This Privacy Policy explains what personal data OnlineBOM ("we", "us", "our") collects when you use OnlineBOM (the "Service"), why we collect it, where it's stored, and how you can request it be deleted.
1. What we collect
When you sign up or purchase early access, we collect:
- Name — to identify you and personalize the product.
- Work email address — for login, account recovery, and transactional emails (activation links, password resets, team invites).
- Company name — to set up your tenant/workspace.
- Phone number — collected at checkout for the payment receipt, and optionally for the extend-trial flow.
We also store whatever engineering data you choose to enter into the product on your company's behalf — parts, BOMs, comments, uploaded files/drawings, and similar records — so the Service can function. This data belongs to you; we do not use it for anything other than providing the Service to you.
We do not collect or store payment card numbers, UPI IDs, or net-banking credentials. Payments are handled entirely by Cashfree, our payment processor; we only receive confirmation that a payment succeeded or failed.
2. Why we collect it
- To create and operate your account and company workspace.
- To process your ₹999 early-access payment via Cashfree.
- To send you transactional emails: activation links, password resets, team-invite emails, and trial-expiry notices.
- To provide customer support if you contact us.
We do not sell your personal data, and we do not use it for advertising.
3. Where it's stored
Your data is stored on cloud infrastructure located outside India (servers in the EU/US), operated by our hosting and storage providers. Uploaded files (drawings, attachments) are stored in encrypted cloud object storage, accessed only via time-limited signed URLs.
4. How long we keep it
- While your account is active, we keep your data for as long as you use the Service.
- If a 7-day trial period ends without extension, your account is locked (login blocked) but your data is kept for 30 days in case you extend.
- After 30 days locked without extension, your company's data — including uploaded files — is permanently deleted from our systems.
5. Requesting deletion
You can request deletion of your account and data at any time by emailing hello@onlinebom.com from the account's registered email address. We'll confirm once it's done.
6. Who else sees your data
- Cashfree — processes your payment; receives your name, email, and phone number for that purpose.
- Resend — our transactional email provider; sends the emails described above on our behalf.
- Cloud hosting/storage providers — host our database and file storage; do not access your data except as needed to operate the infrastructure.
We do not share your data with anyone else.
7. Security
Passwords are hashed (never stored in plain text). Access to the product is controlled by role-based permissions your company admin configures. Files are stored with access-controlled, time-limited download links.
8. Changes to this policy
We may update this Privacy Policy as the product evolves. We'll update the "last updated" date above when we do.
9. Contact
Questions about this policy, or a data request? Email hello@onlinebom.com, call +91 94869 09104, or see our Contact page.