Effective date: 25 September 2026
This policy covers anyone who creates a Factorybook account, is invited into a company workspace by an admin, or whose information is entered into a workspace by someone else (for example, a customer's name and phone number entered against a sales order). If you're an employee added to a workspace by your company's admin, your employer controls that workspace's data — see Section 7.
| Category | Examples | Source |
|---|---|---|
| Account data | Email address, hashed password, or Google account name/email/profile photo if you sign in with Google | You, or Google (if you use Google Sign-In) |
| Workspace/employee data | Full name, employee ID, role, team, active/inactive status | You or your company admin |
| Business records you enter | Production logs (operator, machine, shift, output, material use), orders (customer name, phone, address, product, price), incoming-stock invoices (supplier name, GSTIN, invoice line items), product and material catalogs | You or your teammates |
| Contacts you choose to import | Name, phone number, email address and postal address of the contacts you select when importing customers | Your device's address book, or a contacts file you upload — only with your permission and only the contacts you select (see Section 4) |
| Uploaded files | Product photos, invoice and document images/PDFs | You |
| Technical data | Session tokens (stored in your browser to keep you signed in), a push-notification token if you allow notifications, basic request logs from our hosting provider | Automatically |
We do not knowingly collect information from anyone under the age of 18. Factorybook is a business tool, not intended for personal or consumer use.
We do not use your business data to train AI models, and we do not sell or rent personal data to third parties.
Factorybook lets you add your existing customers in bulk from the contacts already on your phone. This is optional and only happens when you start it from Customers → Add customer → Import contacts.
READ_CONTACTS) the first time you tap "Choose from phone contacts". If you allow it, your address book is read on your device and shown to you as a list. You can refuse or later withdraw the permission in your phone's settings; the rest of Factorybook works without it.Only the contacts you select are uploaded. Your address book as a whole is never uploaded, stored, or kept by Factorybook, and nothing is read in the background. For each contact you select, we store their name, phone number, and — if present — email address and postal address as a customer record in your company's workspace, where it is used only to record and manage your sales to that customer. Imported contacts are not used for marketing, not used to contact those people, not sold, and not shared with anyone outside the providers listed in Section 6. You can edit or delete an imported customer at any time.
You are responsible for having a legitimate business reason to add a person as a customer — for example, that they have bought from you.
If you sign in with Google, we receive your name, email address, and profile photo from Google to create or match your Factorybook account. Factorybook's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use this information for advertising.
We use a small number of infrastructure providers to run Factorybook. We don't sell data to anyone, and we don't share it for their own marketing purposes.
| Provider | Purpose |
|---|---|
| Supabase | Database and authentication — this is where your account and business data, including imported customers, actually lives |
| Cloudflare | Hosting for the app, storage for uploaded files, and the AI model (Cloudflare Workers AI) used to extract data from documents and text you submit |
| Optional sign-in (OAuth) if you choose "Continue with Google"; delivery of push notifications (Firebase Cloud Messaging) if you allow them |
We may also disclose information if required by law, or to protect the rights, property, or safety of Factorybook, our customers, or others.
Company admins can invite employees, assign roles, and enter customer details on behalf of their business. If your employer created the workspace you're part of, they control that data as between you and them — requests to access, correct, or delete your employee record should generally go to your company admin first. We'll assist the workspace admin with such requests.
We keep account and business data for as long as your company's workspace is active. If a workspace is closed, we delete or anonymize the associated data within a reasonable period, except where we're required to retain records for legal, tax, or accounting purposes.
Depending on your location and applicable law (including India's Digital Personal Data Protection Act, 2023), you may have the right to access, correct, or request deletion of your personal data, or to withdraw consent where processing is based on consent. To exercise these rights, contact us using the details below — if your data was entered by a company workspace you belong to, we may need to loop in that workspace's admin.
To delete your account, see Delete your account — you can request it from inside the app or by email.
Data is encrypted in transit (HTTPS/TLS) and at rest by our infrastructure providers. Access to a company's workspace data is restricted to authenticated members of that workspace through row-level security in our database. No system is perfectly secure, and we can't guarantee absolute security.
We may update this policy as the product changes. We'll update the effective date above when we do. Material changes will be communicated to workspace admins where practical.
Questions about this policy or your data: privacy@factorybook.in