Privacy Policy

Who We Are & Our Role

Makoro is operated by Origon Associates Private Limited (CIN: U72900DL2021PTC387298; registered office: 410, Blk-12 S/F Sunder Vihar, Paschim Vihar, West Delhi, Delhi 110087, India). We process personal data in two different roles:

• For your account, billing, support and our own marketing, we decide how your data is used. We are the data fiduciary (data controller) for this data.
• For the business data you and your team put into Makoro, such as records about your employees, customers and vendors, we act on behalf of the business that owns the Makoro account. That business is the data fiduciary, and we are its data processor. If you are one of their employees, customers or vendors, please contact that business first about your data.

Data We Collect

We collect information to operate Makoro's manufacturing and operations platform. This includes information you provide directly, information generated as you use the app, and information you upload. Depending on how you use Makoro, this may include:

• Account and profile details — name, email, phone number, postal address, profile picture, role, company name and size, and country.
• Sign-up details — the date and version of the Terms you accepted, the IP address and browser used to sign up, and, if you came from a Facebook or Instagram ad, the ad click identifier.
• Business and operational data — client and vendor contacts, inventory and products, work orders, dispatches, sales and purchase orders, maintenance records, invoices, payments and receivables, and workforce records, including attendance data from biometric devices you connect.
• Uploaded content — documents, photos, and PDFs you attach to records or to Makoro Copilot, including any text we extract from them.
• Billing details — plan, payment status and invoice records. Card and bank details are handled by our payment partner, not stored by us.
• Support communications — messages, requests, and other information you send when you contact us.
• Device and usage data — push-notification tokens, notification preferences, pages visited, and app and device diagnostics used to keep the service reliable and secure.

Makoro Copilot & AI Processing

Makoro Copilot uses artificial intelligence to help you work with your data. We ask for your explicit consent before your first Copilot request, and you can withdraw that consent at any time in the app. When you use Copilot, the following may be processed to generate a response:

• Your prompt and the unit or page context you have selected.
• Photos, PDFs, or other files you attach, and text extracted from them.
• Relevant records from your account needed to answer your request.

Copilot is powered by OpenAI. Inputs are sent to OpenAI's API solely to generate responses for you and are not used to train OpenAI's models. We retain Copilot inputs and outputs only as long as needed to provide and support the feature. You control whether Copilot is enabled and can withdraw consent at any time.

How We Use Your Data

We use the information we collect to provide, maintain, and improve our services — including operating your account, running the manufacturing and operations features you request, facilitating payments, sending receipts, confirmations, and invoices, powering Makoro Copilot, sending notifications you have enabled, providing customer support, following up on your sign-up, measuring our advertising, and keeping the platform secure. We use the data only for the purposes described in this policy or made clear at the time of collection. We do not use your business data for advertising.

Advertising & Measurement

We advertise Makoro on Facebook and Instagram and measure which ads lead to sign-ups. To do this:

• Our website and web app use the Meta Pixel. On our website it only loads after you accept advertising cookies in the cookie banner.
• When you sign up, verify your email, or pay for a plan, we send that event to Meta through its Conversions API, together with your email address and phone number in hashed (scrambled) form, your IP address, browser details and ad click identifier. For payments, the amount is included. Meta uses this to match the event to an ad and report results to us.
• We never send your business data, such as inventory, orders or finance records, to Meta.

You can decline advertising cookies in the cookie banner on our website, and you can object to this measurement at any time by writing to team@makoro.co. See our Cookie Policy for details.

Messages We Send You

We use your email and phone number to send account messages (verification, security, billing and service notices), and, as you agreed at sign-up, WhatsApp messages about getting started with Makoro. You can opt out of non-essential messages at any time by writing to team@makoro.co. Account and security messages cannot be turned off while your account is active.

