Compliant with IT Act 2000 · IT Rules 2011 · DPDP Act 2023

Privacy Policy

Last updated: June 2026 | Effective under Information Technology Act, 2000

AutomationTool ("we", "our", or "us") is committed to protecting your privacy in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our post-processor questionnaire service.

1. Information We Collect

We collect information you voluntarily provide when submitting a request:

Contact Information: Name, email address, phone number
Technical Details: CNC machine specifications, controller information, axis configurations, sample NC program files
Uploaded Files: CAM files, reference documents, sample G-code programs
Request Data: Request ID, submission timestamps, status history
Technical Data: IP address, browser type, device information collected automatically

2. Legal Basis for Processing (DPDP Act 2023)

We process your personal data based on:

Consent: You have provided explicit consent by submitting the questionnaire form
Contractual Necessity: Processing is required to fulfill your post-processor development request
Legal Obligation: Compliance with applicable Indian laws and regulations

3. How We Use Your Information

We use the collected information solely for:

Processing and fulfilling your post-processor development request
Communicating with you about your request status
Generating the deliverable post-processor files
Improving our service quality and internal record-keeping
Compliance with legal and regulatory obligations

4. Data Storage & Third-Party Services

Your data is processed and stored through the following services. Each is a data processor under Indian law:

Supabase (USA) — Database for request records and status tracking
Google Drive & Google Sheets (USA) — File storage and submission logging via Google Apps Script
EmailJS (EU) — Sending confirmation and notification emails
Cloudflare (USA) — CDN and edge compute hosting
jsPDF & JSZip — Client-side PDF generation and file packaging (no data is sent to these libraries)

Data may be transferred outside India. By using this service, you consent to such cross-border data transfer as permitted under the DPDP Act, 2023. We ensure appropriate safeguards are in place through contractual agreements with our data processors.

5. Data Retention

We retain your request data and uploaded files for as long as necessary to fulfill your request and maintain service records, but no longer than 7 years from the date of submission as required by Indian record-keeping laws. You may request earlier deletion by contacting us.

6. Your Rights Under Indian Law

Under the DPDP Act, 2023 and IT Rules, 2011, you have the following rights:

Right to Access: Request a copy of the personal data we hold about you
Right to Correction: Request correction of inaccurate or incomplete data
Right to Deletion: Request deletion of your data (right to be forgotten)
Right to Grievance Redressal: Lodge complaints regarding data processing
Right to Consent Withdrawal: Withdraw consent at any time (subject to contractual limitations)
Right to Nomination: Nominate a person to exercise rights in case of incapacity

To exercise these rights, please contact our Grievance Officer using the details in Section 9.

7. Data Security

We implement reasonable security practices and procedures as required under the IT Act, 2000 and IT Rules, 2011, including:

HTTPS encryption (TLS 1.3) for all data in transit
Supabase Row-Level Security (RLS) policies for database access control
HMAC-signed session tokens for admin authentication
Server-side authentication via Cloudflare Workers (no direct database access from browsers)
Rate limiting on authentication endpoints
Password-protected admin access with rate-limited brute-force protection

However, no electronic transmission or storage method is 100% secure.

8. Sensitive Personal Data

We do not intentionally collect sensitive personal data or information (SPDI) as defined under the IT Rules, 2011, such as passwords, financial information, health data, or biometric data. Please do not upload files containing such information.

9. Grievance Officer

In compliance with Rule 5(9) of the IT Rules, 2011 and Section 5(6) of the DPDP Act, 2023, the contact details of the Grievance Officer are:

Grievance Officer
AutomationTool
Email: sidharthkr1859@gmail.com
Time: Mon–Sat, 10:00 AM – 6:00 PM IST

We will acknowledge your grievance within 24 hours and resolve it within 15 days.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Material changes will be communicated via email to registered users.

11. Contact

For questions about this Privacy Policy or to exercise your data rights, please contact our Grievance Officer at the email address above.