Privacy Policy
MSME Automation Pvt. Ltd. respects your privacy and is committed to protecting your personal data in line with India's Digital Personal Data Protection Act, 2023 (DPDP Act).
Draft — pending legal review
This is a working draft prepared for lawyer review. It should not be published in its current form without review by a qualified Indian lawyer, particularly for DPDP Act compliance.
Contents
What we collect
Information you give us directly
When you fill out a form, book a Diagnostic, or contact us — we collect your name, email address, phone number, and company name.
Business information shared during demos & diagnostics
During a Diagnostic or demo, you may share operational data, workflows, financials, and other business information. This is treated with the highest level of confidentiality.
Usage data from our website and platform
We collect standard analytics data — pages visited, time on site, device type, and browser — to understand how people use our website and improve it.
Why we collect it
To respond to your enquiries
When you reach out, we use your contact details to get back to you. Nothing more.
To deliver our services
We use your business information to run the Diagnostic, design your system, and provide ongoing support under the Run plan.
To improve our product
Aggregated, anonymised usage data helps us understand what's working and what to improve. We never use individual business data for this purpose.
How we store it
India-hosted infrastructure
All your data is stored on servers located in India. We do not transfer your personal data outside India.
Encrypted in transit and at rest
Every byte of your data is encrypted when moving between systems and when stored — using industry-standard AES-256 encryption.
Role-based access controls
Within our own team, access to client data is strictly need-to-know. Engineers working on your system see only what they need to. Leadership and support staff have tiered access.
Your rights
Right to access
You can request a copy of the personal data we hold about you at any time. We'll respond within 30 days.
Right to correction
If any information we hold is inaccurate or incomplete, you can ask us to correct it.
Right to deletion
You can ask us to delete your personal data. We will do so unless we are required to retain it for legal or contractual reasons, in which case we'll explain why.
How to exercise your rights
Email privacy@msmeautomation.com with your request. We will acknowledge within 3 business days and fulfil within 30 days.
Data retention
Active clients
We retain your data for the duration of our engagement and for 3 years after the end of the contract, to handle any queries or disputes.
Prospects and leads
If you filled out a form but did not become a client, we retain your contact details for up to 2 years before deletion.
Deletion on request
You can request earlier deletion at any time by emailing privacy@msmeautomation.com. We will delete promptly unless a legal obligation requires otherwise.
Data Protection Contact
For any privacy-related questions, requests, or concerns — including exercising your rights under the DPDP Act — contact us at: