Legal
Privacy Notice
Who we are
Autonode Interactive LLP (Autonode), incorporated in India, operates autonode.build. We process personal data as a data fiduciary under India’s Digital Personal Data Protection Act, 2023 (DPDP Act). Questions and grievances: samuel@autonode.build.
What we collect
Depending on how you use the site, we may process:
- Website analytics identifiers — first-party cookies (visitor, session, journey, and attribution cookies) and related event data.
- Usage and journey data — pages viewed, CTAs clicked, calculator inputs and summaries, scroll depth, FAQ interactions, referrer, UTM parameters, device screen size, and similar engagement signals.
- Lead and intake data — name, email, company, and answers you submit on audit intake, booking, or calculator follow-up forms.
- Scheduling data — preferred times, timezone, and booking status when you use our scheduler.
- Email and marketing data — email address, consent status, and delivery events when you opt in to follow-up emails.
- Consent preference — cookie
an_consentrecording whether you accepted optional third-party analytics. - Technical data — IP-derived signals processed by our host (Cloudflare), user agent, and request metadata used for security and bot filtering.
We do not sell visitor lists.
Why we process it
- Understand marketing performance and improve the website.
- Attribute leads to campaigns and measure funnel conversion.
- Respond to audit requests, schedule calls, and deliver agreed services.
- Send service and marketing emails where you have given consent.
- Secure the site, prevent abuse, and maintain reliable operations.
- Meet legal, tax, and regulatory obligations where applicable.
First-party analytics
We run privacy-lean, first-party analytics. Events are sent to our own API (/api/track) and stored in our database. First-party cookies include an_vid, an_sid, an_jid, an_ft, and an_lt (httpOnly, used for visitor identity and attribution). We do not load PostHog or similar third-party product analytics on the public site.
First-party analytics runs regardless of your cookie choice below. It helps us measure the funnel and attribute leads on our own infrastructure.
Raw event-level data is intended for about 13 months of retention. Aggregated reporting may be kept longer for business planning.
Cookie consent and third-party analytics
When you first visit, we show a banner asking whether to load optional third-party analytics. Your choice is stored in the first-party cookie an_consent (granted or denied, about 12 months). If you choose Essential only, we do not load Google Analytics or Microsoft Clarity.
Third-party tags are loaded through Google Tag Manager (GTM). GTM is a tag management service that injects configured scripts when consent allows. Google acts as a processor for GTM and GA4.
Google Analytics (GA4)
If you accept analytics cookies, Google Analytics 4 may receive page views, engagement events, and conversion events (for example CTA clicks, calculator completion, and lead submissions) under Google’s privacy policy. GA4 uses cookies and similar identifiers. We configure GA4 only in production on autonode.build.
Microsoft Clarity
If you accept analytics cookies, Microsoft Clarity may record session replays, heatmaps, and interaction signals to help us improve the site. Sensitive form fields on booking and intake pages are masked where possible. Clarity is operated by Microsoft under Microsoft’s privacy policy.
Service providers
- Cloudflare — hosting, CDN, security, and Workers infrastructure (data may be processed globally on Cloudflare’s network).
- Google — Tag Manager and Analytics (when you opt in), Calendar scheduling, and OAuth for calendar availability.
- Microsoft — Clarity session analytics (when you opt in).
- Resend — transactional and marketing email delivery when you opt in or when we send service messages.
Marketing email consent
Follow-up emails (for example after the software sprawl calculator) require your opt-in. We record consent source and time. Every marketing email includes an unsubscribe path. You may withdraw consent at any time by emailing samuel@autonode.build or using unsubscribe links in our messages.
Your rights
Under the DPDP Act you may request access, correction, or erasure of your personal data, and raise a grievance with us. Contact samuel@autonode.build. We will respond within timelines required by applicable law.
Children
Our services are aimed at businesses and professionals. We do not knowingly collect personal data from children.
International visitors
We serve clients globally. Data may be processed in India and in countries where our processors operate. By using the site you acknowledge cross-border processing where required to deliver the services described above.
Changes
We may update this notice. The “Last updated” date at the top will change when we do. Material changes to how we use personal data already collected will be communicated where the law requires.