Privacy Policy

Velthar Services Private Limited (“Factro”, “we”, “us”) operates the Factro platform. This Privacy Policy explains what personal data we collect, why, and your rights under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”). It applies to factro.in and app.factro.in.

1. Data we collect

Category	Examples
Account data	Name, work email, phone number, company name, role
Factory / operational data	Production lines, shift logs, machine and sensor readings, invoices, customers, vendors you enter
Usage & device data	Log-in activity, device identifier, IP address, feature usage, browser type
Payment data	Processed by Razorpay. We receive a payment reference and status — we do not store your full card or bank details.
Communications	Support requests and messages you send us

2. Purpose of processing

We process personal data to:

• provide, secure and operate the Service (including tenant isolation and single-device session enforcement);
• process subscriptions and payments, and issue GST invoices;
• send operational alerts and notifications you have enabled (e.g. maintenance alerts, digests);
• provide support, and improve reliability and features; and
• comply with legal and tax obligations.

3. Consent & legal basis

We process your personal data with your consent and/or for the legitimate purposes of delivering a service you have requested, as permitted by the DPDP Act. You may withdraw consent for optional processing at any time (see “Your rights” below); this will not affect processing already carried out.

4. Who we share data with

We share data only with processors that help us run the Service, under appropriate safeguards:

• Razorpay — payment processing;
• Cloud hosting & database (e.g. our VPS provider and Supabase) — storage and delivery;
• Messaging / email providers — to send notifications you enable;
• AI providers — to generate predictive-maintenance and analysis outputs from your operational data.

We do not sell your personal data. We may disclose data if required by law.

5. Data retention

We keep personal data for as long as your account is active and as needed to provide the Service, then for any period required by tax and legal obligations, after which it is deleted or anonymised. You can request deletion as described below.

6. Data Protection & security

We apply technical and organisational measures including encryption in transit, encryption of sensitive stored secrets, tenant isolation, access controls and audit logging. No system is perfectly secure, but we work to protect your data and will notify you and the Data Protection Board of any breach as required by the DPDP Act.

7. Your rights under the DPDP Act

As a Data Principal, you have the right to:

• access a summary of the personal data we process about you;
• request correction, completion or updating of your data;
• request erasure of your data, subject to legal retention;
• nominate another person to exercise your rights in the event of death or incapacity; and
• grievance redressal (see below).

8. Cookies

We use strictly necessary cookies to keep you signed in and to secure sessions, and limited analytics to understand usage. You can control cookies through your browser settings.

9. Grievance Officer & contact

In line with the DPDP Act, you can reach our Grievance Officer for any privacy question, to exercise your rights, or to raise a complaint:

• Grievance Officer: Raguram Sundaravadivel
• Email: hello@factro.in
• Address: Chidambaram Pillai, Sisalem Main Road, Kallakurichi, Villupuram - 606202, Tamil Nadu

We will acknowledge and respond to grievances within the timelines required by law.

10. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date above reflects the latest version, and material changes will be notified in the app or by email.