Privacy Policy

1. Who we are

This website is operated by MileSoft Software Technologies ("MileSoft", "we", "us", "our"), an industrial software company based in Nashik, Maharashtra, India.

For the purposes of India's Digital Personal Data Protection Act, 2023 ("DPDP Act") we are the Data Fiduciary for the personal data described in this policy. For visitors in the European Economic Area and the United Kingdom, we are the data controller under the GDPR and UK GDPR.

2. What this policy covers

This policy explains what personal data we collect through milesoft.net (and milesoft.in, which redirects to it), why we collect it, who we share it with, and what rights you have over it.

It covers our public website only. Personal data you share with us inside a signed customer engagement — during an implementation, a support contract, or a licensed deployment of our software on your own infrastructure — is governed by the agreement between us, not by this policy.

3. What we collect

Information you give us

When you submit our contact form, request a demo, send an enquiry from a solutions page, or use the contact widget, we collect the details you enter. Depending on the form, these can include:

• Your first and last name, work email address and phone number
• Your company name, job title, industry and company size
• The solutions and products you are interested in
• Your preferred date and time for a demo
• The message, requirements or challenges you describe to us
• Whether you opted in to receive communications, and whether you subscribed to our newsletter

If you subscribe through the newsletter field in our footer, we collect only your email address.

Information we collect automatically

• Usage analytics. We use Google Analytics 4 to record page views and aggregate performance measurements such as page load speed and responsiveness. This tells us which pages are useful, not who you are.
• Advertising measurement. We advertise on Google. The Google Ads tag on this site records when a visit that began with one of our ads leads to an enquiry, a call, or a download, so we can tell which ads are worth running. It may also add your browser to a remarketing audience, which is what allows MileSoft ads to appear to you on other sites.
• Anti-spam signals. Every form is protected by Google reCAPTCHA v3, which assesses whether a submission is automated. Google collects device and behavioural signals to make that assessment.
• Server logs. Our hosting provider records standard web-server request data.

Information from our AI assistant

If you use the chat assistant, we process the messages you send, a randomly generated session identifier stored in your browser, and the page you were on. If you rate a reply or leave feedback, we store that rating and comment.

We deliberately limit what we keep about the connection itself: your IP address is stored only as an irreversible SHA-256 hash, never in readable form, and your browser's user-agent string is truncated. Both are kept solely to enforce rate limits and block abuse.

Please do not enter confidential, commercially sensitive, or special-category personal data into the chat assistant.

4. Why we use it, and our lawful basis

Under the GDPR we must have a lawful basis for each purpose. Under the DPDP Act we process personal data for the lawful purpose for which you provided it, with notice and, where required, your consent. Our purposes map as follows:

Responding to your enquiry or demo request

Steps taken at your request before entering into a contract, and our legitimate interest in answering people who contact us.

Sending you marketing emails and our newsletter

Your consent, which you can withdraw at any time.

Protecting our forms from spam and abuse

Our legitimate interest in keeping the site and our systems secure.

Understanding how the site is used and improving it

Our legitimate interest in operating and improving our website.

Answering your questions through the AI assistant

Your consent, given by choosing to use the assistant, and our legitimate interest in providing support.

Meeting legal, tax and accounting obligations

Compliance with a legal obligation.

We do not use your personal data to make automated decisions that produce legal or similarly significant effects about you.

5. Who we share it with

We do not sell your personal data. We share it only with the service providers that make this website work, and only to the extent they need it:

• Google. Several of our services run on Google infrastructure: Google Analytics 4 for usage measurement, Google Ads for advertising measurement and remarketing, reCAPTCHA v3 for spam protection, Google Fonts for page typography, and Google Workspace — form submissions are delivered through Google Apps Script into a Google Sheet and emailed to our team, with an automatic confirmation sent back to you.
• Google Gemini API. Messages you send to our AI assistant are transmitted to Google's Gemini API to generate a reply. This is why we ask you not to include confidential information in those messages.
• Hostinger. Our website hosting and the server-side components of the chat assistant.
• Scheduling and interactive content providers. Our demo booking page may use a third-party scheduling service, and our homepage loads an interactive 3D scene from a third-party provider. These providers receive your IP address as a necessary part of serving that content.

We may also disclose personal data where we are legally required to do so, or to establish, exercise or defend legal claims.

