Privacy Policy

1. Who We Are

Smartify, operated by AutoDeus Technologies Private Limited ("we", "us", "our"), is a home automation company based in India that provides smart home products and professional installation services, including the Smartify Home mobile app. We operate the website smartify.in and deliver smart home solutions including intelligent lighting, security systems, climate control, surveillance, energy management, and multimedia integration.

For the purposes of the DPDP Act, 2023, Smartify acts as the Data Fiduciary responsible for processing your personal data.

2. Information We Collect

2.1 Information You Provide Directly

• Contact details: Name, email address, phone number, and postal address when you place an order, request a consultation, or contact us
• Order information: Billing and shipping address, payment details, and purchase history
• Consultation requests: Details about your home, preferences, and requirements shared during free estimate requests or expert callbacks
• Communications: Messages, feedback, and correspondence you send to us

2.2 Information Collected Automatically

• Device and browser data: IP address, browser type and version, operating system, device type, and screen resolution
• Usage data: Pages visited, time spent on pages, referral source, click patterns, and browsing behaviour on our website
• Location data: Approximate geographic location derived from your IP address

2.3 Smart Home Device Data and Smartify Home

Device manufacturers and connected platforms may process device data under their own privacy policies. When you connect devices to Smartify Home, we also process and store the information needed to operate your connected home. This includes device identifiers, names, capabilities, reported states, connection status, and command and activity records. Device states and activity can reveal how your home is used.

2.4 Smartify Home Account and Home Configuration

• Account: Your phone number, verification and authentication records, and, when supplied, your name, backup email address and optional profile photograph
• Home configuration: Homes, rooms, device assignments, favourites, scenes, household membership, invitations and access permissions
• Connected services: Authorisation tokens, device mappings and connection information required for services you choose to link, such as Smart Life (Tuya) and Home Assistant
• Operational records: API and security logs, errors and command outcomes used to operate, secure and support the service

The sample home uses demonstration data and does not connect to your real devices.

2.5 Optional App Permissions

Camera and photo-library access are used when you choose a profile photograph. Microphone and speech-recognition access are requested when you choose voice control. Recognition uses your device's operating-system speech service, which may process audio through the platform provider; we do not guarantee that recognition stays on the device. Recognised commands are used to determine the device action you request. You can revoke these permissions in your device settings and continue using the app's other controls.

3. How We Use Your Information

We process your personal data only for the following lawful purposes:

• Order fulfilment: Processing and delivering your purchases, managing payments, and providing invoices
• Smartify Home: Authenticating your account, delivering sign-in codes, managing home membership and permissions, linking services, carrying out device commands, and showing device status and activity
• Service delivery: Scheduling consultations, site visits, installations, and after-sales support
• Customer communication: Responding to your enquiries, sending order updates, delivery notifications, and service-related messages
• Product recommendations: Suggesting relevant products based on your interests and past purchases, only with your consent
• Website improvement: Analysing usage patterns to improve website functionality, user experience, and content
• Legal compliance: Meeting obligations under applicable tax, consumer protection, and data protection laws

We will not use your personal data for any purpose beyond what is stated here without obtaining your explicit consent.

4. Legal Basis for Processing

Under the DPDP Act, 2023, we process your data based on:

• Consent: You provide informed consent when submitting forms, placing orders, or opting into communications
• Legitimate use: Processing necessary for fulfilling orders, providing services you have requested, and complying with legal obligations

You may withdraw your consent at any time by contacting us at info@smartify.in. Withdrawal of consent will not affect the lawfulness of processing carried out prior to withdrawal.

5. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience:

• Essential cookies: Required for the website to function properly (e.g., shopping cart, session management)
• Analytics cookies: Help us understand how visitors interact with our website so we can improve it (e.g., Google Analytics)
• Marketing cookies: Used to deliver relevant advertisements and measure campaign effectiveness, only with your explicit consent

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.

