 months on a rolling basis
Support and communication records3 years from resolution of the interaction
Data breach incident logs5 years from date of incident (regulatory requirement)
Section 13

Rights of Data Principals (Sections 11–14, DPDP Act 2023)

As a Data Principal, you have the following statutory rights under the DPDP Act, 2023:

RightWhat It MeansHow to Exercise
Right to Access (S.11)Request a summary of all personal and diagnostic data we hold about youEmail privacy@gadgetguruz.net — Subject: 'PRAMAAN Data Access Request'
Right to Correction (S.12)Request correction of inaccurate, outdated, or incomplete registration dataUpdate in PRAMAAN account settings, or email us
Right to Erasure (S.12)Request deletion of your personal and diagnostic data, subject to legal retention obligationsEmail privacy@gadgetguruz.net — Subject: 'PRAMAAN Data Deletion Request'
Right to Grievance Redressal (S.13)Lodge a complaint and receive a substantive written response within 30 daysEmail privacy@gadgetguruz.net — Subject: 'PRAMAAN Privacy Grievance'
Right to Nominate (S.14)Nominate another individual to exercise your data rights in the event of death or incapacitySubmit a written nomination to privacy@gadgetguruz.net
Right to Withdraw ConsentWithdraw consent at any time without affecting prior lawful processingUninstall PRAMAAN and/or email privacy@gadgetguruz.net
Data Portability (anticipated)Receive a copy of your diagnostic data in a structured, machine-readable format where feasibleEmail privacy@gadgetguruz.net

All rights requests will be acknowledged within 48 hours and resolved within 30 days. If a request is denied, we will provide written reasons and inform you of your right to escalate to the Data Protection Board of India.

Section 14

Children's Privacy (Section 9, DPDP Act 2023)

PRAMAAN is intended for professional and enterprise use and is not directed at individuals under the age of 18. We do not knowingly collect data from minors.

As required by Section 9 of the DPDP Act, if a user is or may be under 18, verifiable consent from a parent or lawful guardian must be obtained before any data is collected or processed.

If you are a parent or guardian and believe your child has created a PRAMAAN account without your consent, please contact privacy@gadgetguruz.net immediately. We will promptly delete the account and all associated data.
Section 15

Third-Party Services and Integrations

Third PartyRole
Cloud Infrastructure Provider (e.g. AWS)Secure server hosting for PRAMAAN data and reports
Enterprise ITAM SystemsIntegration with customer's existing IT asset management platform (as contracted)
Device Repair Workflow ToolsIntegration with repair management platforms used by technicians and refurbishers (as contracted)
Analytics PlatformAnonymised software performance and usage telemetry only — opt-out available via PRAMAAN settings

We impose contractual data protection obligations on all third-party processors. However, Gadget Guruz is not responsible for the independent data practices of third-party services beyond what is governed by our agreements with them.

Section 16

Applicable Laws and Compliance

PRAMAAN's data practices comply with the following applicable laws and standards:

Section 17

Grievance Redressal (Section 13, DPDP Act 2023)

If you have any complaint, concern, or grievance regarding the collection, use, storage, or disclosure of your data by PRAMAAN, please contact our Grievance Officer:

Grievance Officer Details
Grievance Executive
Atul Kishan
Postal Address
Gadget Guruz Technologies Pvt Ltd, F 90/31, Okhla Phase 1, New Delhi
Acknowledgment
Within 48 hours of receipt
Resolution Target
Within 30 days of acknowledgment

If you are not satisfied with the resolution provided by our Grievance Officer, you have the right to escalate your complaint to the Data Protection Board of India under Section 18 of the DPDP Act, 2023.

Section 18

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

Continued use of PRAMAAN after the Effective Date of any revision constitutes your acceptance of the updated Policy.

Section 19

Contact Us

For any questions, requests, or concerns about this Privacy Policy or PRAMAAN's data practices:

Privacy & Data Requests
General Support
Enterprise DPA Request
privacy@gadgetguruz.net
Subject: 'PRAMAAN Enterprise DPA Request'