Privacy Policy

Authentic Technologies  ·  Last updated: 28 May 2026  ·  Effective date: 18 May 2026

1. Who We Are

Authentic Technologies is a proprietorship firm registered in Assam, India (GSTIN: 18AFQPJ8658C2ZY). We build privacy-focused software tools.

• Owner: Mrs. Prabha Jallan
• Address: #3, 11, Siddhinath Enclave, Amarabati Path, Dispur Sub Post Office, Shree Nagar, Guwahati, Kamrup Metropolitan, Assam — 781005
• Email: autech1402@gmail.com

2. What Personal Data We Collect

We collect only the minimum data necessary to process your purchase, issue your licence, and provide customer support.

2.1 Purchase & Licence Data

• Full name — for invoice generation
• Email address — to send your licence key and invoice
• Phone number — optional, for support follow-up
• GSTIN — optional, for GST invoice (B2B purchases)
• State & state code — required for correct GST computation (CGST/SGST vs IGST)
• UPI payment screenshot — stored temporarily to verify manual UPI payments; deleted after order confirmation
• UPI transaction note — the reference you add to the payment

2.2 Device Data (DataVeil, PDF Toolkit Pro & TallyStockJournal ExcelToTool)

• Device fingerprint (DataVeil / PDF Toolkit Pro) — a UUID generated and stored in your browser's localStorage. Used for single-device licence binding. Never sent to any third party.
• Device fingerprint (TallyStockJournal ExcelToTool) — a UUID generated and stored in the Windows Registry under HKCU\SOFTWARE\AuthenticTech\TallyStockJournal\. Used to bind the licence to a single Windows installation. Never transmitted to any third party.

2.3 Technical / Log Data

• IP address (in server access logs, auto-purged after 30 days)
• Browser type and OS (in access logs only)

2.4 What We Do NOT Collect

• PrivacySecure does not access, read, or transmit any of your WhatsApp messages, contacts, or media
• DataVeil processes your Excel files entirely in your browser — no file data is ever uploaded to our servers
• PDF Toolkit Pro processes your PDF files entirely in your browser — no file content is ever uploaded to our servers
• TallyStockJournal ExcelToTool processes your Tally stock data entirely on your local computer via Excel VBA — no ledger, stock, or financial data is ever uploaded to our servers
• We do not use cookies for tracking or advertising
• We do not collect payment card details (UPI is peer-to-peer)

3. How We Use Your Data

• To process your order and issue your licence key
• To generate a GST-compliant tax invoice
• To send your licence key, invoice, and support communications via email
• To prevent licence fraud (device binding, activation count)
• To comply with Indian tax and accounting laws (GST records retained for 8 years as required by law)

We do not use your data for marketing, profiling, or advertising. We do not sell your data to any third party.

4. Legal Basis for Processing

Under the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian law, we process your personal data on the following bases:

• Contract performance — processing your order and issuing your licence
• Legal obligation — GST invoicing and tax record-keeping
• Consent — for any optional communications you opt into

5. Data Storage & Residency

All personal data is stored exclusively in India:

• Database: Supabase — Mumbai region (ap-south-1), India
• Application server: Fly.io — Mumbai (bom) region, India

No personal data is transferred outside India, in compliance with the DPDP Act, 2023.

6. Data Retention

• Order & invoice records — retained for 8 years (GST legal requirement)
• Licence records — retained for the duration of the licence + 1 year after expiry
• UPI screenshots — deleted within 30 days of order confirmation
• Server access logs — auto-purged after 30 days
• Inactive customer records — anonymised 2 years after last licence expiry (name and phone replaced with anonymised tokens; email retained for GST records only)

7. Your Rights Under DPDP Act 2023

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access — request a copy of all personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Erasure — request deletion of your personal data (subject to legal retention requirements)
• Grievance redressal — raise a complaint with our Grievance Officer (see Section 10)
• Nomination — nominate another individual to exercise rights on your behalf in case of death or incapacity

To exercise any of these rights, use our self-service data portal or email us at autech1402@gmail.com with the subject line "DPDP Data Request — [your email]". We will respond within 30 days.

8. Data Security

• All data is transmitted over HTTPS (TLS 1.2+)
• Database credentials are stored as encrypted environment secrets
• Admin access requires password authentication with bcrypt-hashed passwords
• UPI screenshots are stored as encrypted bytea in the database, not as public files

In the event of a data breach affecting your personal data, we will notify affected users within 72 hours of becoming aware of the breach, as required by the DPDP Act.

9. Children's Data

Our products are not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact our Grievance Officer immediately.

10. Grievance Officer

In accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, the following person has been designated as our Grievance Officer:

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of our products after changes constitutes acceptance of the updated policy. For significant changes, we will notify existing licence holders by email.

12. Contact

For any questions about this Privacy Policy, contact us at autech1402@gmail.com.