Privacy Policy

1. Introduction

Synx Automation Private Limited ("Synx", "we", "us") is committed to protecting the privacy of businesses and individuals who use SerpY. This Privacy Policy explains how we collect, use, share, and protect personal and business data processed through the Service at https://www.serpy.in.

This Policy is compliant with the Information Technology Act, 2000, the IT (Reasonable Security Practices and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), and the Digital Personal Data Protection Act, 2023 ("DPDPA"), as applicable.

By using the Service, you ("Data Principal", "Subscriber", "you") consent to the practices described in this Policy.

2. Data Fiduciary

• Company: Synx Automation Private Limited
• CIN: U62099KL2024PTC087457
• Address: 77 Spaces, Kumarapuram, Trivandrum, Kerala – 695011, India
• Privacy Contact: privacy@synxautomate.com

3. Data We Collect

3.1 Business & Account Information

• Company name, GSTIN, business address, and industry type.
• Authorised representative name, email address, and phone number.
• Billing information (processed by third-party PCI DSS-compliant gateways).
• User account details for all Admin, Manager, and Staff logins.

3.2 Operational / Manufacturing Data

The following categories of data are entered into the Service by you in the course of running your business:

• Job records: job details, customer requirements, materials, quantities, deadlines, production status, and process notes.
• Inventory data: raw materials, components, finished goods, stock movement, and reorder levels.
• Procurement records: purchase orders, supplier details, and pricing.
• Customer data: names, contact details, addresses, GSTIN, quotations, invoices, and payment records.
• Team and task data: staff assignments, task completion logs, and operational activity.
• Invoice and financial data: GST invoices, payment status, and outstanding amounts.

This operational data is your business data. We process it solely to provide the Service and do not use it for any other purpose.

3.3 Automatically Collected Data

• Log data: IP addresses, browser type, pages accessed, timestamps, and referring URLs.
• Device and session information: operating system, device identifiers, and screen resolution.
• Usage analytics: feature usage patterns, session duration, and error logs.
• Cookies and similar technologies (see Section 9).

3.4 Sensitive Personal Data

We do not intentionally collect Sensitive Personal Data or Information (SPDI) as defined under the SPDI Rules from individual users, except billing data which is processed solely by our payment partners.

4. How We Use Your Data

• Service Delivery: To operate, maintain, and improve the Serpy platform and all its features.
• Account Management: To manage registrations, authenticate users across all role tiers, and maintain account security.
• Billing: To process payments, issue tax invoices, and manage subscription renewals.
• Support: To respond to support queries, diagnose issues, and improve user experience.
• Product Improvement: To analyse usage patterns and develop new features relevant to manufacturing workflows.
• Legal Compliance: To comply with applicable laws, GST regulations, and regulatory requirements.
• Communications: To send service announcements, updates, and — with your consent — product information.

5. Legal Basis for Processing

We process data based on contractual necessity, your consent, legitimate interests (security), and legal obligations.

6. Data Sharing & Disclosure

We do not sell your data. We do not share your operational manufacturing data with any third party for commercial purposes. We may share data only with trusted service providers (cloud hosting, payment, etc.), legal authorities when required, or in connection with business transfers.

7. Data Retention

• Active subscription data: Retained for the duration of your subscription plus 30 days post-cancellation (to allow for data export).
• Post-cancellation: Data is permanently deleted 30 days after account closure unless you request earlier deletion.
• Free trial data: Retained for 30 days post-trial expiry; deleted if no subscription is activated.
• Billing records: Retained for seven (7) years as required by Indian financial and GST regulations.
• Audit logs: Retained for a minimum of 90 days for security and compliance purposes.

8. Your Rights as a Data Principal

Under the DPDPA 2023 and applicable law, you have the following rights: Access, Correction, Erasure, Portability, Grievance Redressal, and the Right to Nominate. To exercise any of these rights, contact privacy@synxautomate.com.

9. Cookies & Tracking

We use cookies for session authentication, user preferences, and usage analytics. You may manage cookie settings through your browser.

10. Third-Party Integrations & Data

When you connect SerpY to third-party services (WhatsApp Business, SMTP email, cloud storage, API connections), data may be transmitted to those platforms. Such transmission is governed by the respective third-party's privacy policy.

11. Grievance Officer

Grievance Officer, Synx Automation Private Limited
Email: privacy@synxautomate.com
Address: 77 Spaces, Kumarapuram, Trivandrum, Kerala – 695011, India

12. Children's Privacy

SerpY is a business platform not intended for use by individuals under 18 years of age. We do not knowingly collect personal data from minors.

13. International Data Transfers

Data is primarily stored on servers located in India. Where data is processed by global cloud service providers, we ensure appropriate contractual safeguards are in place compliant with Indian data protection law.

14. Changes to This Policy

We may update this Policy periodically. Material changes will be communicated with 14 days' notice.

15. Contact

Synx Automation Private Limited
Trivandrum, Kerala – 695011, India
Email: privacy@synxautomate.com