Privacy Policy & Data Governance
Last Updated: October 2026. This policy outlines how MachPower Tools (operated by Maxe Digital Solutions) collects, protects, and governs commercial contractor data across our e-commerce platform and regional distribution yards.
1. Regulatory Framework & Jurisdiction
MachPower Tools operates in strict adherence to the laws of the Republic of India, specifically the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000 (and Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011), and the Central Goods and Services Tax Act, 2017.
By accessing or transacting on machpowertools.com, utilizing our Progressive Web App (PWA), requesting Bulk RFQ quotations, or registering an enterprise credit account, you acknowledge the terms of this Privacy Policy.
2. Categories of Data Collected
We collect only the minimum business data necessary to execute industrial commercial orders and generate statutory tax documents:
Contractor/Enterprise firm name, authorized contact representative, business mobile number, email address, physical delivery yard or job site address, and 6-digit postal pincode.
15-digit Goods and Services Tax Identification Number (GSTIN), Udyam Registration Certificate number, PAN card details (for Net-30 credit evaluations), and State Jurisdiction Code (e.g. Code 33 Tamil Nadu).
Purchase Order (PO) history, Bill-of-Materials (BOM) quotations, Bharat UPI transaction reference IDs, E-Way Bill dispatch numbers, and payment status. We do NOT store debit/credit card numbers or UPI MPINs.
Device IP address, browser type, Service Worker caching tokens, active mode preference (B2B vs Retail), and localized search history saved in browser localStorage.
3. Purpose of Processing & Lawful Basis
We process collected data exclusively under the following lawful grounds:
- Contractual Execution: Processing, staging, and dispatching tool orders from our distribution yards to your construction or manufacturing job sites.
- Statutory Tax Invoicing: Generating official GST tax invoices compliant with GSTR-1 filings, facilitating GSTR-2B Input Tax Credit (ITC) reconciliation for buyers.
- Logistics Coordination: Transmitting consignee information to licensed freight transporters (VRL, TCI Express, Blue Dart) and generating electronic E-Way Bills on the NIC portal.
- Warranty & Escrow Verification: Authenticating genuine OEM tool serial numbers for warranty claims and holding funds securely in pre-owned machinery escrow.
4. Third-Party Data Disclosures & Zero Selling Policy
We never sell, rent, or trade your commercial phone numbers, emails, or purchasing records to third-party marketing brokers or ad networks. Data is shared only with verified service partners strictly on a need-to-know basis:
- Licensed Logistics Providers: Shared delivery contact and site address for consignment offloading.
- National Informatics Centre (NIC) & GSTN: Statutory transmission of invoice details for mandatory E-Way Bill generation on consignments exceeding ₹50,000.
- OEM Service Centers: Tool serial numbers and purchase invoice copies shared with Bosch, Makita, or ESAB only when initiating warranty claims on behalf of the customer.
5. Data Security & Retention Standards
All communication between your browser and our servers is encrypted using 256-bit TLS (Transport Layer Security). Server-side operational files are safeguarded with strict Linux directory permissions (0755 for directories, 0644 for files).
Statutory Retention Period: Under the Indian Central Goods and Services Tax Rules, tax invoices and related accounting ledgers must be retained for a mandatory minimum period of 72 months (6 years) from the due date of furnishing the annual return for the relevant financial year.
6. Contractor Data Rights under DPDP Act 2023
Registered contractors and users possess the following legal rights:
Request a complete summary of your personal and corporate data processed by our systems.
Update or rectify inaccurate GSTIN, phone numbers, or delivery yard addresses.
Request deletion of non-statutory user profiles. You can initiate this self-service from your User Dashboard ↗ (subject to statutory 6-year GST tax archiving).
Under Section 14 of the DPDP Act 2023, data principals can designate an authorized nominee to exercise data rights in the event of death or incapacity.
Lodge formal statutory grievances with our designated Grievance Officer via our Statutory Grievance Desk ↗ with guaranteed 48-hr acknowledgment and resolution within 30 days.
contact_support Data Protection Officer (DPO) Contact Details
gavel Open Grievance DeskIn compliance with Section 10 of the DPDP Act 2023 and Consumer Protection (E-Commerce) Rules 2020, contact our legal and data protection team: