Privacy Policy

This Privacy Policy explains how CostNet ("we", "us") handles personal data when you use our web application available at costnet.in (the "Service"). By using the Service, you acknowledge the practices described here.

1. Data we collect

• Account information: name, email address, and authentication identifiers from your sign-in provider (Google).
• Files you upload: STEP files and other CAD models you submit for cost analysis.
• Service usage: project, part, cost-estimate and quote records you create.
• Technical logs: IP address, browser user-agent, timestamps of requests, and error traces.

2. Purpose

We process this data solely to operate the Service: authenticate you, run cost analyses on the files you upload, persist your work between sessions, and diagnose technical issues. We do not sell personal data.

3. Where data is stored

Customer data (projects, parts, costs, quotes, and uploaded CAD files) is stored on Microsoft Azure in the South India region (Chennai). Authentication metadata (email, sign-in events) is managed by our authentication provider Clerk, Inc., which stores it on AWS infrastructure in the United States.

4. Sharing with third parties

We share data only with the service providers that operate parts of the Service for us:

• Microsoft Azure — hosting, database, blob storage.
• Clerk, Inc. — authentication.
• Google LLC — sign-in via Google OAuth (the data Google receives is governed by Google's own privacy policy).

We do not share data with advertising networks. We may disclose data when legally compelled (court order, valid government request) or to investigate suspected abuse of the Service.

5. Retention

We keep account and project data for as long as your account remains active. On account deletion, we remove the associated records from operational systems within thirty (30) days. Backups containing the data may be retained for up to ninety (90) days before being overwritten.

6. Your rights

Under India's Digital Personal Data Protection Act 2023 (and analogous laws where applicable), you have the right to access, correct, or request deletion of personal data we hold about you. To exercise these rights, contact us at the address in section 9.

7. Security

We use industry-standard transport encryption (TLS) and store secrets in managed key-vault services. No method of electronic storage is one hundred percent secure; we cannot guarantee absolute security.

8. Changes to this policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date above and, where required by law, notify you of material changes through the Service or by email.

9. Contact

Questions about this policy or about data we hold about you can be sent to privacy@costnet.in.