Loading...
Your data is yours. Here is exactly how we collect, use, and protect it — in plain language, not legal jargon.
Last updated: October 24, 2026
AWP - Automate with Priya is the trading name of SMAT Solutions Pvt Ltd (“we,” “us,” or “our”), an Indian private limited company registered at Uppal, Hyderabad, Telangana, India – 500039. Under the DPDP Act 2023, SMAT Solutions Pvt Ltd is the Data Fiduciary — responsible for how your personal data is processed.
Website: automatewithpriya.com
Contact: automatewithpriya@gmail.com
| Data | Source | Purpose |
|---|---|---|
| Email address | Signup, newsletter, auth | Account creation, service delivery, marketing (with consent) |
| Name & professional role | Service questionnaires | Tailoring your deliverables (Audit, Blueprint, etc.) |
| Organisation details | Service questionnaires | Contextualizing service delivery |
| UPI / gateway transaction reference | Cashfree, Razorpay, or WhatsApp confirmation | Payment verification & tax compliance |
| GSTIN / billing fields | Checkout (optional) | Tax invoice for your finance team |
| Questionnaire responses | Service intake forms | Creating your custom deliverables |
| Licence stamp data | My Library download | Legacy copies may carry purchase email and order ID. System A uses random licence and creator references, with the account mapping stored privately. |
| Download audit (item, time, IP hash) | My Library download | Enforce download limits, investigate abuse, support device resets |
| System A creator access and download records | Purchaser, assigned creator and My Library | Organisation, named creator emails, licence acceptance version/time, assignments/removals, download time and file checksum support access, licence limits and investigation. The offline workspace does not send us briefs, learner content or usage activity. |
| Device & browser info | Automatic (analytics) | Website optimization |
We do NOT collect:
We never sell, rent, or trade your personal data to third parties. Period.
We use these providers to operate our platform. Their processing roles and responsibilities are governed by the applicable service agreements and privacy terms:
| Service | What It Does | Data It Accesses |
|---|---|---|
| Supabase | Authentication, database & private file storage | Email, auth tokens, questionnaire responses, service progress and deliverable files |
| Resend | Transactional & subscribed marketing email | Recipient email, message content and delivery metadata |
| hCaptcha (Intuition Machines) | Essential bot protection for sign-in requests | IP address, browser/device signals and security-check interactions. Your email and sign-in link are not included in our CAPTCHA verification request. See hCaptcha's privacy policy. |
| Vercel (Hosting) | Website hosting | Server logs, IP address (standard hosting) |
| Vercel Speed Insights | Core Web Vitals performance telemetry | Anonymous page performance metrics (LCP, INP, CLS). No identifiers stored. |
| PostHog | Product analytics (page views, feature usage) | Optional analytics starts only after you choose “Allow analytics.” A pseudonymous identifier is stored in browser localStorage; a signed-in account may be associated using its internal user ID, never its email address. Private account and sign-in pages are excluded from product analytics. Authentication tokens and email addresses are removed from telemetry URLs. Session recording and analytics person profiles are disabled. Used to measure which features help L&D leaders find what they need. |
| Sentry | Error tracking | Error stack traces, browser + OS info. Request bodies, cookies, user profiles and sensitive headers are removed before sending. Session recording is disabled. Helps us fix bugs fast. |
| Cashfree Payments | Payment gateway (UPI, Cards, Net Banking, Wallets) for individual & team purchases | Transaction metadata. Cashfree is PCI-DSS compliant; we never store card/UPI credentials. |
| Razorpay | Payment gateway for enterprise-tier services (incl. payment links) | Transaction metadata, company name + GSTIN when supplied for invoicing. Razorpay is PCI-DSS compliant; we never store card/UPI credentials. |
| WhatsApp Business | Support & pre-launch drop reservations | Phone number, messages (operated by Meta) |
| Google Calendar and Google Meet | Scheduling for strategy calls, diagnostics & intake bookings | Your name, email and appointment time are used to create the calendar invitation and meeting link. Your discussion notes stay in our website booking records. |
| Anthropic (Claude) | Powers the service recommender — the chat that suggests which engagement fits you | Only the messages you type into that recommender. Not used to train models. Do not paste confidential material into it. |
Our website uses services outside India. A primary hosting region does not describe every support, backup, delivery or subprocessor location:
We do not promise India-only processing. If your engagement requires a specific region or transfer restriction, agree the approved systems and data-handling schedule with us before sharing client or learner data. Applicable law and the signed engagement terms govern those requirements.
Payments are processed through two licensed, PCI-DSS-compliant gateways: Cashfree (individual & team purchases — UPI, Cards, Net Banking, Wallets) and Razorpay (enterprise-tier services, including admin-issued payment links). This means:
When you arrive through a labelled campaign link, approved campaign labels and the public landing-page path may be retained in sessionStorage for up to 24 hours and attached to a services enquiry. This helps us understand the source of the enquiry. Campaign attribution contains no email address or learner records and is cleared with your browser’s site data.
| Data Type | Retention Period | Reason |
|---|---|---|
| Newsletter subscription | Until you unsubscribe or request deletion; a suppression record can remain | Record withdrawal and prevent further marketing |
| Delivered service questionnaire answers | Eligible for clearing 12 months after recorded delivery by the scheduled retention job | Follow-up support; service and financial records remain |
| Financial records | Retained for applicable GST and tax obligations and any legal hold | Invoices, purchases, service orders and related payment provenance |
| Provider telemetry and email records | Provider-specific retention; copies in support systems or backups can have different schedules | Delivery, support, performance and incident investigation |
| Auth/session data | Until account deletion | Required for login |
Clearing questionnaire answers does not delete your whole account, team assessments, files or provider copies. Account deletion removes the supported personal-data records and login account while retaining financial records required for GST or tax compliance. System A account erasure removes your creator assignments, acceptance and download records. If you own a System A licence, it closes that licence and its team access. Financial purchase records remain. Provider records, other shared team data and backups may require separate handling. Email us to review the scope of a deletion request and any lawful retention that applies.
As a Data Principal, you have the right to:
Right to Access: Request a copy of all personal data we hold about you.
Right to Correction: Request correction of inaccurate or incomplete data.
Right to Erasure: Use “Delete my data” on My Services to request account deletion, or email us. Financial records and other lawful retention can remain; contact us about provider copies, shared records and files.
Right to Withdraw Consent: Withdraw consent for marketing emails at any time. One-click unsubscribe in every email.
Right to Grievance Redressal: Raise a complaint about our data practices — we respond within 72 hours.
Right to Nominate: Nominate another person to exercise your data rights on your behalf.
To exercise any right, email automatewithpriya@gmail.com. We respond within 72 hours and complete actions within 30 days.
You also have the right to lodge a complaint with the Data Protection Board of India.
Our services are designed for L&D professionals and enterprise teams. This website is intended for users aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with data, please contact us immediately and we will delete it.
No system is 100% secure, but we take reasonable and appropriate measures to protect your information. In the event of a data breach, we will notify the Data Protection Board and affected users as required by the DPDP Act.
We may update this privacy policy to reflect changes in our practices or legal requirements. Material changes will be communicated via email to active clients and subscribers. The “Last Updated” date at the top of this page indicates when the policy was last revised.
Name: Vishnu Priya
Role: Founder & Data Protection Contact
Email: automatewithpriya@gmail.com
Response time: Within 72 hours
Resolution time: Within 30 days
Still not resolved? You have the right to raise a complaint with the Data Protection Board of India.