6. Cookies and browser storage

We use a small number of cookies and browser storage entries:

• Google Analytics cookies distinguish one visitor from another so we can count sessions.
• Google Ads cookies record whether a click on one of our ads led to an enquiry, and may be used to show you MileSoft ads on other websites.
• The reCAPTCHA cookie supports Google's assessment of whether a form submission is automated.
• Local storage for the chat assistant holds your session identifier and your recent conversation so the chat survives a page refresh. It stays on your device, is limited to your most recent messages, and is cleared automatically after 14 days. You can clear it sooner from your browser settings.

We show a consent banner on your first visit and remember your choice on your device. Analytics and advertising cookies stay switched off until you accept, and visitors in the EEA, the UK and Switzerland start with them denied by default. You can change your mind at any time by clearing this site's data in your browser, which brings the banner back. You can also block or delete cookies through your browser settings, you can opt out of Google Analytics using Google's browser opt-out add-on, and you can turn off ad personalisation for your Google account at myadcenter.google.com. Note that blocking cookies may stop our forms from submitting, because our spam protection depends on them.

7. International transfers

We are based in India and our team accesses enquiry data from India. The service providers listed above operate global infrastructure, so your personal data may be processed in countries outside your own, including India and the United States.

Where we transfer personal data out of the European Economic Area or the United Kingdom, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum where applicable) as the safeguard for that transfer. You can ask us for details using the contact information below.

8. How long we keep it

• Enquiry and demo records: up to 36 months after our last meaningful contact with you, so we can pick up a conversation where it left off.
• Newsletter subscriptions: until you unsubscribe.
• Chat assistant records and feedback: up to 12 months.
• Analytics and advertising data: for the retention period configured in Google Analytics and Google Ads, after which Google deletes it.
• Records we must keep by law, for example for tax or accounting purposes: for the period the relevant law requires.

When a retention period ends we delete the data or irreversibly anonymise it. You can ask us to erase your data sooner — see your rights below.

9. How we protect it

• The entire site is served over HTTPS, and insecure requests are redirected.
• IP addresses associated with the chat assistant are stored only as irreversible SHA-256 hashes.
• Form and chat submissions are rate-limited and screened by reCAPTCHA to prevent bulk abuse.
• Access to the systems holding enquiry data is restricted to the MileSoft staff who need it in order to respond to you.

No method of transmission or storage is completely secure. We work to protect your personal data, but we cannot guarantee absolute security.

10. Your rights

If you are in the EEA or the UK, you have the right to access your personal data; to have inaccurate data corrected; to have your data erased; to restrict or object to our processing of it, including objecting to direct marketing at any time; to receive your data in a portable format; and to withdraw consent at any time without affecting processing already carried out.

If you are in India, the DPDP Act gives you the right to access a summary of the personal data we process about you and who we have shared it with; to have it corrected, completed, updated or erased; to nominate another person to exercise your rights in the event of your death or incapacity; and to a readily available means of grievance redressal.

To exercise any of these rights, email info@milesoft.net. We will respond within the time the applicable law allows, and we may need to verify your identity first. Exercising your rights is free, and we will not treat you differently for doing so.

If you believe we have handled your personal data improperly, we would like the chance to put it right, so please contact us first. You also have the right to complain to your local data protection supervisory authority — in the UK, the Information Commissioner's Office — or to the Data Protection Board of India.

11. Children

MileSoft sells industrial software to businesses. This website is intended for business professionals and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Grievance redressal

As required by the DPDP Act, we publish a contact point for privacy grievances. Write to the Grievance Officer, MileSoft Software Technologies at info@milesoft.net, or by post at the address in section 1.

Please include enough detail for us to identify your data and understand your concern. We will acknowledge your grievance and work to resolve it within the timeframe the law requires.

13. Changes to this policy

We may update this policy as our services, our service providers, or the law change. The date at the top of this page always reflects the most recent version. If a change materially affects how we use your personal data, we will take reasonable steps to tell you — for example by email, if you are subscribed.

14. Contact us

Questions about this policy, or about how we handle your personal data? We are happy to answer them.

• Email: info@milesoft.net
• Phone: +91 8830377618
• Post: Star Mall B, Office No. 4, Nashik, Maharashtra 422101, India

You can also reach us through our contact page.