Privacy Policy

AutoFlow Technologies Private Limited ("we", "our", or "us") operates the AutoLync MSME platform. This Privacy Policy explains what information we collect, why we collect it, and how we use it when you register and use our services. It also describes the choices available to you regarding our use of your personal information and how you can access and update this information.

This policy is governed by and compliant with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("IT Rules 2011").

By using AutoLync MSME, you agree to the collection and use of information as described in this policy. If you do not agree, please discontinue use of our platform.

1. Information We Collect

1.1 Information You Provide

When you register for or use the Service, you may provide us with certain personally identifiable information. This information may include, but is not limited to:

• Account Registration: Business name, owner/administrator name, email address, phone number, and password.
• Team Data: Employee names, roles, departments, and contact details that you add to the platform.
• Attendance Records: Check-in and check-out times, attendance status, and related logs generated through use of the Attendance module.
• Communications: Messages or feedback you send us through support channels or contact forms.

1.2 Face Data

As part of the Attendance Management module, AutoLync MSME may collect and process biometric facial data ("Face Data") for the purpose of employee identity verification and attendance tracking. By enabling this feature within your organisation's workspace, you (as the business account administrator) represent that you have obtained all necessary consents from each individual whose Face Data will be collected and processed through the platform.

• Collection: Face Data is captured via device cameras when employees use biometric attendance features.
• Purpose: Face Data is used solely for the purpose of verifying employee identity and recording attendance. It is not used for any other commercial or analytical purpose.
• Storage: Face Data is stored on secured servers with encryption in transit (HTTPS/TLS) and at rest.
• Access: Access to Face Data is restricted to authorised personnel of AutoFlow Technologies Private Limited on a strict need-to-know basis.
• Sharing: Face Data is not sold, rented, or shared with third parties except as strictly required to provide the Service (e.g., cloud hosting providers under confidentiality agreements) or as required by applicable law.
• Retention: Face Data is retained for as long as the relevant employee record is active in your workspace. Upon account deletion or upon request, Face Data will be deleted within 30 days subject to any legal obligations.
• Consent & Withdrawal: Employee individuals may withdraw consent for biometric data collection by notifying their organisation's administrator. The administrator is responsible for removing the relevant employee record and notifying AutoFlow Technologies Private Limited.

1.3 Cookies & Local Storage

AutoLync MSME uses cookies and similar tracking technologies to maintain sessions, remember preferences, and analyse usage. This includes session tokens, preference settings, and authentication data stored locally to keep you signed in. You can control cookie behaviour through your browser settings. Disabling cookies may affect the functionality of the platform.

1.4 Log Information

When you use the Service, our servers automatically record certain information ("Log Data"). This Log Data may include information such as your IP address, browser type and version, operating system, device identifiers, the pages or features you accessed, the time spent on those pages, and other statistics. We use this information to monitor and analyse how the Service is used, for technical administration, and to improve the Service.

1.5 User Communications

When you send email or other communications to AutoFlow Technologies Private Limited, we may retain those communications in order to process your enquiries, respond to your requests, and improve our services. We may also use your email address to send you service-related notices (e.g., account updates, security alerts). These are considered transactional communications and you may not opt out of receiving them while your account is active.

1.6 Affiliated Sites & Third-Party Integrations

AutoLync MSME may link to or integrate with third-party services (e.g., cloud hosting, email delivery, analytics). We have no control over the content or privacy practices of those services and encourage you to review their privacy policies. Any data shared with such services is governed by our agreements with those providers, who are bound by strict confidentiality obligations.

2. Choices for Personal Information

When you sign up for the Service, you are opting in to receive certain communications from AutoFlow Technologies Private Limited. If you do not want to receive promotional communications from us, you may opt out at any time by following the unsubscribe instructions in any such communication or by contacting us at insights@autoflowtech.com. Note that transactional and administrative communications related to your account cannot be opted out of while your account is active.

As a user of AutoLync MSME, you have the right to:

• Access and review the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data (subject to legal obligations).
• Withdraw consent where processing is based on consent, including withdrawal of consent for biometric/Face Data collection.
• Lodge a complaint with the relevant data protection authority or with our Grievance Officer (see Section 5).

To exercise any of these rights, please contact us at insights@autoflowtech.com.

3. Information Sharing & Disclosure

We do not sell, trade, or rent your personal information or Face Data to third parties. We may share data only in the following limited circumstances:

• Service Providers: Trusted third-party vendors (hosting, email delivery, analytics) who process data on our behalf under strict confidentiality agreements and are prohibited from using the data for any other purpose.
• Legal Requirements: When required by applicable Indian law, court order, or government authority — including compliance with the IT Act, 2000 and IT Rules 2011.
• Business Transfer: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our platform before your data is transferred and becomes subject to a different privacy policy.
• Protection of Rights: When we believe disclosure is reasonably necessary to protect the rights, property, or safety of AutoFlow Technologies Private Limited, our users, or the public.
• With Your Consent: Any other sharing only with your explicit prior consent.

4. Information Security

AutoFlow Technologies Private Limited takes the security of your data seriously. We implement industry-standard technical and organisational security measures — including encryption in transit (HTTPS/TLS), encryption at rest for sensitive data (including Face Data), role-based access controls, and regular security reviews — to protect your information against unauthorised access, loss, alteration, or misuse.

We follow the security practices prescribed under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

While we strive to use commercially acceptable means of protection, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security, but we will notify you of any breach affecting your personal data as required by applicable law.

5. Grievance Officer

In accordance with the Information Technology Act, 2000 and the Information Technology (Intermediaries Guidelines and Digital Media Ethics Code) Rules, 2021, the name and contact details of our Grievance Officer are provided below. If you have any grievances regarding the processing of your personal data, including Face Data, please contact:

• Name: Mr. Chetan Mukadam
• Designation: Grievance Officer
• Company: AutoFlow Technologies Private Limited
• Address: Level 4th & 5th, Ruia Chambers, Amanora Park Town, Hadapsar, Pune, Maharashtra 411028
• Phone: +91 9975576721
• Email: insights@autoflowtech.com

Grievances will be acknowledged within 24 hours and resolved within 30 days of receipt, in accordance with applicable law.

6. Changes to This Policy

AutoFlow Technologies Private Limited may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date at the top. Where required by law or where changes materially affect your rights, we will provide additional notice (such as an email notification).

Your continued use of the AutoLync MSME platform after changes to this Privacy Policy take effect constitutes your acceptance of the revised policy. We encourage you to review this page periodically.

If you have any questions or concerns about this Privacy Policy, please reach out to us:

• Company: AutoFlow Technologies Private Limited
• Email: insights@autoflowtech.com
• Website: autoflowtech.com
• Platform: app.autolyncmsme.in