Privacy Policy

1. About this policy

FactoryPulse AI ([LEGAL ENTITY NAME: to be added]) runs a web service that helps manufacturers manage production, orders, inventory, machines and finance. This policy explains what personal data we handle, why, who we share it with, how long we keep it and what rights you have.

We do not sell personal data, and we do not use your business data for advertising.

Two roles matter here. For the account and billing details of the people who sign up and use the service, we decide why the data is used, so we are the "data fiduciary" under the DPDP Act. For the business records your company puts into the service (which can include personal data about your employees and customers), your company decides why it is used and we handle it on your behalf. The Data Processing Agreement covers that second role.

2. What we collect

3. Why we use it, and the legal basis

Where the law needs your consent, we ask for it clearly and keep a record of the version you accepted and when. You can withdraw consent for things that rely on it; doing so may mean we can no longer provide the service.

• To provide and secure the service (you ask for this when you sign up).
• To take payment and send billing, security and service messages, including reminders about failed payments and trial or plan changes.
• To give you support, including a time-limited support session on your workspace (see section 9).
• To fix faults and improve the service, using technical data rather than the content of your business records.
• To meet legal duties, such as tax, accounting and answering lawful requests from authorities.

4. The AI Assistant and AI providers

When you ask the AI Assistant something, your question and the part of your data needed to answer it are sent to an AI provider. We use more than one kind of provider, and the list changes over time, so we describe them by kind instead of by name.

• We do not sell AI conversations, and we do not use them to train models of our own.
• Do not type into the AI Assistant anything you would not want shared with a third-party AI provider.
• AI answers can be wrong. See the Terms.

5. Who we share data with

We share data only with the service providers we need to run FactoryPulse AI. They are bound by contract to use it only for us. The full list, with what each does and where, is in the Data Processing Agreement. In short:

• Supabase for the database, sign-in and file storage.
• Vercel for hosting.
• Razorpay for payments.
• Resend for sending emails.
• AI providers, as described in section 4.
• Error and uptime monitoring tools, if and when we turn them on. They receive technical data and error details, not your business records.

6. Other sharing

• With authorities, when the law requires it or to protect people or the service.
• If the business is sold or merged: we will tell you first, and the same protections will continue to apply.
• With the people in your own company, in line with the access your Administrator gave them.

7. Where data is kept

Our database is hosted in India (Mumbai). Some providers, including hosting, email and AI providers, may process data outside India. Where that happens we rely on the contract terms with those providers and on the law that applies to such transfers.

8. How long we keep it

9. Support access to your workspace

When you accept the Terms you also accept the support-access clause in section 8 of the Terms. In short: a FactoryPulse AI support administrator can open a time-limited support session on your workspace, only after recording a reason, never by pretending to be one of your employees, and every session is written to an audit log. We use this only to help you, fix problems and keep the service secure.

10. How we protect data

No system is perfectly secure. If a breach affects your personal data we will tell you and the Data Protection Board of India as the law requires, as described in the Data Processing Agreement.

• Each company's data is separated from every other company's, and this is enforced in the database itself.
• Data is encrypted in transit, and encrypted at rest by our database provider.
• People in your company only see what their department and permissions allow.
• FactoryPulse AI administrators sign in with a second factor.
• Sign-in, sign-up and several other endpoints have limits against automated abuse.
• The Tally connection is read-only and outbound-only.

11. Cookies and similar storage

We use only what the service needs to work: a sign-in session cookie, a small cookie that remembers you have visited before so we can send you to the login page, and a browser setting that remembers your light or dark theme. We do not currently use advertising or analytics cookies. If we add any, we will update this page and ask for your consent first.

12. Your rights

Under the DPDP Act you can:

• ask for a summary of the personal data we hold about you and how it is used;
• ask us to correct or complete it, and to erase it where it is no longer needed (some records must be kept by law);
• withdraw consent you gave;
• nominate another person to exercise these rights for you if you die or cannot act;
• complain to us, and then to the Data Protection Board of India if you are not satisfied.

13. How to use your rights, and who to complain to

Email us at the address below. We may need to confirm who you are first. If you only use FactoryPulse AI through your employer, requests about your employer's records are best sent to your employer's Administrator, because they decide how those records are used.

We aim to answer within 30 days.

14. Children

The service is for businesses and is not meant for anyone under 18. We do not knowingly collect personal data from children.

15. Changes to this policy

If we change this policy in a way that matters, we will email the company's Administrators and show a notice in the service. The date at the top shows the latest version.

16. Contact