Privacy Policy

At Endustry Plant LLC ("Endustry Plant", "we", "us", or "our"), privacy is treated as a core system constraint, not an afterthought. We are committed to protecting the integrity, confidentiality, and security of all personal data and intellectual material collected through our marketing site (endustryplant.com) and client onboarding protocols.

This policy outlines what data we collect, how it is processed and stored within our database clusters, and your legal rights under relevant data privacy frameworks, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the Information Technology Act, 2000 of India.

We collect data through two primary pathways: direct submissions (e.g. project briefs) and automated system telemetry.

1. Direct Client Submissions: When you start a project, submit a brief, or interact with our system engineers, we collect:

• Identification details (Full Name, Company / Product Name).
• Communication channels (Email address, phone numbers).
• Project metadata (Selected service types, system complexity, timelines, and technical requirements).

2. System Telemetry & Logs: When you navigate our digital interface, our server architecture automatically logs:

• Network parameters (IP address, approximate geolocation, ISP details).
• Client configuration (Browser type, operating system version, viewport parameters).
• Interactivity telemetry (Timestamped page interactions, referral parameters, navigation pathing).

Endustry Plant processes your personal data strictly to execute operational tasks. We never sell, lease, or distribute your data to advertising conglomerates.

Primary Use Cases:

• Systems Engineering: Evaluating project feasibility, compiling system architectures, and executing the manufacture of software.
• Client Communications: Transmitting project updates, scheduling technical syncs, issuing billing invoices, and processing payments.
• Security Auditing: Inspecting server access logs, detecting scraping patterns, and preventing malicious form injections.
• Interface Optimization: Reviewing structural site telemetry to improve page speed, layouts, and accessibility.

We share data only with verified, compliant cloud infrastructure processors required to maintain our operations:

• Database Infrastructure: Supabase Inc. (PostgreSQL database hosting, encryption-at-rest, and user management layers).
• Hosting & Edge Network: Vercel Inc. and Amazon Web Services (AWS) (Edge network hosting, serverless computing, caching layers).
• Integrations & Tools: OpenAI LLC (AI route testing and pipeline configurations), Stripe Inc. (Secure payment processing gates).

All processors are legally bound via Data Processing Agreements (DPAs) to protect client telemetry with security measures matching or exceeding our own guidelines.

We secure all system interfaces and datastores using modern cryptography and architectural practices:

• Transit Encryption: All browser requests and API transmissions are encrypted using Transport Layer Security (TLS 1.3).
• Storage Encryption: Our PostgreSQL instances on Supabase employ AES-256 database-level encryption for all tables containing client records.
• Row-Level Security (RLS): We use strict Postgres RLS rules to ensure that anonymous users can submit project briefs but are completely blocked from reading or querying existing database entries.

We store your personal data only as long as necessary to complete the operational objectives stated in Section 3.0:

• Project Inquiries: Submitted briefs and related contact details are archived in our database for one (1) year.
• Active Client Records: Client contact, invoicing, and architectural data are retained for the duration of the engagement, plus seven (7) years to comply with Indian corporate tax and fiscal auditing guidelines.

Regardless of your physical location, we recognize your right to assert complete control over your personal data. You have the right to:

• Access: Request a structural JSON export of all personal information we hold about you.
• Rectification: Request correction of inaccurate phone numbers, names, or project details.
• Deletion ("Right to be Forgotten"): Request that we purge all telemetry logs and contact database records.
• Portability: Request that we transmit your structured data to another service provider.

To invoke these rights, transmit a cryptographically signed request or standard email directly to our systems administrator at the contact address listed in Section 9.0.

As we add automation systems, deploy new features, or adapt to shifting legal requirements, this Privacy Policy will be revised. Updates will be logged immediately on this page with an incremented version number and timestamp. Continued usage of our website and services following changes constitutes explicit acceptance of the updated policy.

For all privacy requests, data deletions, security audits, or inquiries, please contact our Compliance Officer at our Delhi lab: