HPzenAi™

Loading content

Preparing your HPzenAi experience

Security Verification, Bot Detection & Cloudflare Turnstile

HPzenAi uses security verification technologies to protect accounts, checkout flows, platform APIs, and other sensitive platform actions from automated abuse, credential attacks, scraping, spam, fraudulent activity, and other security threats. These safeguards are treated as strictly necessary security measures for operating a safe and reliable digital platform.

HPzenAi may use Cloudflare Turnstile and related browser-based security checks to distinguish legitimate visitors from automated or abusive traffic and to prevent misuse of HPzenAi websites, APIs, forms, account flows, cart flows, payment flows, and other security-sensitive features.

For selected platform routes, HPzenAi may use Cloudflare Turnstile in invisible mode. Invisible mode verifies visitors silently and does not display a visible checkbox, badge, challenge, or other on-screen security indicator during normal operation.

When Cloudflare Turnstile is used, Cloudflare may process limited client-side and request-related signals such as IP address, browser and device information, user-agent data, TLS or connection characteristics, site key, origin information, and security challenge metadata for bot detection, abuse prevention, and service security purposes.

HPzenAi uses Turnstile signals only for security, fraud prevention, abuse detection, platform integrity, and request validation. HPzenAi does not use Turnstile signals for advertising, behavioural profiling, or commercial resale.

Cloudflare processes Turnstile data in accordance with Cloudflare's applicable privacy terms. As required for invisible Turnstile use, HPzenAi refers users to Cloudflare's Turnstile Privacy Addendum at https://www.cloudflare.com/turnstile-privacy-policy/ for additional information about Cloudflare's processing of Turnstile-related data.

Where a security verification fails, expires, or cannot be completed, HPzenAi may block, delay, retry, or require the user to repeat the relevant action to protect the platform and the user's account.

Website Analytics & Experience Measurement

HPzenAi may use privacy-conscious website analytics and experience measurement tools, including Google tag and Microsoft Clarity, on public website pages to understand site performance, navigation quality, page reliability, and user experience improvements.

Analytics and experience measurement tools may process limited technical and usage information such as page URL, referring page, browser type, device category, approximate region derived from network information, interaction events, scroll behaviour, click patterns, and performance signals.

HPzenAi uses these tools to improve public website usability, diagnose page issues, understand product discovery journeys, and measure aggregated engagement with website content.

HPzenAi does not intentionally enable third-party analytics or session-experience tracking on account, cart, checkout, payment, authentication, or other security-sensitive routes where users enter account, delivery, payment, or private order information.

Microsoft Clarity recordings, heatmaps, and related experience data are configured for public website experience analysis and should not be used to capture sensitive form entries, OTPs, payment details, private account data, or protected order information.

Where a signed-in user has granted analytics consent, HPzenAi may use a server-generated pseudonymous analytics identifier to measure website journeys consistently across Google tag and Microsoft Clarity. This identifier does not expose the user's email address, name, phone number, raw account identifier, OTP, session token, or payment details to analytics providers.

Google tag and Microsoft Clarity may set or read cookies or similar identifiers where permitted by applicable law and browser settings. Users may manage analytics cookies through browser controls, consent controls where available, or applicable third-party opt-out mechanisms.

Analytics information is used for aggregated measurement, product improvement, diagnostics, and website quality monitoring. HPzenAi does not sell analytics data.

Categories of Personal Data Collected

HPzenAi collects personal data across the categories described below, depending on how the customer interacts with its platforms, products, and services. HPzenAi applies the principle of data minimisation and collects only data that is necessary for the identified purpose.

Identity and contact data: full name, email address, mobile phone number, billing address, shipping address, state, city, and PIN code. This data is collected primarily for order fulfilment, shipment dispatch, real-time delivery tracking and notifications, invoicing, and customer communication.

Financial and transactional data: payment status, payment references, Razorpay transaction identifiers, UPI transaction identifiers where applicable, order history, invoice numbers, and GST or PAN details for registered business accounts. HPzenAi does not store full card numbers, CVV data, UPI PINs, net-banking credentials, or other full payment authentication data on its own systems; payment collection and processing are handled through the authorised Razorpay payment gateway and its banking or network partners.

Device and technical data: IP address, approximate network-derived geolocation, browser type and version, operating system, device type, device model, device manufacturer, user-provided or system-provided device label, mobile app version, app build information, language, time zone, session identifiers, referring URLs, and security verification metadata used for account protection, fraud prevention, diagnostics, and audit logging. HPzenAi does not collect, request, or access precise GPS location data on any platform for this purpose.

HPzenAi does not collect hardware serial numbers, IMEI numbers, MAC addresses, contact lists, advertising identifiers, or other highly sensitive device identifiers for ordinary account security or audit logging unless a separate product feature legally requires it and the user is clearly informed where required by law.

Support and communication data: support ticket content, email and WhatsApp correspondence, review and rating submissions, and content voluntarily submitted through feedback or community channels. HPzenAi may use WhatsApp Business messaging for order updates, customer support, warranty assistance, and service-related communications where the user initiates or consents to such interaction.

Marketing and preference data: communication preferences, opt-in and opt-out history, promotional interaction records, and referral or affiliate identifiers.

Mobile application permissions: HPzenAi mobile applications access device permissions only when required for a specific feature and only after obtaining the user's permission through the operating system permission controls.

