Privacy policy
How Anstel Private Limited handles personal data on this website and on the Autonautics Lite platform.
Last updated: 8 October 2026
1. Who we are and what this covers
Autonautics Lite is a fleet-management platform run by Anstel Private Limited (CIN U72900HR2016PTC077620, registered office 3rd Floor, Plot No. 786, Phase V, Udyog Vihar, Sector 19, Gurugram, Haryana 122016), a company incorporated in India ("Anstel", "we", "us"). This policy covers the website at www.autonautics.in and the Autonautics Lite platform (lite.autonautics.in, our clients' own addresses, the mobile app, the API, and the emails and alerts it sends).
We never sell personal data, and we never show your email address or other details publicly.
Our two roles under the DPDP Act.
- For the website, for our clients' account and billing details, and for platform users' sign-in details, Anstel is the data fiduciary: we decide why and how that data is used.
- For the vehicles, positions, trips and drivers in a client's fleet, the client is the data fiduciary, and Anstel processes that data on the client's behalf and on its instructions, as a data processor. The client decides why its vehicles are tracked and must tell its drivers (see our Terms). Drivers with questions about their data should contact their employer first; we will help the employer answer.
If you are in Australia, we also follow the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply to you.
2. This website
No cookies, no analytics, no advertising. The website sets no cookies, uses no analytics or advertising tools, no social media buttons, and no re-marketing. Its fonts are served from our own site, not from Google.
The demo form. When you ask for a demo on the contact page, we collect what you type: your name, company, work email, phone number, fleet size, an optional message, and your agreement to be contacted. We use it only to reply to you and arrange the demo. The form is sent by email to our support desk; it is not added to a mailing list.
Spam check. The contact page uses Cloudflare Turnstile to check that a person, not a bot, is sending the form. Turnstile looks at information about your browser and connection to do this, under Cloudflare's privacy policy. It is the only outside script on the website, and it runs on the contact page only.
Server logs. Like any website, our hosting provider records technical details of each visit (IP address, browser type, the page asked for and the time) to keep the site running and secure. We do not use them to identify you.
3. The platform
| What | Examples | Whose data |
|---|---|---|
| Account and billing details | Business name, address, GSTIN, billing contact; payment records (not full card or bank details) | Anstel's, as fiduciary |
| User details | Name, work email, phone number (optional), role, language and time-zone settings | Anstel's, as fiduciary |
| Sign-in and security | One-time sign-in codes, a "remember this device" cookie, sign-in times, IP addresses, browser type, failed attempts | Anstel's, as fiduciary |
| Fleet data | Vehicles, trackers (IMEI), SIM numbers, positions, speed, trips, stops, ignition, geofence events, alerts, jobs, reports, custom fields | The client's; Anstel processes it |
| Driver data | Drivers' names and contact details, and the vehicle positions and trips while they drive | The client's; Anstel processes it |
| Support | Messages and calls with our support team | Anstel's, as fiduciary |
Cookies on the platform. The platform uses only the cookies it needs to work: one that keeps you signed in, one that remembers this device after you sign in with a code (if you choose), and one that remembers your language. It uses no analytics, advertising or tracking cookies.
Location comes from the vehicle's tracker, not from your phone or computer.
Place names. To show an address for a position, the platform sends the position's coordinates (never a name, vehicle or client) to our place-names provider and keeps the answer in a cache.
4. How we use it, and what we never do
We use personal data only to:
- run the platform for our clients: show vehicles, trips, alerts and reports, and send the emails and alerts clients ask for;
- create and manage accounts, sign people in securely, and stop misuse, fraud and attacks;
- bill clients, collect payments and keep the tax and accounting records the law requires;
- answer questions, demo requests and support requests;
- keep the platform working and improve it, for example by fixing faults; and
- meet legal obligations and respond to lawful requests from authorities.
We may email account administrators about their account, licences, renewals and important changes. We send product news or offers only to people who have agreed to receive them, and you can unsubscribe at any time.
