Last updated: 24 September 2026

Privacy Policy

This Privacy Policy explains how Automette, operated by Learn Kraft Info Solutions LLP (the data controller; “we”, “us”, “our”), collects, uses, and shares information when you visit our website or use our document and image generation service (the “Service”).

If you have questions, email us at hello@automette.com, or write to us at:

Learn Kraft Info Solutions LLP
B-1502, Glen Gate, House of Hiranandani,
Kodigehalli Main Road, Bangalore - 560092, India

1. Information we collect

Account information. When you sign up we collect your name, email address, and password (stored as a salted hash). If you sign up using a third-party identity provider, we receive the profile fields that provider shares with us.

Workspace content. This includes templates you design, data files you upload (CSVs, spreadsheet contents, JSON payloads), assets such as images, fonts and logos, and the documents and images you generate. We treat workspace content as confidential and process it only to operate the Service for you.

Usage data. Information about how you interact with the Service: features used, render volume, API call counts, timestamps, error reports, and similar diagnostics.

Technical data.Your IP address, browser type and version, device type, operating system, referring URL, and cookies (see “Cookies” below).

Billing data. If you purchase credits or a paid plan, our payment processor collects and processes your payment details. We receive the outcome of the transaction (success or failure, last four digits of the card, billing country) but do not store full card numbers ourselves.

Communication data. Any information you send us via email or support requests.

Connected accounts.You can connect third-party accounts such as Google Sheets or Airtable so that Automette can generate documents from rows and records you keep there. When you connect one, we store the access credentials that service issues to us (encrypted at rest), the email address of the connected account so you can tell connections apart, and the names of the spreadsheets, tables and columns you point an automation at. We read only the rows an automation is set up to watch, and we write back only what you ask for: a link to the generated file, or the file itself. We keep no copy of your spreadsheets or bases beyond the row data needed to render a document, which is stored with that document's run history. Disconnecting an account deletes its credentials from our systems; you can also revoke access from your Google or Airtable account settings at any time. Section 2 describes how we handle data received from Google in detail.

2. Google user data

This section describes how Automette handles information it receives from Google APIs when you connect a Google account (“Google user data”).

Data we access

  • Google Sheets content. The names of the tabs and column headers in a spreadsheet you connect to an automation, and the values in the rows that automation processes. Automette accesses only the spreadsheets you identify to it.
  • Account email address. The email address of the connected Google account, used to label the connection in your workspace.

How we use it

Google user data is used solely to provide the features you set up: to generate a document from a spreadsheet row, and to write the generated document's link back to that row. We do not use it for advertising or for any purpose unrelated to the Service.

Sharing, transfer and disclosure

We do not sell Google user data, and we do not share, transfer or disclose it to third parties, except:

  • Service providers. Solely to operate the Service on our behalf, under written agreements: Neon (database hosting), Amazon Web Services (storage of generated documents), Vercel (application hosting), Trigger.dev (background processing) and Modal (document rendering). See Subprocessors below.
  • At your direction. When you configure an automation to send a document or its data to a destination, such as your spreadsheet, a webhook endpoint or Zapier, we transfer it to that destination.
  • Legal requirements. Where required by applicable law or valid legal process.

Google user data is not shared with AI providers, and it is not used to develop, improve or train generalized artificial intelligence or machine-learning models. Automette staff do not read Google user data except with your permission, for example to resolve a support request, where necessary for security purposes, or to comply with applicable law.

Storage, retention and deletion

Access credentials are encrypted at rest. The row values used to generate a document are stored with that document's run history and retained as described in Data retention below. Disconnecting a Google account deletes its credentials and revokes Automette's access with Google. You can also revoke access at any time from your Google Account settings.

Limited Use

Automette's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3. How we use your information

  • Provide, maintain, and improve the Service
  • Authenticate you and secure your account
  • Render documents and images on your behalf
  • Process payments and prevent fraud
  • Send service updates, security notices, and (with your consent) product news
  • Comply with legal and regulatory obligations
  • Aggregate non-identifying usage data to understand and improve Service performance

We do not sell your personal information. We do not use your workspace content to train AI models.

4. Subprocessors

We rely on a small set of trusted third-party services to operate Automette. These subprocessors only process data on our instructions and under written data-processing agreements.

SubprocessorPurposeRegion
Amazon Web ServicesFile storage (S3), content delivery, transactional email (SES)EU / US
NeonDatabase hostingUS
VercelApplication hostingGlobal
AnthropicAI features (template chat, inline edits)US
PaddlePayment processing (merchant of record)UK / US / EU
Trigger.devBackground job execution (bulk renders, automations)US
ModalDocument renderingUS

Where data is transferred outside the European Economic Area, we rely on Standard Contractual Clauses or another approved transfer mechanism.

5. Cookies and tracking

We use cookies and similar technologies to keep you signed in, remember your preferences, and measure aggregate Service performance. You can disable cookies in your browser, but some parts of the Service may not function correctly without them.

6. Data retention

We retain account data for as long as your account is active. After account deletion we remove personal data within 30 days, except where we are required to retain it for legal, accounting, or security reasons.

You can delete templates, data sources, and generated outputs from within the Service at any time. Deleted content is purged from backups within 30 days.

7. Your rights

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar laws, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Request deletion of your data
  • Restrict or object to certain types of processing
  • Receive a copy of your data in a portable format
  • Withdraw consent where processing is based on consent
  • Lodge a complaint with your local data-protection authority

If you are a California resident, you have additional rights under the CCPA, including the right to know what personal information we collect and the right to delete it.

To exercise any of these rights, email hello@automette.com. We respond within 30 days.

8. International data transfers

We are based in Bengaluru, Karnataka, India. Your data may be transferred to, stored in, and processed in countries other than your own. Transfers outside the EEA or UK are protected by Standard Contractual Clauses or other approved safeguards.

9. Security

We use industry-standard measures to protect your data, including encryption in transit (HTTPS/TLS), encryption at rest, access controls, and audit logging. No system is perfectly secure; you are responsible for keeping your password safe and for notifying us promptly if you suspect unauthorized access to your account.

10. Children

The Service is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When changes are material we will notify you by email or by a prominent notice in the Service before the change takes effect. The “Last updated” date at the top of this page reflects the most recent version.

12. Contact

For questions about this Privacy Policy or our data practices, email hello@automette.com.