6. Sharing and Disclosure of Information

We do not sell your personal data to third parties. We may share your information only in the following circumstances:

• Service providers: Trusted partners who assist with shipping, payment processing, email delivery, and website hosting, under strict confidentiality agreements
• App infrastructure and messaging: AWS supplies hosting, storage, authentication and email delivery. Meta/WhatsApp processes the phone number and messages needed for WhatsApp sign-in codes and invitations. An email address is used when you choose email authentication
• Linked platforms: Device and command information is exchanged with the services you choose to connect, including Smart Life/Tuya and Home Assistant. If you authorise a supported assistant or automation integration, such as Amazon Alexa, Google Home or IFTTT, its provider receives the device information, states and actions needed for that integration. You can revoke the integration’s access. People you invite to a home may access its data and controls according to their assigned permissions
• Payment gateways: Secure, PCI-DSS compliant payment processors to handle transactions
• Delivery partners: Shipping companies require your name and address to fulfil deliveries
• Installation partners: When you ask us for an estimate, a site visit or an installation, we may share your lead details with an authorised Smartify installation partner who serves your area, so they can contact you, survey your site, and quote for or carry out the work. This can include your name, phone number, city and PIN code, property details, project requirements, and your conversation with us on WhatsApp about that request. Partners see only the requests assigned to them and may use these details only to serve that request.
• Legal requirements: When required by law, court order, or government authority
• Business transfers: In the event of a merger, acquisition, or sale of assets, with prior notice to affected users

All third-party service providers are contractually bound to protect your data and use it solely for the purposes we specify.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data:

• All data transmitted between your browser and our website is encrypted using TLS/SSL
• Payment information is processed through PCI-DSS compliant gateways and is never stored on our servers
• Access to personal data is restricted to authorised personnel on a need-to-know basis
• We conduct periodic reviews of our data collection, storage, and processing practices

While we take every reasonable precaution, no method of electronic transmission or storage is 100% secure. If you become aware of any security breach, please contact us immediately.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Order and transaction data: Retained for 8 years as required by Indian tax and accounting regulations
• Website customer account data: Retained as long as your account is active, plus 3 years after last activity. Smartify Home account and home data follow the app-specific controls below
• Marketing consent records: Retained for the duration of consent and 1 year after withdrawal
• Website analytics data: Retained in anonymised form for up to 26 months

Upon expiry of the retention period, personal data is securely deleted or anonymised.

8.1 Smartify Home Retention and Deletion

We retain account details, home configuration and linked-device records while they are needed to provide your connected-home service. Device activity history is subject to the history period available to your home. Operational and security logs may remain for up to 90 days; deletion from backups and expiring records may take additional time. Records needed to meet legal obligations or resolve disputes may be retained for those purposes.

You can request account deletion in Profile → Account → Delete account. A recent sign-in is required. If you own a home shared with other people, first transfer ownership or delete that home. Account deletion removes your account and profile, revokes sessions, removes your membership of other homes, and schedules deletion of homes you solely own and their associated records. Connected services retain their own records under their policies.

You can also contact info@smartify.in to request access, correction or deletion of your Smartify Home information.

9. Your Rights

Under the DPDP Act, 2023, you have the following rights as a Data Principal:

• Right to access: Request a summary of your personal data being processed and the processing activities carried out
• Right to correction: Request correction of inaccurate or incomplete personal data
• Right to erasure: Request deletion of your personal data, subject to legal retention requirements
• Right to withdraw consent: Withdraw previously given consent for data processing at any time
• Right to grievance redressal: Lodge a complaint if you are dissatisfied with how we handle your data
• Right to nominate: Nominate another individual to exercise your rights in the event of your death or incapacity

To exercise any of these rights, please email us at info@smartify.in. We will respond to your request within 30 days.

10. Children's Privacy

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child, we will take steps to delete it promptly. If you believe a child has provided us with personal information, please contact us at info@smartify.in.

11. Third-Party Links

Our website may contain links to third-party websites, including smart home device manufacturer portals, app stores, and partner sites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

12. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

13. Grievance Officer

In accordance with the DPDP Act, 2023 and the Information Technology Act, 2000, the details of our Grievance Officer are:

If your grievance is not resolved to your satisfaction, you may file a complaint with the Data Protection Board of India as established under the DPDP Act, 2023.