We never sell or rent personal data, use fleet or driver data for our own advertising, share a client's data with another client, or use a client's fleet data for any purpose of our own beyond running the platform for that client.
5. Who processes data for us
We use these service providers, each bound to keep the data confidential and use it only for the service they provide to us:
| Provider | What it does | Where the data is |
|---|---|---|
| DigitalOcean | Runs the platform's servers and database | Bengaluru, India |
| Cloudflare | Hosts the website, checks the demo form for spam (Turnstile), and stores our encrypted backups (R2) | Website: Cloudflare's global network. Backups: Cloudflare R2, encrypted on our server before they are uploaded |
| Resend, with Zoho ZeptoMail as backup | Sends sign-in codes, invitations, alerts, reports and the demo-form emails | Resend: Tokyo, Japan. ZeptoMail: United States |
| Zoho Desk | Our support desk, which receives demo requests and support messages | United States (Zoho's US data centre) |
| Razorpay | Takes online payments | India |
| Geoapify | Turns a position's coordinates into a place name | Germany and Finland, through Cloudflare's network. Only coordinates are sent, never names or vehicle details |
| OpenFreeMap | Shows the map images | Your browser fetches the map images straight from it, so it sees your IP address and the map area on screen. No account or fleet data is sent |
We may also share personal data with our professional advisers (accountants, auditors, lawyers), with a buyer if the Autonautics Lite business is sold (who must keep this policy), and with government or law-enforcement authorities when the law requires it.
Outside India. Some providers may store or process data outside India. We transfer personal data only to countries the Government of India has not restricted under section 16 of the DPDP Act, and with safeguards in our contracts.
6. How long we keep it, and how we protect it
| Data | How long |
|---|---|
| Vehicle positions | The period the client's plan includes (30 days, or 3, 6 or 12 months), then deleted automatically |
| Other fleet records and user accounts | While the client's account is open, then 30 days for export, then deleted |
| Encrypted backups | Cycle out within 35 days |
| Demo requests that don't lead to a client | Deleted 12 months after the last contact |
| Invoices and payment records | As long as Indian tax and company law requires (currently up to 8 years) |
| Security logs | 90 days, unless needed to investigate an incident |
How we protect it. Each client's data is kept separate from every other client's, enforced in the database itself and tested on every change. Data is encrypted in transit (HTTPS), backups are encrypted, and access by Anstel staff is limited to those who need it, with every staff action recorded. Sign-in uses one-time codes or passwords stored only as secure hashes, with limits on repeated attempts.
If something goes wrong. If a breach affects personal data, we will tell the Data Protection Board of India and the people affected, as the DPDP Act requires, and our clients where their data is involved.
7. Your rights, consent and complaints
Under the DPDP Act you have the right to:
- know what personal data we hold about you and how we use it;
- have it corrected, completed or updated;
- have it erased when it is no longer needed, unless the law requires us to keep it;
- withdraw consent you gave us, as easily as you gave it (this does not affect what we did before);
- nominate someone to exercise these rights if you die or become unable to; and
- have your grievance resolved by us, and then complain to the Data Protection Board of India.
For fleet and driver data, send your request to the client (usually your employer); we will help them answer it.
How to ask. Write to our grievance officer: Gopal Chhillar, Founder, Autonautics Lite, support@anstelglobal.com, 3rd Floor, Plot No. 786, Phase V, Udyog Vihar, Sector 19, Gurugram, Haryana 122016. We acknowledge requests within 24 hours and answer within 15 days. We may ask you to confirm who you are first. We do not charge for a request.
Children. The website and the platform are for businesses and adults. We do not knowingly collect personal data from anyone under 18.
8. Changes to this policy
We may update this policy. We will post the new version here with its date and, for changes that affect how we use personal data, tell account administrators by email before they apply. Where a change needs your consent, we will ask for it.