Privacy Policy

Who we are

Firmcraft Technologies (OPC) Private Limited, 506, KK Nagar West, Yercaud Main Road, Salem, Tamil Nadu 636008, India. For any privacy question or request, email info@firmcraft.in.

What we collect

• Account details: name, email address, mobile number, company name, GST number, address, designation, company logo and profile picture, and your password (stored only as a one-way hash).
• Google sign-in: if you sign in with Google, we receive your name and email address from Google.
• Billing: your plan, subscription dates, and the order and payment references for each payment. Card, UPI and bank details are entered on Razorpay and are never received or stored by us.
• Device and telemetry data: the devices, gateways, readings, locations, alerts and firmware you add to or send to the platform.
• Usage and technical data: IP address, browser type, sign-in times, and a log of actions taken in your account, kept for security and audit.
• Communications: messages you send us through demo requests, support tickets and email.

How we use it

We do not sell personal data, and we do not use your telemetry for advertising.

• To create and secure your account, sign you in, and verify your email address.
• To run the service: store and display telemetry, evaluate alert thresholds, send alert and account emails, and deliver firmware updates.
• To bill for paid plans and keep the records tax law requires.
• To answer your requests and provide support.
• To understand how the websites and dashboard are used so we can improve them.
• To detect and prevent abuse, and to meet legal obligations.

Your device data

Telemetry and device data you send belong to you. We process them only to provide the service to you. The AI analytics features run on Firmcraft-operated servers; your telemetry is not sent to third-party AI providers.

Who we share it with

We share personal data only with service providers that help us run Firmcraft, and only what each needs:

• Razorpay: payment processing for paid plans.
• ZeptoMail by Zoho: delivery of account, verification and alert emails.
• Google (Firebase Authentication): Google sign-in, if you choose it.
• Microsoft Clarity: website and dashboard usage analytics, including session recordings of page interactions, only if you accept analytics cookies.
• Google Analytics: usage analytics on www.firmcraft.in, only if you accept analytics cookies.
• Our cloud hosting provider, which runs the servers the platform is hosted on.

How long we keep it

• Telemetry is kept for the retention period of your subscription plan and deleted automatically after it.
• Account data is kept while your account is active. When an account is deleted, we delete or anonymise its personal data within a reasonable period, except where the law requires us to keep it.
• Payment records are kept for as long as Indian tax and accounting law requires.

Security

We protect data with encryption in transit, per-device certificates, tenant isolation, role-based access control and audit logging. See dashboard.firmcraft.in/security for details. No system is perfectly secure, and we will notify affected users and authorities of a personal data breach as the law requires.

Your rights

Under India’s Digital Personal Data Protection Act, 2023 and other applicable law, you can ask to access, correct, update or erase your personal data, withdraw consent, and nominate another person to exercise these rights for you. Most profile details can be edited in Settings. For anything else, email info@firmcraft.in from your account email address and we will respond within the time the law requires.

If you are not satisfied with our response, you may complain to the Data Protection Board of India.

Grievance officer

Questions or complaints about how we handle personal data can be sent to our Grievance Officer at info@firmcraft.in, or by post to the address above.

Children

Firmcraft is a business service and is not intended for anyone under 18. We do not knowingly collect personal data from children.

Data outside India

Some of the service providers listed above may process data outside India. Where they do, we rely on their contractual commitments to protect it.

Changes to this policy

We will update the date at the top of this page when this policy changes, and notify account holders by email of significant changes.