Legal

Privacy notice — how we protect your account data

Last updated: 29 October 2026

This privacy notice explains how HENDOI TECHNOLOGIES PRIVATE LIMITED ("Hendoi", "we", "us" or "our") collects, uses, stores and shares information when you use hendoi.com, our product HENFOIL, or when you contact us by email, phone, WhatsApp or a web form.

1. Who we are

HENDOI TECHNOLOGIES PRIVATE LIMITED
Registered office:
Hanumar Koil Street,West Mambalam,(Near Mambalam Railway Station)Chennai City,Tamilnadu State,INDIA - 600033
GSTIN 33AAGCH6765E1ZK · CIN U62099TN2023PTC158630
Email: support@hendoi.com

2. Information we collect

We may collect:

Account data — name, email, password (stored only as a hash), organisation, country, contact number and profile details you choose to provide.
Project and engineering files — models, airfoils, analysis inputs, exports and other files you upload or generate inside HENFOIL. Project data is isolated by authenticated user.
Contact enquiries — name, email, company, country, phone, subject, message and any technical details you send through contact forms.
Communications — emails, WhatsApp messages and call notes when you reach us using the contact channels on our website.
Technical logs — IP address, browser type, device information, timestamps, pages visited and error logs needed to operate, secure and improve the services.
Billing and subscription data — the plan you choose, subscription status, renewal date, and the transaction reference Paddle sends us after checkout. We do not receive or store your full card number, card security code, or full payment-account number.

3. How we use information

To create and manage your account and authenticate sessions.
To provide HENFOIL and related compute, storage and support.
To respond to product and pricing enquiries.
To send operational messages (password resets, security alerts, service notices).
To improve reliability, detect abuse and protect our systems and users.
To meet legal, tax and accounting obligations in India.

We do not sell personal data. We do not use your engineering project files to train public AI models.

4. Where data is stored

Production account data is stored in AWS RDS PostgreSQL. Files are stored in a private Amazon S3 bucket (or local storage in development). Passwords are stored only as irreversible hashes (PBKDF2-SHA256). Session tokens are stored as SHA-256 hashes and can be revoked. Access to production systems is restricted to authorised personnel.

5. Cookies and sessions

We use essential cookies or equivalent session mechanisms so you can stay signed in and so the site can function securely. These are not used for third-party advertising. You can clear cookies in your browser; doing so may sign you out.

6. Sharing

We may share information only with:

Infrastructure providers that host our applications (for example AWS), under contract.
Paddle.com, when you pay for a plan. Paddle is the merchant of record and collects the payment details, billing address, and tax information needed to complete the order, issue the receipt, and handle a refund of that charge. Paddle's privacy policy is at paddle.com/legal/privacy. We receive the outcome of the payment and the subscription record, not the full card number.
Email delivery providers used to send account and subscription messages.
Professional advisers (legal, accounting) when required for the business.
Authorities when required by applicable law or a valid legal process.

7. Retention

We keep account and project data while your account is active and for a reasonable period afterward for backup, dispute resolution and legal requirements. Contact-form and enquiry records are kept as needed to handle the request and for our records. You may ask us to delete an account or specific personal data; we will do so unless we must retain information by law.

8. Your choices

Update profile details from your account settings where available.
Request access, correction or deletion of personal data by emailing support@hendoi.com.
Stop non-essential marketing messages by using the unsubscribe option or by emailing us.

9. Children

Our products and services are intended for professionals, organisations and adult students. We do not knowingly collect personal data from children under 18.

10. International users

We operate from India. If you access the services from another country, your information may be processed in India or in the regions where our cloud providers host data. By using the services you understand that transfer.

11. Changes

We may update this privacy notice from time to time. The "Last updated" date at the top will change when we do. Continued use of the site or products after an update means you accept the revised policy.

12. Contact

Privacy questions and access requests: support@hendoi.com. You can also use our contact page.