Privacy Policy

3.1 Account Information

When a company registers for FactoryNerve, we collect company name, administrator name, work email address, phone number, billing address, and payment information. This data is necessary to create and maintain your account, process subscriptions, and provide customer support.

3.2 Employee Data

For workforce management features, we process employee names, employee identification numbers, attendance records (check-in/check-out times), shift assignments, department or line assignments, leave records, and supervisory notes. This data is provided to us by the employer (who acts as the data controller for this information) and processed solely on their behalf.

3.3 Operational Data

This includes production metrics (daily production reports, shift-wise output, machine-wise production), inventory records (stock levels, material receipts, dispatches), OCR-scanned documents (handwritten register pages, delivery challans, weighbridge tickets, invoices), quality control data, and dispatch logs. This data constitutes the core operational records managed through the platform.

3.4 Usage Data

We automatically collect login times, feature usage patterns, page interactions, time spent on different sections, search queries within the platform, and IP addresses. This data helps us understand how the platform is used and identify areas for improvement.

3.5 Technical Data

We collect browser type and version, device type and operating system, session tokens for authentication, cookies and similar tracking technologies (as described in our Cookie Policy), and log data including access times and error reports.

4.1 Contract Performance

We process account information, billing details, and core operational data to perform our obligations under the Terms of Service agreement with your organization. Without this data, we cannot deliver the platform services you have subscribed to.

4.2 Legitimate Interests

Usage data and technical data are processed based on our legitimate interest in improving platform performance, ensuring security, preventing fraud, and developing new features. We balance these interests against your privacy rights and ensure that processing is necessary and proportionate.

4.3 Consent

Where required by applicable law, we obtain your consent before placing non-essential cookies, sending marketing communications, or processing data for purposes not covered by contract or legitimate interest. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

4.4 Legal Obligations

We may process personal data to comply with applicable legal obligations, such as retaining financial records for tax purposes or responding to lawful requests from regulatory authorities.

5.1 Service Delivery

We use your data to provide, maintain, and operate the FactoryNerve platform. This includes processing daily production reports, managing attendance records, generating invoices, processing OCR-scanned documents, tracking inventory movements, and enabling approvals workflows. All operational data is processed in real time to support factory operations.

5.2 Analytics and Improvement

Aggregated and anonymized usage data helps us understand platform performance, identify bottlenecks, and develop new features. We analyze feature adoption patterns to improve user experience. Individual operational records are never used for analytics in identifiable form.

5.3 Customer Support

Account and technical data are used to respond to support tickets, troubleshoot issues, provide onboarding assistance, and communicate service updates or changes to terms.

5.4 Security Monitoring

We monitor login patterns, access logs, and API usage to detect unauthorized access attempts, potential breaches, and anomalous activity. This is essential for protecting both our platform and your data.

8.1 Right of Access

You have the right to obtain confirmation of whether we process your personal data and, if so, to request a copy of that data along with information about how it is processed.

8.2 Right to Rectification

You may request correction of inaccurate or incomplete personal data. Account administrators can update most information directly through the platform settings.

8.3 Right to Deletion (“Right to be Forgotten”)

You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent on which processing is based. This is subject to our legal retention obligations.

8.4 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller without hindrance.

8.5 Right to Restrict Processing

You may request restriction of processing where you contest the accuracy of the data, where processing is unlawful, or where you have objected to processing pending verification of our legitimate grounds.

8.6 Right to Object

You have the right to object to processing based on legitimate interests, including profiling. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests or where processing is necessary for legal claims.

10.1 Technical Measures

• Data encryption at rest using AES-256 and in transit using TLS 1.3
• Multi-factor authentication (MFA) for all admin accounts
• Role-based access control (RBAC) that restricts data access by user role
• Automated session timeouts and IP-based access restrictions
• Regular vulnerability scanning and penetration testing
• 24/7 automated security monitoring and anomaly detection

10.2 Organizational Measures

• Strict access controls on a need-to-know basis for all employees
• Regular data protection training for all team members
• Annual third-party security audits (SOC 2 Type II)
• Incident response plan with 24-hour breach notification commitment
• Data processing agreements with all sub-processors