Privacy notice
Last updated 9 November 2026
Autopren Systems (OPC) Private Limited (“we”) runs Anupalan at https://anupalan.autoprens.com. This notice explains what personal data we collect, why, and your rights under the Digital Personal Data Protection Act, 2023. Questions: privacy@anupalan.autoprens.com.
What we collect and why
| When | What | Why |
|---|---|---|
| You ask for a free check | Website address, email, mobile number, the first part of your IP address, and the time you agreed | To check the site, send you the report and remind you about fixing it (at most three reminders). With your consent. |
| You buy a plan | Name, business name, GSTIN and state (if you give them), email and mobile from the payment, payment reference | To deliver your order and issue a GST invoice, as the law requires. |
| You fill in your details form | Your business details and the names and contact details of the people you list (for example your grievance officer) | To prepare your documents, which you will publish. |
| Done for you | The approval your website gives us (stored encrypted), the account name that approved it, and your website's server address | To set up your website. Deleted when we finish. |
| Yearly care | Subscription reference and status from Razorpay | To run your plan and its renewals. |
Our website itself uses no analytics or advertising trackers, and sets no cookies on its public pages.
Visitors to our clients' websites
When a client uses our consent banner, we store each visitor's choice for that client: a random id, the choices, the notice version, the time and a shortened IP address. No name or email. We do this on the client's behalf, as their processor.
Who else handles your data
- Razorpay (payments; we never see card or bank details)
- Amazon Web Services (sending our emails)
- Cloudflare (the bot check on our form)
- Hostinger (our server)
- Google (reviewing the public text of a website's privacy notice during a check; we send the notice, not your details)
Some of these may process data outside India. We don't sell personal data.
How long we keep it
- Free check details and reports: 90 days after we last hear from you, unless you buy a plan.
- Orders and invoices: as long as tax law requires (currently about 8 years).
- Done-for-you access: deleted as soon as the setup is finished.
- Consent records on clients' websites: as the client decides, and for at most as long as their plan with us lasts.
Your rights
You can ask to see the personal data we hold about you, correct or complete it, have it deleted, nominate someone to act for you, and withdraw your consent at any time (as easily as you gave it: the link in any of our emails, or an email to us). Withdrawing consent doesn't affect what we did before.
Grievances
Write to our Grievance Officer at privacy@anupalan.autoprens.com. We acknowledge within 2 working days and reply within 30 days. If you're not satisfied, you can complain to the Data Protection Board of India.
Security
Encrypted connections, encrypted storage of access we are given, limited staff access, and logs of who did what. If a breach affects your data, we will tell you and the Data Protection Board as the law requires.
Children
Anupalan is a service for businesses and is not meant for anyone under 18.
Changes
We'll update this notice when what we do changes, and show the date at the top.