Sharing of Information

We do not sell your personal information. We share information only with service providers who process it on our behalf to operate Makoro, and only as needed for the categories below:

• Cloud hosting, database and storage — Vercel, Neon, and Supabase (running on Amazon Web Services), plus Upstash for rate limiting.
• AI / Copilot processing — OpenAI, to generate Copilot responses.
• Payment processing — Razorpay, to process subscription payments and payments you collect.
• Our own billing and accounts — Zoho Books, where we keep the tax invoices we issue to you.
• Email, SMS and WhatsApp — Resend (email), Twilio (SMS and WhatsApp), and ManyChat (WhatsApp onboarding messages).
• Push notifications — Expo, which delivers notifications through Apple and Google.
• Error monitoring — Sentry, to detect and fix crashes and errors.
• Sales and onboarding — Pipedrive, where we keep your sign-up contact and company details to follow up with you.
• Advertising measurement — Meta, as described in "Advertising & Measurement" above.
• Integrations you turn on — for example Tally or Zoho Books. Data is exchanged with them only when you connect them, and their own terms and privacy policies apply.
• Legal and compliance — where required by law, regulation, legal process, or to protect rights and safety.

Data Retention

We keep information for as long as your account is active and as needed to provide the service. After that, retention depends on the category of data: account and business records are kept for the life of the account and then deleted or anonymized within a reasonable period unless a longer term is required; invoices, payments, and tax-related records are kept as required by applicable law; Copilot inputs and outputs are kept only as long as needed to provide and support the feature; and diagnostics are kept for a limited period. Where we are required to retain certain information by law or for legitimate business purposes, we keep only what is necessary.

Security

We take reasonable technical and organizational measures to help protect information about you from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction. Data is transmitted over encrypted connections and stored with our hosting providers under access controls. No method of transmission or storage is completely secure, but we work to protect your information and to review our safeguards regularly. If a personal data breach affects you, we will notify you and the relevant authorities, including the Data Protection Board of India and CERT-In, as the law requires.

Push Notifications & Device Data

If you enable notifications, we collect a push-notification token and your notification preferences so we can deliver alerts about your work orders, dispatches, approvals, and other activity. We also collect limited device and app diagnostics to keep the service reliable and secure. You can turn notifications off at any time in your device settings or in the app.

Your Rights & Choices

Under India's Digital Personal Data Protection Act, 2023 and other applicable laws, you have the right to:

• Get a summary of the personal data we hold about you and how we use it.
• Correct, complete or update your personal data.
• Have your personal data erased, subject to what we must keep by law.
• Withdraw any consent you have given, such as for Makoro Copilot or advertising cookies, as easily as you gave it. Withdrawal does not affect processing already done.
• Nominate another person to exercise these rights on your behalf if you die or become incapacitated.
• Raise a grievance with our Grievance Officer, and if you are not satisfied with our response, complain to the Data Protection Board of India.

To exercise these rights, use the in-app controls where available or write to team@makoro.co. To protect your account, we may need to verify your identity before acting on a request.

Deleting Your Account

You can delete your account yourself from within the app at Settings → Security → Delete Account. For your protection, deletion requires an email-confirmation step. When you confirm, we delete your account and associated personal data, except for information we are required to retain by law or for legitimate business purposes (such as invoices, payment records, and tax or compliance records), which we keep only as long as necessary.

Children's Privacy

Makoro is a business tool intended for use by adults at organizations and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

International Data Transfers

Our service providers process and store information in countries other than India, including Singapore and the United States. Where information is transferred across borders, we take steps to ensure it remains protected in accordance with this policy and applicable law, and we do not transfer it to any country the Government of India has restricted.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date above and, where appropriate, notify you through the app or by email. Your continued use of Makoro after an update means you accept the revised policy.

Grievance Officer & Contact

If you have a question or complaint about this policy or your personal data, contact our Grievance Officer: Hemanya Mehta, Origon Associates Private Limited, 410, Blk-12 S/F Sunder Vihar, Paschim Vihar, West Delhi, Delhi 110087, India. Email: team@makoro.co. We acknowledge complaints within 24 hours and aim to resolve them within 15 days. For general support, write to support@makoro.co.