Privacy Policy

Last updated 1 November 2026

This policy explains how Authentic Technologies handles personal data in ShipCheck AI. It is written with India's Digital Personal Data Protection Act, 2023 and the EU and UK GDPR in mind.

What we collect

  • Account: your name, email, a salted hash of your password, your time zone and your workspace membership.
  • Billing: your billing name, address, state and optional GSTIN. Card and bank details go straight to Razorpay or Paddle and never reach us.
  • Audit data: URLs, page text, screenshots and technical findings from sites you audit, plus any spec you upload. Screenshots can show whatever is on those public pages.
  • Operations: server logs, kept without email addresses or tokens.

Why we use it, and our legal basis

We use this data to provide the service you asked for (contract, and consent under the DPDP Act), to meet tax and accounting duties (legal obligation), and to keep the service secure (legitimate interests).

Where it is stored

Application data is stored in India, on Microsoft Azure's Central India region.

Sub-processors

  • Anthropic (AI analysis). Page text and specs are sent with emails, phone numbers and PAN, Aadhaar and card-like patterns removed first. This processing may take place outside India.
  • Razorpay (payments for India).
  • Paddle (merchant of record for customers outside India).
  • Our email provider (account and invitation emails).
  • Microsoft Azure (hosting).

How long we keep it

  • Screenshots: 30 days.
  • Report data and PDFs: 90 days.
  • Invoices: 8 years, as tax law requires.
  • Deleted workspaces: purged within 30 days, apart from invoices.

Cookies

We use one essential session cookie, which is needed to keep you signed in. We use no tracking or advertising cookies, so we show no cookie banner.

Your rights

You may ask to access, correct, erase or export your data, withdraw consent, or nominate someone to act for you. You may complain to the Data Protection Board of India or your local authority. Write to support@authentictechnologies.in.

Security

We use encryption in transit, argon2id password hashing, access controls scoped to each workspace, and network isolation of the crawler from our own systems.

Changes

If we change this policy materially, we will tell you by email or in the app.