This Privacy Policy describes how Infyterra Technologies (a division of Infycons Creative Software Pvt Ltd, "Infyterra," "we," "us," or "our") collects, uses, and shares information about you when you use our website, software products, and related services (collectively, the "Services").
1.Overview
We are committed to protecting your personal data and your right to privacy. This policy explains what information we collect, why we collect it, and how you can update, manage, export, and delete your information. It applies to all products operating under the AutoTerra brand and the autoterra.net website.
Our registered office is at Infycons Creative Software Pvt Ltd, Kochi, Kerala, India. We are subject to the Information Technology (Amendment) Act 2008 and the Digital Personal Data Protection Act (DPDP Act) 2023. Where we handle data of European residents, we comply with the General Data Protection Regulation (GDPR).
2.Data we collect
2.1 Information you provide directly
- Account data: Name, email address, password (hashed), phone number, organisation name and address — collected when you create an account or sign in via email.
- Identity via social login: When you sign in with Google or Microsoft, we receive your name, email address, and profile picture from those providers. We do not receive your password.
- Purchase & billing data: Billing address, GST number (for Indian customers), payment method details. Card numbers are handled exclusively by our payment processor (Razorpay) and are not stored on our servers.
- Support & enquiry data: Information you provide in contact forms, demo requests, quote requests, or support tickets.
- Waitlist registrations: Email address collected for early-access programmes (e.g., UAV Photogrammetry module).
2.2 Information collected automatically
- Log data: IP address, browser type and version, referring URL, pages visited, time and date of access, HTTP status codes.
- Device data: Operating system, screen resolution, device identifiers.
- Usage data: Features accessed within the AutoTerra desktop application (telemetry), session duration, error reports. Telemetry can be disabled from within the application settings.
- Location data: Country-level geolocation derived from IP address (via ipapi.co), used to show region-appropriate pricing. We do not collect precise GPS location.
- Cookies and similar technologies: As described in Section 5.
2.3 Information from third parties- Payment status and transaction identifiers from Razorpay
- Basic profile information from Google or Microsoft when you choose social login.
- Publicly available company information used to enrich account data for enterprise enquiries.
3.How we use your data
We use personal data for the following purposes, each grounded in a lawful basis:
- Providing the Services: Account creation, licence activation, software downloads, and customer support. (Contractual necessity)
- Processing payments: Billing, invoicing, and tax compliance. (Contractual necessity; legal obligation)
- Sending transactional communications: Licence keys, purchase confirmations, password resets, email verification links, and critical service notices. (Contractual necessity)
- Product communications: Release notes, product updates, and feature announcements — only where you have opted in. (Legitimate interest / consent)
- Analytics and product improvement: Understanding how features are used to prioritise development. Data is aggregated or pseudonymised where possible. (Legitimate interest)
- Security and fraud prevention: Detecting abuse, enforcing licence terms, and protecting our infrastructure. (Legitimate interest; legal obligation)
- Legal compliance: Retaining records required by tax or corporate law. (Legal obligation)
- Marketing: Only with your explicit consent, and you may withdraw at any time.
4.Sharing & disclosure
We do not sell your personal data. We may share data with:
- Service providers: Hosting (cloud infrastructure), payment processing (Razorpay), email delivery, analytics, and customer support tooling — all under data processing agreements.
- Social login providers: Google LLC and Microsoft Corporation receive the fact that you authenticated to our service.
- Affiliated entities: Infycons Creative Software Pvt Ltd for finance, HR, and legal purposes.
- Legal and regulatory: Where required by Indian law, court order, or to protect against fraud or security threats.
- Business transfers: In the event of a merger, acquisition, or asset sale, data may be transferred — you will be notified in advance.
5.Cookies & tracking
We use cookies and similar technologies. For full details, please read our Cookie Policy. In summary:
- Strictly necessary cookies: Session management, authentication tokens — cannot be disabled.
- Analytics cookies: We use privacy-respecting analytics to understand page traffic. You may opt out via your browser settings or our cookie banner.
- Preference cookies: Remember your language, region, and display preferences.
We do not use advertising or tracking cookies for third-party ad networks.
6.Data retention
We retain personal data for as long as necessary to fulfil the purposes set out in this policy or as required by law:
- Account data: for the life of your account, plus 3 years after closure (for legal and audit purposes).
- Financial records: 7 years (India tax law compliance).
- Support communications: 2 years from resolution.
- Application telemetry: 12 months in identifiable form, then anonymised indefinitely.
- Waitlist registrations: until the feature launches or you unsubscribe.
7.Your rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Erasure: Request deletion of your personal data where we have no legal obligation to retain it.
- Portability: Receive your data in a machine-readable format (GDPR residents).
- Restriction: Request that we restrict processing in certain circumstances.
- Objection: Object to processing based on legitimate interest.
- Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
- Grievance redressal: DPDP Act 2023 rights for Indian data principals.
To exercise any of these rights, email us at privacy@infycons.com. We will respond within 30 days. Identity verification may be required.
8.International transfers
Our primary operations are in India. If you access the Services from the European Economic Area, UK, or other regions with data transfer restrictions, we ensure appropriate safeguards are in place — including Standard Contractual Clauses (SCCs) approved by the European Commission.
9.Security
We implement industry-standard technical and organisational measures to protect your data, including TLS encryption in transit, AES-256 encryption at rest for sensitive fields, role-based access controls, and regular security audits. Passwords are never stored in plaintext — we use bcrypt hashing. Despite these measures, no system is completely secure; please notify us immediately at security@infycons.com if you suspect unauthorised access.
10.Children
The Services are intended for professional and business use. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that we have collected data from a minor, we will delete it promptly.
11.Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date reflects the most recent revision. For material changes, we will notify you by email or a prominent notice within the product at least 14 days before they take effect.
12.Contact us
For privacy enquiries, data subject requests:
If you are an EEA resident and are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.