Draft — not yet reviewed by a lawyer. Not legally binding in this form.

Privacy policy

Last updated October 2026

Machinomics is a brand of [Company] ("we", "us"). This policy explains how we process personal data as a Data Fiduciary under India's Digital Personal Data Protection Act, 2023 ("DPDP Act").

What we collect

• Enquiries: company name, your name, phone, email, city, machine count, controller makes and your message, when you fill in our enquiry form.
• Account data: name, email and role of each user your organisation invites.
• Machine data: machine status, program numbers, part counts, alarms and timestamps read from your CNC controllers. This is your organisation's operational data, not personal data, but we protect it the same way.
• Technical data: sign-in records and logs needed to keep the service secure and working.

Why we use it

• To reply to your enquiry, survey your site and give you a quote.
• To provide, support and secure the service you subscribe to.
• To send service messages such as alerts and daily reports you turn on.

We do not sell personal data and do not use it for third-party advertising.

Consent and your rights

We process personal data on the basis of your consent or for legitimate uses permitted by the DPDP Act. You may withdraw consent at any time. You have the right to access a summary of your personal data, to correct or erase it, to nominate another person to exercise your rights, and to grievance redressal. Write to the Grievance Officer below.

Where data is stored and who processes it

Data is stored with our cloud hosting and database providers, who process it on our instructions only. We retain enquiry data for up to [24 months] if no agreement follows, and account and machine data for the length of your subscription plus [90 days], unless the law requires longer.

Your machines are read-only to us

The Machinomics agent never writes to a CNC controller — no parameters, programs or macros. Remote access to your PC happens only during install or support sessions that you start; we keep no permanent unattended access.

Security

We use encryption in transit, per-organisation access controls in the database, and least-privilege access for our staff. If a personal data breach occurs, we will notify you and the Data Protection Board of India as the DPDP Act requires.

Grievance Officer

[Name], [Company], [Address], Coimbatore, Tamil Nadu. Email: [privacy@example.com]. We respond within the time the DPDP Act and its rules require.