This Privacy Policy explains how DTRAS-G Solutions Private Limited ("Company", "we", "us") collects, uses, stores, discloses, and protects your personal information when you use the Autofront platform ("Service"). We comply with the Information Technology Act, 2000, the SPDI Rules, 2011, and the Digital Personal Data Protection Act, 2023.
1. Information We Collect
1.1 Information you provide
- Account data: name, email, password (hashed), business name.
- Project data: the prompts, brand assets, copy, and source files you submit to be built.
- Billing data: billing address, GSTIN (if any). Payment-card and UPI details are collected and stored solely by Razorpay; the Company never sees full card numbers.
- Communications: emails or support tickets you send us.
1.2 Information collected automatically
- IP address, browser, OS, device identifiers, referring URL.
- Usage telemetry: pages viewed, features used, build durations, errors encountered.
- Cookies and similar technologies for authentication, preferences, and analytics.
1.3 Information from third parties
- If you sign in via OAuth (e.g. GitHub, Google), we receive your basic profile and email.
- Razorpay shares limited transaction status (success / failure / refund) with us so we can fulfil orders.
2. How We Use Information
- To provide, maintain, and improve the Service (including running AI agents on your prompts).
- To process payments and manage subscriptions / credits.
- To send transactional emails (invoices, password reset, deploy notifications).
- To send product updates and marketing — only with your consent; you can opt out at any time.
- To prevent fraud, abuse, and to comply with legal obligations.
3. Sharing & Disclosure
We share personal information only as follows:
- Sub-processors who power the Service: Anthropic (LLM inference), Supabase (database), Vercel / Netlify / Cloudflare / Railway / GitHub / AWS (deployment targets you choose), Razorpay (payments).
- Legal compliance: when required by law, court order, or government request.
- Business transfer: in connection with a merger, acquisition, or asset sale, with notice to you.
We do not sell or rent your personal information to advertisers.
4. Data Storage & Retention
- Primary data is stored in India (Mumbai region) and the United States (Virginia region).
- Account and billing records are retained for as long as your account is active and for 7 years thereafter to comply with Indian tax law.
- Generated project files are retained while you have an active subscription. After cancellation we keep them for 90 days, then delete.
- You may request deletion of your account and associated data at any time (see Section 7).
5. Security
We use industry-standard technical and organisational safeguards: TLS 1.3 in transit, AES-256 at rest for credential vaults, scoped access tokens, audit logs, principle-of-least-privilege access for staff, and quarterly security reviews. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.
6. Cookies
We use first-party cookies for authentication and user preferences, and limited analytics cookies (anonymised) to understand product usage. You may disable cookies in your browser, but core functionality (sign-in, billing) may not work.
7. Your Rights
You have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request deletion of your account and personal data, subject to legal retention.
- Withdraw marketing consent at any time.
- Lodge a complaint with the Data Protection Board of India.
To exercise these rights, write to bd@dtrasglobal.com.
8. Grievance Officer
In accordance with the Information Technology Act, 2000 and the rules made thereunder, the Grievance Officer for DTRAS-G Solutions Private Limited is:
Grievance Officer
DTRAS-G Solutions Private Limited
Email: bd@dtrasglobal.com
We endeavour to acknowledge complaints within 48 hours and resolve them within 30 days.
9. Changes
We may update this Privacy Policy from time to time. Material changes will be notified by email or via the Service.