IoT Data, Sensor Telemetry & Connected Devices

Certain HPzenAi connected products may transmit operational and sensor data to HPzenAi's cloud platform based on the product configuration, connectivity settings, and service features enabled by the user. HPzenAi seeks to limit such collection to data reasonably required for product operation, remote support, diagnostics, analytics, and service improvement.

Sensor and telemetry data collected from connected HPzenAi products may include: device serial number, firmware version, connectivity status, operational state, sensor readings (such as voltage, current, power, temperature, load, or other measurements specific to the product), event logs, alert histories, and system diagnostic data.

IoT product data collection and cloud synchronisation depend on the user's connectivity and service configuration; products that are not connected to HPzenAi's cloud services may not transmit the same categories of data.

Unless otherwise agreed in writing, operational telemetry and device-generated data collected through HPzenAi products remain associated with the customer account through which the device is managed and are processed solely for the purposes described in this Privacy Policy.

Connected product and sensor data is used for device monitoring, remote diagnostics, performance analysis, alerting, firmware support, system improvement, and product quality and reliability enhancement.

Sensor, telemetry, and IoT device data is not sold, licensed, or disclosed to any third party for commercial, advertising, or research purposes; this data is strictly for HPzenAi's internal product operations and improvement activities.

HPzenAi does not use IoT telemetry data to identify personal behaviour patterns, create advertising profiles, or conduct behavioural advertising.

Retention periods for IoT, telemetry, and device diagnostics data are governed by the retention section of this policy.

Communications between connected devices and HPzenAi cloud services are protected using appropriate transport and storage security controls.

Data Sharing & Third-Party Disclosures

HPzenAi does not sell personal data. Personal data is shared with third parties only where necessary for the purposes described in this policy and subject to contractual data processing obligations and confidentiality requirements.

Logistics and order fulfilment: for direct-store orders, identity and shipping address data (name, phone number, delivery address, and order reference) is shared with Shiprocket, HPzenAi's B2C logistics aggregation partner. Shiprocket transmits the minimum necessary delivery data to the assigned logistics carrier to complete the shipment. Shiprocket operates under its own privacy policy, and the assigned carrier operates under its respective data handling terms; customers are encouraged to review those policies.

Payment and financial service providers: RBI-authorised payment gateways, acquiring banks, UPI processors, and fraud-prevention service providers who process payment transactions on HPzenAi's behalf under PCI-DSS compliant and contractually bound data processing terms.

Cloud infrastructure and technology providers: cloud hosting, database management, push notification delivery, email and SMS dispatch, and customer relationship management service providers engaged to operate HPzenAi platforms; these providers act as data processors under written data processing agreements.

Marketplace platforms: order-level data is exchanged with Amazon, Flipkart, or other marketplace operators solely for fulfilment, buyer protection, customer support, and return management for orders placed through those respective channels.

Orders placed through Amazon, Flipkart, or other marketplace platforms are additionally governed by the privacy policies and terms of those respective platforms.

Legal and regulatory bodies: government authorities, regulatory agencies, law enforcement agencies, or courts when disclosure is required by applicable Indian law, a valid court order, or a regulatory direction.

Business transfers: in the event of a merger, acquisition, business restructuring, or asset sale, personal data may be transferred to successor entities subject to equivalent data protection obligations.

Cookies, Notifications & Communication Preferences

HPzenAi uses cookies and similar tracking technologies on its websites and applications to enable core platform functionality, measure performance, and support optional marketing activities. HPzenAi also sends push notifications to mobile app users for operational and, optionally, promotional purposes.

Strictly necessary cookies: required for authentication, session management, shopping cart functionality, and security features; these cannot be disabled while using the platform.

Functional cookies: store interface preferences such as language, region, and display settings to improve usability on repeat visits.

Analytics cookies: collect aggregated, anonymised data about page visits, navigation patterns, and device types to help HPzenAi improve platform performance.

Marketing and targeting cookies: deployed only with prior explicit consent and may enable personalised promotional content and campaign performance measurement.

Where required by applicable law, HPzenAi will obtain user consent before placing non-essential cookies or similar tracking technologies.

Users may manage cookie preferences through browser settings or HPzenAi's cookie consent control; disabling certain cookie categories may affect platform features.

HPzenAi may send transactional emails relating to account activity, order confirmations, shipping updates, warranty services, security notifications, support communications, and product-related service notices. Users may opt out of promotional emails but cannot opt out of communications necessary for account administration, security, or order fulfilment.

HPzenAi sends push notifications to mobile app users for transactional events (order confirmed, dispatched, out for delivery, delivered) and optional promotional communications; transactional notifications are part of the core service.

Customers who do not wish to receive promotional push notifications may opt out at any time through the notification settings in the HPzenAi mobile app or through the operating system's notification management settings; opting out of promotional notifications does not disable transactional notifications necessary for order fulfilment.

About HPzenAi

Policy

Patnership

Privacy Policy

Scope, Data Fiduciary Identity & Legal Framework

Account Registration & Security

Security Verification, Bot Detection & Cloudflare Turnstile

Website Analytics & Experience Measurement

Categories of Personal Data Collected

IoT Data, Sensor Telemetry & Connected Devices

Purposes & Legal Bases for Processing

Data Sharing & Third-Party Disclosures

Cloud Infrastructure, Data Residency & International Transfers

Data Security & Firmware Update Practices

Data Retention & Deletion Schedules

Cookies, Notifications & Communication Preferences

Third-Party Websites & External Links

Rights of Data Principals (DPDPA 2023)

Children's Privacy

Grievance Officer

Policy Updates