Last updated: 24 September 2026
Privacy Policy
This Privacy Policy explains how Automette, operated by Learn Kraft Info Solutions LLP (the data controller; “we”, “us”, “our”), collects, uses, and shares information when you visit our website or use our document and image generation service (the “Service”).
If you have questions, email us at hello@automette.com, or write to us at:
Learn Kraft Info Solutions LLP
B-1502, Glen Gate, House of Hiranandani,
Kodigehalli Main Road, Bangalore - 560092, India
1. Information we collect
Account information. When you sign up we collect your name, email address, and password (stored as a salted hash). If you sign up using a third-party identity provider, we receive the profile fields that provider shares with us.
Workspace content. This includes templates you design, data files you upload (CSVs, spreadsheet contents, JSON payloads), assets such as images, fonts and logos, and the documents and images you generate. We treat workspace content as confidential and process it only to operate the Service for you.
Usage data. Information about how you interact with the Service: features used, render volume, API call counts, timestamps, error reports, and similar diagnostics.
Technical data.Your IP address, browser type and version, device type, operating system, referring URL, and cookies (see “Cookies” below).
Billing data. If you purchase credits or a paid plan, our payment processor collects and processes your payment details. We receive the outcome of the transaction (success or failure, last four digits of the card, billing country) but do not store full card numbers ourselves.
Communication data. Any information you send us via email or support requests.
Connected accounts.You can connect third-party accounts such as Google Sheets or Airtable so that Automette can generate documents from rows and records you keep there. When you connect one, we store the access credentials that service issues to us (encrypted at rest), the email address of the connected account so you can tell connections apart, and the names of the spreadsheets, tables and columns you point an automation at. We read only the rows an automation is set up to watch, and we write back only what you ask for: a link to the generated file, or the file itself. We keep no copy of your spreadsheets or bases beyond the row data needed to render a document, which is stored with that document's run history. Disconnecting an account deletes its credentials from our systems; you can also revoke access from your Google or Airtable account settings at any time. Section 2 describes how we handle data received from Google in detail.
2. Google user data
This section describes how Automette handles information it receives from Google APIs when you connect a Google account (“Google user data”).
Data we access
- Google Sheets content. The names of the tabs and column headers in a spreadsheet you connect to an automation, and the values in the rows that automation processes. Automette accesses only the spreadsheets you identify to it.
- Account email address. The email address of the connected Google account, used to label the connection in your workspace.
How we use it
Google user data is used solely to provide the features you set up: to generate a document from a spreadsheet row, and to write the generated document's link back to that row. We do not use it for advertising or for any purpose unrelated to the Service.
Sharing, transfer and disclosure
We do not sell Google user data, and we do not share, transfer or disclose it to third parties, except:
- Service providers. Solely to operate the Service on our behalf, under written agreements: Neon (database hosting), Amazon Web Services (storage of generated documents), Vercel (application hosting), Trigger.dev (background processing) and Modal (document rendering). See Subprocessors below.
- At your direction. When you configure an automation to send a document or its data to a destination, such as your spreadsheet, a webhook endpoint or Zapier, we transfer it to that destination.
- Legal requirements. Where required by applicable law or valid legal process.
Google user data is not shared with AI providers, and it is not used to develop, improve or train generalized artificial intelligence or machine-learning models. Automette staff do not read Google user data except with your permission, for example to resolve a support request, where necessary for security purposes, or to comply with applicable law.
Storage, retention and deletion
Access credentials are encrypted at rest. The row values used to generate a document are stored with that document's run history and retained as described in Data retention below. Disconnecting a Google account deletes its credentials and revokes Automette's access with Google. You can also revoke access at any time from your Google Account settings.
Limited Use
Automette's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
3. How we use your information
- Provide, maintain, and improve the Service
- Authenticate you and secure your account
- Render documents and images on your behalf
- Process payments and prevent fraud
- Send service updates, security notices, and (with your consent) product news
- Comply with legal and regulatory obligations
- Aggregate non-identifying usage data to understand and improve Service performance
We do not sell your personal information. We do not use your workspace content to train AI models.
4. Subprocessors
We rely on a small set of trusted third-party services to operate Automette. These subprocessors only process data on our instructions and under written data-processing agreements.
| Subprocessor | Purpose | Region |
|---|---|---|
| Amazon Web Services | File storage (S3), content delivery, transactional email (SES) | EU / US |
| Neon | Database hosting | US |
| Vercel | Application hosting | Global |
| Anthropic | AI features (template chat, inline edits) | US |
| Paddle | Payment processing (merchant of record) | UK / US / EU |
| Trigger.dev | Background job execution (bulk renders, automations) | US |
| Modal | Document rendering | US |
Where data is transferred outside the European Economic Area, we rely on Standard Contractual Clauses or another approved transfer mechanism.
5. Cookies and tracking
We use cookies and similar technologies to keep you signed in, remember your preferences, and measure aggregate Service performance. You can disable cookies in your browser, but some parts of the Service may not function correctly without them.
6. Data retention
We retain account data for as long as your account is active. After account deletion we remove personal data within 30 days, except where we are required to retain it for legal, accounting, or security reasons.
You can delete templates, data sources, and generated outputs from within the Service at any time. Deleted content is purged from backups within 30 days.
7. Your rights
If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar laws, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your data
- Restrict or object to certain types of processing
- Receive a copy of your data in a portable format
- Withdraw consent where processing is based on consent
- Lodge a complaint with your local data-protection authority
If you are a California resident, you have additional rights under the CCPA, including the right to know what personal information we collect and the right to delete it.
To exercise any of these rights, email hello@automette.com. We respond within 30 days.
8. International data transfers
We are based in Bengaluru, Karnataka, India. Your data may be transferred to, stored in, and processed in countries other than your own. Transfers outside the EEA or UK are protected by Standard Contractual Clauses or other approved safeguards.
9. Security
We use industry-standard measures to protect your data, including encryption in transit (HTTPS/TLS), encryption at rest, access controls, and audit logging. No system is perfectly secure; you are responsible for keeping your password safe and for notifying us promptly if you suspect unauthorized access to your account.
10. Children
The Service is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time. When changes are material we will notify you by email or by a prominent notice in the Service before the change takes effect. The “Last updated” date at the top of this page reflects the most recent version.
12. Contact
For questions about this Privacy Policy or our data practices, email hello@automette.com.