Privacy Policy

Ovrtrack Technologies Pvt. Ltd., Pune, Maharashtra, India, is responsible for your personal data (the “data fiduciary” under the DPDP Act, or “controller” under the GDPR). Contact us about anything in this policy at help@ovrtrack.com.

• Account details: first and last name, work email, and optionally your company and phone number. Your password is stored only as a secure hash; we never see it.
• Quote requests: project name, quantity, material, operations, surface treatments, remarks, and the PDF drawings you upload.
• Order history: the status of each order and updates we record while producing it.
• Messages: emails you send us and our replies.
• Technical data: the minimum our hosting needs to run and secure the site, such as IP address and request logs, kept for a short period.

We do not collect payment card details on this site, and we do not knowingly collect data from anyone under 18.

• To create and secure your account and let you sign in.
• To prepare quotes, manufacture and deliver your parts, and keep you updated on each order.
• To send service emails: account confirmation, password resets, quote receipts and order updates.
• To answer your questions and provide support.
• To prevent fraud and abuse, and to meet our legal, tax and accounting obligations.

We process this data because you asked us to (to provide the service you requested, or with your consent), and where the law requires it. Under the GDPR, the legal bases are performance of a contract, our legitimate interest in running and securing the service, and legal obligation. We do not sell your data or use it for advertising.

We treat engineering drawings as confidential. They are stored in private storage that only you and authorised Ovrtrack staff can access, and we never publish them or put them in emails. We use them only to quote, plan and manufacture your parts. Where a manufacturing partner needs a drawing to make your part, we share only what is needed, under a confidentiality obligation.

We use a small number of service providers who process data on our behalf and only on our instructions:

• Supabase: database, sign-in and file storage, hosted in the Mumbai, India region.
• Our website host: serves the site and its server functions.
• Our email provider: delivers account and order emails.
• Manufacturing partners: as described under “Your drawings”.

We may also disclose data when the law requires it. Some providers may process data outside India; where they do, we rely on their contractual safeguards, and for GDPR transfers on the appropriate legal mechanisms such as standard contractual clauses. The supplier application form is run by Typeform under its own privacy policy.

We keep this minimal:

• Sign-in cookies keep you signed in. They are strictly necessary and set only when you sign in.
• Theme preference: if you choose light or dark mode, your browser remembers it in local storage. It never leaves your device.

We do not use analytics, advertising or third-party tracking cookies.

We keep your account and order records for as long as your account is open, and afterwards for as long as Indian tax, accounting and company law requires (generally up to eight years). Drawings are kept with the order they belong to. When data is no longer needed, we delete it or make it anonymous.

Data is encrypted in transit and at rest. Access is limited by role, and database rules ensure each customer can only see their own orders and drawings. No system is perfectly secure; if a breach affects you, we will notify you and the authorities as the law requires.

Depending on where you live, you can:

• Get a summary of the personal data we hold about you and how we use it.
• Correct or complete inaccurate data. You can see your details on your Account page.
• Ask us to delete your account and data, unless we must keep it by law.
• Withdraw consent you have given, without affecting processing done before.
• Nominate someone to exercise your rights if you die or become incapacitated (DPDP Act).
• Under the GDPR: object to or restrict processing, and receive your data in a portable format.

Email help@ovrtrack.com from the address on your account. We reply within 30 days.

If you have a concern about how we handle your data, contact our Grievance Officer at help@ovrtrack.com. If you are not satisfied with our response, you can complain to the Data Protection Board of India or, if you are in the EU or UK, to your local data protection authority.

We will update this page when our practices change and revise the date at the top. If a change is significant, we will tell account holders by email before it takes effect. See also our Terms of Use.