Privacy Policy

This policy is written to India's Digital Personal Data Protection Act, 2023. It describes what we collect, why we need it, how long we keep it, and what you can ask us to do about it.

Who you are dealing with

Business name
Registered address
GSTIN
Email
Phone
Hours

1. What we collect, and why

Name, email, mobile number	To create your account, sign you in, send one-time codes, and reach you when a device you own has a problem.
Delivery address and phone	Only when you place an order. Used to ship the goods and to raise a tax invoice, which the law requires us to keep.
Device data — run history, sensor readings, faults, firmware version, the time the device was last seen	To show you what your equipment did, to enforce the schedules you set, to alert you when something is wrong, and to diagnose a support case.
Installation location, if you set one	Stored on the device and reported when it changes. Used to show where a unit is and for weather-aware behaviour where you have enabled it.
Sign-in identifiers from Google, if you use that button	We receive a stable identifier, your email address and your name. We do not receive your Google password, your contacts, your files or your phone number.
Technical logs	Error reports and request logs, to find faults. Kept short.

2. What we do not collect

• No card details, ever. Card and UPI details are entered on the payment gateway's own page, not on ours. We never see, store or log a card number, a CVV, an expiry date, or even the last four digits.
• No advertising identifiers, and no third-party advertising or analytics trackers on the app.
• No microphone, camera or contacts access.
• We do not ask for your Aadhaar or any government identity number.

3. We do not sell your data

We do not sell, rent or trade personal data, and we do not share it for anyone else's marketing. Data is shared only with the service providers we need to operate — a payment gateway to take a payment, an email and SMS provider to deliver a message, a courier to deliver an order, and the hosting provider that runs the servers — and only the part each of them needs to do that job.

4. Where it is stored

On servers we operate, in a database that is backed up regularly. Traffic between your browser or device and our servers is encrypted in transit. Passwords are stored as one-way hashes and cannot be read back by us or by anyone who obtains the database.

5. How long we keep it

• Account details — while your account exists.
• Run history, sensor readings and events — on a retention window that an administrator can see and change; older rows are purged automatically. An unresolved fault alert is never purged for age, because it is still telling you something.
• Orders and tax invoices — for the period Indian tax law requires, even after an account is closed. This is a legal obligation and is not something we can delete on request.

6. Your rights

• Access — ask for a copy of what we hold about you.
• Correction — most of it you can edit yourself on the account page; ask us for anything you cannot.
• Erasure — ask us to delete your account and its data, subject to the records we are legally required to retain.
• Withdraw consent — turn off alert channels individually, or close the account entirely.
• Grievance — if you are not satisfied with our response you may complain to the Data Protection Board of India.

To exercise any of these, write to .

7. Children

This service is sold to and intended for adults. We do not knowingly create accounts for children.

8. Cookies and local storage

We use browser storage for the things that make the app work: your session, your theme choice, and your cart. There are no advertising or cross-site tracking cookies. The shop runs on its own separate origin from the app, so what the shop stores and what the app stores are kept apart by the browser.

9. Changes

If this policy changes materially we will say so in the app as well as changing the date at the top of this page.