Legal
DPDP statement
DPDP-aligned. India-resident. No covert capture.
Last updated June 2026
Built under the DPDP Act
Ostronaut is built and operated under India’s Digital Personal Data Protection Act. Every capture surface, whether fixed counter hardware, a wearable, or a software upload, has a documented consent flow approved before it goes live.
Data stays in India
Customer audio and everything derived from it stay in India. Storage region is pinned at contract signing. Retention is yours to configure, with full purge available on request.
Redaction and deletion
PII redaction is context-configured per customer: prescription data, patient names, staff names, and payment information. End consumer deletion requests route through the customer who operates the floor and are honoured within the contracted timeframe.
No covert operation
We do not operate covertly: no hidden microphones, no invisible consent flows, and visible signage at every capture point. We will politely turn down a customer who wants us to. SOC 2 and ISO 27001 are on our roadmap.
Contact
For a data processing agreement, security review, or any DPDP question, email founders@ostronaut.ai.