1. Who This Applies To
This policy applies to everyone who visits cncpoint.co.in — whether you are browsing, placing an order, downloading a file, registering as a seller, or posting in the community. CNCPoint is operated from Rajsamand, Rajasthan, India and is subject to applicable Indian data protection laws.
2. Data We Collect
All Users
- Account information — your name, email address, and profile photo, obtained when you sign in with Google via Firebase Authentication.
- Usage data — pages visited, actions taken, device type, and browser — used to improve the platform.
Buyers
- Order information — items purchased, quantities, and order history.
- Delivery address — name, phone number, address, city, state, and pin code for physical product delivery.
- Payment information — payments are processed entirely by Razorpay. CNCPoint never stores card numbers, UPI handles, or net banking credentials.
Sellers
- Business information — business name, type, description, contact details, GST number (if provided), and verification documents.
- Bank account details — account number, IFSC code, and account holder name for payout processing. Stored securely and used only for NEFT/IMPS transfers.
- Transaction records — order amounts, commission deductions, TDS deductions, and payout history, maintained as required by Indian tax law.
- Uploaded content — product images, design files (including DXF, STL, OBJ, ArtCAM RLF, and related CNC formats), portfolio images, and listing descriptions.
- Shop configuration — shop name, handle, description, branding assets, and layout preferences.
Community Members
- Posts and uploads — text, images, and design files you publish in the community, including public thread titles, descriptions, tags, and comment metadata.
- Sales data — file sale records and community earnings history.
3. How We Use Your Data
- Processing and fulfilling orders.
- Calculating and disbursing seller payouts including TDS deduction under Section 194-O.
- Verifying seller identity and business legitimacy.
- Sending order confirmations, shipping updates, and account notifications.
- Resolving disputes between buyers and sellers.
- Detecting and preventing fraud, abuse, and policy violations.
- Improving platform features and user experience.
- Running automated classification, catalog indexing, and marketplace metadata generation for uploaded design assets.
- Generating technical journal content and troubleshooting guides derived from aggregated community discussions.
- Complying with Indian tax, accounting, and legal obligations.
We do not use your data for advertising to third parties. We do not sell your data.
4. Automated AI Processing of Design and Forum Content
CNCPoint operates backend artificial intelligence and computer-vision pipelines to support marketplace operations, search discoverability, and technical content creation. By uploading content or posting in public community areas, you acknowledge that certain data may be processed programmatically as described below.
Design Asset Processing
User-uploaded design assets — including but not limited to DXF, STL, OBJ, and ArtCAM RLF files, together with associated preview renders (such as relief images or template thumbnails) — may be transmitted to and analysed by Google Gemini, Google Vertex AI, and related Google Cloud AI services accessed via Google AI Studio or Cloud Run infrastructure.
Purpose limitation: This processing is used strictly for:
- Automated visual inspection and style classification of design templates;
- Structural indexing and search metadata generation (titles, descriptions, tags, SEO fields);
- Catalogue and marketplace inventory enrichment; and
- Internal quality and compatibility checks — not for training public-facing generative models unrelated to CNCPoint services unless separately disclosed.
We do not use AI processing to substitute human review of paid transactions, tax records, or identity verification. AI-generated metadata may be published on listings after automated or administrative review.
5. Third-Party Automated Data Pipelines
To deliver AI-assisted listing, marketing, and search features, CNCPoint synchronises selected data with the following external platforms. Each provider processes data under its own terms and privacy policies in addition to this Policy.
- Google Cloud Services (Vertex AI / Google AI Studio / Gemini API) — image analysis, multimodal understanding of design previews, and text generation for catalog metadata, journal briefs, and technical summaries. Data may be processed in Google data centres subject to Google's cloud data processing terms.
- Pinterest Developer REST API (v5) — publication of automated visual mockup compositions (e.g., relief designs composited onto room or architectural scene templates), keyword-rich Pin titles, and destination links routing users to CNCPoint product or download pages. Pinterest may collect engagement and redirect analytics in accordance with its developer policies.
- Google Indexing API — notification to Google Search when CNCPoint publishes new or updated dynamic URLs, including technical journal articles and marketplace listing pages, to request timely crawling and indexing. Only URLs and indexing status signals are transmitted; full page content is retrieved by Google's crawlers separately.
Where required by applicable law, we rely on appropriate contractual safeguards and service-provider agreements with these processors. You may contact us to request information about the categories of data shared with each integration.
6. Community Interaction Ingestion
Public content posted in CNCPoint community forums, knowledge threads, and comment sections may be autonomously monitored and aggregated by backend agent systems to identify recurring technical fabrication questions (for example: MDF feed rates, router bit calibration, spindle setup, ArtCAM scaling, or toolpath troubleshooting).
Aggregated, non-personally-identifying patterns from public posts may be used to draft dynamic troubleshooting guides and Journal articles intended to benefit the wider fabricator community. Individual posts attributed to your account remain subject to community visibility settings and moderation rules. We do not publish private messages or non-public account data through this pipeline.
If you do not wish your public forum contributions to be considered for aggregated knowledge generation, you may request exclusion by contacting support@cncpoint.co.in; however, content already published and indexed may persist in archived or derivative educational materials.
7. Data Sharing
We share your data only when necessary:
- Razorpay — payment processing. Subject to Razorpay's Privacy Policy.
- Firebase (Google) — authentication, database, and file storage infrastructure. Subject to Google's Privacy Policy.
- Google Cloud AI processors — as described in Sections 4 and 5 (Gemini, Vertex AI, Indexing API).
- Pinterest — automated marketing Pin publication where you have listed or approved marketplace content for promotion. Subject to Pinterest's Privacy Policy.
- Courier partners (Delhivery, DTDC, India Post) — your name, phone number, and delivery address are shared with the courier responsible for your shipment.
- Seller ↔ Buyer — when you place a marketplace order, your delivery name and address are shared with the seller to enable fulfilment.
- Tax authorities — TDS certificates and transaction data may be reported to the Income Tax Department of India as required by law.
- Legal obligations — we may disclose data if required by a court order or lawful government request.
8. Data Retention
- Order and financial records — retained for a minimum of 7 years as required by Indian accounting and tax law.
- Account data — retained while your account is active. After deletion, basic identifiers may be retained for up to 2 years for fraud prevention and legal compliance.
- Uploaded content — deleted within 30 days of account closure or listing removal, except where a transaction is linked to the content or AI-generated metadata derivatives are retained for catalog integrity logs.
9. Your Rights
You have the right to:
- Access — request a copy of the personal data we hold about you.
- Correction — request correction of inaccurate data.
- Deletion — request deletion of your account and associated data, subject to our retention obligations above.
- Portability — request your order and purchase history in a structured format.
To exercise any of these rights, email us at support@cncpoint.co.in.
10. Security
We use industry-standard security practices including HTTPS encryption, Firebase Security Rules with role-based access controls, and restricted access to financial data. Bank account details are stored in a protected Firestore collection accessible only to authorised payout processes. No system is perfectly secure — if you discover a vulnerability, please report it to us responsibly.
11. Cookies
CNCPoint uses functional cookies required for authentication (managed by Firebase) and basic session management. We do not use third-party advertising or tracking cookies. You may disable cookies in your browser settings, but some features may not function correctly.
12. Children
CNCPoint is not intended for users under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has registered, contact us and we will remove the account.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Significant changes will be communicated via email or an in-app notice. Continued use after changes are posted constitutes acceptance.