Privacy Policy

Welcome to AutomationMart. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, and describes your rights in relation to that data.

By using AutomationMart, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the platform.

We collect the following categories of information:

• Personal Information — Name, email address, and login credentials provided during registration.
• Transaction Data — Payment details (processed securely via Razorpay), purchase history, and billing information.
• Usage Data — IP addresses, browser type and version, pages visited, time spent, referring URLs, and actions taken on the platform.
• Seller Data — Uploaded workflow files (JSON blueprints), listing content, pricing data, and earnings information.
• Communications — Messages sent to our support team and responses received.

We use your information solely for the following purposes:

• Platform Operation — To provide, maintain, and improve the AutomationMart marketplace and its features.
• Financial Transactions — To process payments for buyers and calculate and issue payouts for sellers.
• Service Delivery — To enable secure download of purchased automation blueprints.
• Communication — To send transaction confirmations, support responses, and important platform updates.
• Security — To detect, prevent, and investigate fraud, abuse, or unauthorized access.
• Analytics — To understand usage patterns and improve the platform's design and functionality.
• Legal Compliance — To comply with applicable laws, regulations, and legal processes.

We do not use your data for targeted advertising, and we do not sell your personal information to any third party.

We rely on the following trusted third-party providers to operate our platform. Each processes your data under their own privacy policy:

These providers are contractually required to handle your data securely and only for the purposes we specify.

We do not sell, trade, or rent your personal data to third parties. We may share data only in these limited circumstances:

• Service Providers — With partners like Razorpay and Supabase, strictly to enable platform functionality.
• Legal Requirements — If required by law, court order, or governmental authority.
• Fraud Prevention — With law enforcement or other parties to protect against fraud, abuse, or illegal activity.
• Business Transfers — In connection with a merger, acquisition, or sale of assets, with prior notice to affected users.

We implement industry-standard technical and organisational measures to protect your data:

• All data is transmitted over HTTPS using TLS encryption.
• Database access is protected by Row Level Security (RLS) policies, ensuring users can only access their own data.
• Workflow files are stored in private Supabase Storage buckets. Download links are tokenised, limited to 5 uses, and expire after 30 days.
• Authentication is handled by Supabase Auth with secure session management.
• Admin and sensitive API routes require server-side authentication verification.

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy:

• Account data is retained for the duration of your account and for up to 3 years after deletion for legal and accounting purposes.
• Transaction records are retained for 7 years to comply with Indian financial regulations.
• Usage/analytics data is retained for up to 12 months.
• Support communications are retained for 2 years.

You may request deletion of your account and associated personal data at any time by contacting us. Note that certain data may be retained where required by law.

Depending on your location, you may have the following rights regarding your personal data. To exercise any of these rights, contact us at support@automationmart.io:

• Access — Request a copy of the personal data we hold about you.
• Correction — Request correction of any inaccurate or incomplete data.
• Deletion — Request erasure of your personal data, subject to legal retention requirements.
• Portability — Request your data in a structured, machine-readable format.
• Withdraw Consent — Withdraw consent for any processing based on your consent at any time.
• Objection — Object to processing of your data for specific purposes.

We will respond to all legitimate requests within 30 days. We may need to verify your identity before processing your request.

We use cookies and similar technologies to maintain your session and improve your experience:

• Session cookies — Required for authentication. These expire when you close your browser.
• Preference cookies — Remember your settings across visits.
• Analytics cookies — Help us understand how the platform is used. No personally identifiable data is shared with analytics providers.

You can control cookies through your browser settings. Disabling session cookies will prevent you from logging in to the platform.

AutomationMart is not directed at children under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal data, please contact us immediately and we will take steps to remove it.

We may update this Privacy Policy from time to time. When we make material changes, we will notify registered users by email and update the "Last updated" date at the top of this page at least 14 days before changes take effect.

Your continued use of the platform after the effective date of any amendment constitutes your acceptance of the updated policy.

This Privacy Policy is governed by the laws of India, including the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.