Privacy Policy
What we collect, why we collect it, and what you can do about it.
Last updated 5 August 2026
1. Who controls your data
The data fiduciary and controller is Argentron Technologies Pvt. Ltd., trading as Argentron Technologies, 210, New Mandi, Baraut, Uttar Pradesh, India — 250611, CIN U62099UP2026PTC250291.
Data protection and grievance contact: our Grievance Officer, at support@argentrontech.com.
2. We are not your model provider
MechFaber is an MCP server. The language model that drives it runs in your own agent, under your own agreement with whichever provider you use. We do not send your design content or datasheet text to any third-party model provider, because we do not call one. What your agent does with your data before it reaches us is governed by that provider's privacy policy, not this one.
3. What we collect
Account data
Name, email address, organisation, and authentication identifiers, provided by you at sign-up.
Design content
Build scripts, CAD output, part selections, gate results, simulation runs, and any firmware you submit to run against the emulated target. Stored so your projects persist between sessions.
Usage data
Feature usage, job durations, error traces and performance telemetry, used to operate and improve the engine.
Technical data
IP address, browser and device characteristics, and session identifiers — collected on connection and used for security, abuse prevention and diagnostics.
Billing data
Plan, billing status and invoice history. Card details are handled directly by Razorpay; we never receive or store full card numbers.
4. Why we process it
| Purpose | Basis |
|---|---|
| Providing the Service and storing your projects | Performance of a contract |
| Billing and account administration | Contract; legal obligation |
| Security, abuse prevention and diagnostics | Legitimate use / legitimate interests |
| Website analytics | Consent |
| Marketing email | Consent |
Under India's Digital Personal Data Protection Act 2023 we rely on your consent, or on the Act's legitimate uses, as applicable. Where the GDPR or UK GDPR applies to you, the equivalent lawful bases are contract, legitimate interests, legal obligation and consent as set out above.
5. The shared library
Part records contributed to the community library are visible to other users. Records carry the cited source text, not your identity, unless you choose to attribute them. Private projects on paid plans are not shared.
6. Who we share it with
We share data with providers who process it on our behalf under contract:
- Amazon Web Services — hosting, storage, and the isolated workers that run CAD, simulation and firmware jobs.
- Razorpay — payment processing.
- Google Analytics — website usage measurement, set only with your consent.
We do not sell personal data, and we do not share it for advertising.
7. International transfers
Google Analytics involves transfer of website usage data outside India, including to the United States, under Google's Standard Contractual Clauses and supplementary measures. You can decline this by refusing analytics cookies — see the cookie policy.
8. Retention
- Account data: while your account is open, then deleted within 30 days of closure.
- Design content: until you delete it, or within 30 days of account closure.
- Logs and telemetry: 90 days.
- Billing and accounting records: eight years, as required by the Companies Act 2013.
9. Your rights
You may request access to, correction of, or erasure of your personal data, and may withdraw consent at any time. Where the GDPR or UK GDPR applies you also have rights to restriction, objection and data portability.
Exercise any of these at support@argentrontech.com. We respond within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India, or to your own supervisory authority where the GDPR or UK GDPR applies.
10. Security
Untrusted build scripts and firmware run in hardware-isolated microVMs. See the security page for detail and for how to report a vulnerability.
11. Cookies
Set out separately in the cookie policy.
12. Children
The Service is not directed at anyone under 18, and we do not knowingly collect their data.
13. Changes
We will post updates here and, for material changes, notify you directly at least 30 days in advance.