Privacy Policy

EcoTrace India Private Limited — Last updated: August 2026

1. What We Collect

Account details (email, factory name, location, state), daily operational data you enter (pH, water discharge, electricity use, sludge quantity, fuel use), device GPS coordinates captured at the moment you save a daily entry (used to timestamp/geotag records for audit purposes), and uploaded documents (utility bills, manifests) processed via OCR to assist classification. If you register as a buyer, we also collect your company name, industry, and contact details.

2. How We Use It

To generate your statutory-format reports and Green Passport summary, to compute completeness and consistency metrics, to maintain the tamper-evident record of your daily entries, and — only with your explicit approval per buyer — to compute a curated summary shared with that buyer. We do not sell your data to any third party.

3. Who Can See What

Your raw daily logs are visible only to your own account. A buyer you have approved sees a computed summary only — never your raw entries. EcoTrace India's own team may access data to provide support or investigate reported issues.

4. Location Data

GPS coordinates are captured only when you actively save a daily log entry (with your browser's location permission), to geotag that record. We do not track your location in the background or between entries.

5. Data Storage & Security

Data is stored with Supabase (PostgreSQL) using row-level security so that each factory can only read its own records, and OCR processing uses Google Cloud Vision via a server-side key that never reaches your browser. EcoTrace India does not currently hold ISO 27001 or other third-party security certification.

6. Your Choices

You can revoke a buyer's access at any time from your dashboard. To request deletion of your account and associated data, contact us using the details below.

7. Contact

EcoTrace India Private Limited | Contact: 7378780745 | dhiraj@ectotraceindia.com

Note: This is a working draft prepared for the pilot phase. Please have it reviewed by a qualified legal counsel (including for DPDP Act 2023 compliance) before broader public launch or enterprise contracting.