Legal
Privacy Policy
Last updated: August 20, 2026
We believe in transparency. This policy explains exactly what data we collect, why we collect it, and how you can control it.
1. Who We Are
Atul Automation ("we", "us", "our") operates atulautomation.io, a platform providing free online productivity tools, an AI-powered WhatsApp automation suite, multi-channel SMS / RCS broadcast campaigns, and the DFM Recruitment Command Centre. Our platform operates from India. For privacy-related enquiries, contact: privacy@atulautomation.io
2. Information We Collect
Account & Profile Data
When you register, we collect your name, email address, and a securely hashed password. We never store plaintext passwords.
Usage & Technical Data
We automatically collect IP address, browser type, operating system, pages visited, referrer URL, and session duration to operate and improve the service.
Tool Inputs
Files, images, or text you upload to our free tools (PDF converter, image compressor, QR generator, etc.) are processed in memory to deliver results. They are not stored on disk after your session ends and are never used for training or sold.
WhatsApp & Messaging Data
If you connect a WhatsApp account, we store your encrypted session credentials, paired phone number, contact lists you upload, message templates you create, and broadcast campaign logs. This data is deleted when you disconnect your account.
SMS / RCS Campaign Data
Contact lists and phone numbers you upload for SMS blasting are stored only for the duration of the campaign and deleted within 30 days of campaign completion.
DFM Recruitment Data
Candidate profiles, job openings, and hiring hub data you enter into the DFM system are stored in your account and deleted when you delete your account.
Cookies & Local Storage
We use cookies for authentication sessions and localStorage to persist your dashboard state. Advertising cookies (Google AdSense) are only set after you consent via our cookie banner.
3. How We Use Your Information
- To create and authenticate your account
- To operate, maintain, and improve the platform and tools
- To send transactional emails (email verification, password reset) — no marketing emails without explicit opt-in
- To deliver WhatsApp, SMS, and RCS campaigns you initiate
- To display personalised advertisements via Google AdSense (only with cookie consent)
- To detect and prevent fraud, abuse, and security incidents
- To comply with legal obligations under Indian law (IT Act 2000, DPDP Act 2023)
4. Legal Basis for Processing (GDPR)
For users in the European Economic Area, we process data on the following legal bases: (a) Contract — to perform the service you requested; (b) Legitimate Interest — for security monitoring and fraud prevention; (c) Consent — for advertising cookies and marketing communications; (d) Legal Obligation — to comply with applicable laws.
5. Data Sharing & Third Parties
Google AdSense & Analytics
We use Google AdSense to display advertisements and Google Analytics to analyse usage. Google may use cookies to serve ads based on prior visits. See policies.google.com/privacy for details.
SMS Gateway Providers
When you initiate an SMS broadcast, messages are routed through Fast2SMS or Twilio. Your contact list (phone numbers) is transmitted to these providers solely to deliver messages.
Hosting & Infrastructure
We host on Hostinger servers. Your data is processed on these servers under Hostinger's data processing agreement.
No Sale of Data
We do not sell, rent, or trade your personal data to any third party for marketing purposes.
6. Data Retention
Account data is retained as long as your account is active. You can delete your account at any time from dashboard settings; all associated personal data is purged within 30 days. Tool-processed files are discarded at session end. Broadcast logs are retained for 90 days then auto-deleted. Server access logs are retained for 30 days for security purposes.
7. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access — request a copy of data we hold about you
- Rectification — correct inaccurate data
- Erasure — request deletion of your data ("right to be forgotten")
- Portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interests
- Withdraw Consent — for cookie and marketing consent at any time
To exercise any right, email: privacy@atulautomation.io. We will respond within 30 days.
8. Security
We implement industry-standard security measures: HTTPS/TLS encryption in transit, bcrypt password hashing, HTTP-only secure session cookies, rate limiting on authentication endpoints, and server-side input validation. No system is 100% secure; report vulnerabilities to security@atulautomation.io.
9. Children's Privacy
Our services are not directed to persons under 13 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact privacy@atulautomation.io.
10. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or applicable law. We will notify registered users via email and display a notice on the website at least 7 days before material changes take effect.
11. Contact Us
Atul Automation
Email: privacy@atulautomation.io
Website: atulautomation.io
Questions about your data?
Email privacy@atulautomation.io — we respond within 30 days.