Metal Craft Solutions
Last updated: 12 September 2026
This policy explains what information the Metal Craft Solutions CNC IoT platform — our website, our Android app, and the edge software installed in your factory — collects, why we collect it, and what we do with it.
We have written it in plain language. If anything is unclear, please write to us at the address at the bottom and we will explain it.
We are the data controller for the information described here.
Our software connects to CNC machines in a factory and records how they are running — whether a machine is cutting, idle, held or in alarm, how many parts it has made, and what the control reports. Factory managers then view this on our website or in our Android app.
This is industrial machine data. The great majority of what we store is about machines, not about people.
| Data | Why |
|---|---|
| Username | To identify your account and sign you in |
| Email address | To send alerts, shift reports, and password-reset codes |
| Password | To sign you in. Stored only as a one-way hash — we never store or see your actual password |
| Company and role | To show you only your own company's machines |
Accounts are created by us or by your company's administrator. There is no public sign-up.
| Data | Why |
|---|---|
| Sign-in records — username, IP address, time, success or failure | Security. To detect password-guessing and to investigate incidents |
| Notification token from your device | To send you push notifications. It identifies the app installation, not you personally |
| Basic app and device information via Google Firebase Analytics — device model, Android version, app screens opened, approximate region from IP address | To understand which features are used and to find crashes |
Machine status, cycle times, part counts, alarms, programs and CNC signals. This is about equipment. Where your company chooses to record which operator was at a machine, an operator's name may be stored alongside that machine's data.
The app requests only these permissions:
| Permission | What it is for |
|---|---|
INTERNET | To reach our servers |
ACCESS_NETWORK_STATE | To tell whether you are online |
POST_NOTIFICATIONS | To show machine alerts |
VIBRATE | To vibrate on an alert |
WAKE_LOCK | To finish a background data refresh |
The app does not request access to your location, camera, microphone, contacts, photos, files, or call history. It does not read anything else on your phone.
We use a small number of service providers, and only for the purposes below:
| Provider | Purpose |
|---|---|
| Google Firebase (Cloud Messaging & Analytics) | Delivering push notifications and basic usage statistics |
| Our email provider | Sending alerts, reports and one-time codes |
We may also disclose information where the law requires it.
Data is stored on our servers in India.
Machine and production data is kept for as long as your company uses the service, because the value of the product is being able to compare this month against last year. We do not currently delete it automatically.
Account details are kept while the account is active. Sign-in security records are kept so that past incidents can be investigated.
If your company stops using the service, write to us and we will delete your data.
You may ask us to:
Email us and we will respond within 30 days. You can also turn off notifications at any time in your Android settings, and switch off email alerts inside the platform.
This is industrial software for workplaces. It is not intended for anyone under 18, and we do not knowingly collect data from children.
If we change this policy we will update the date at the top of this page. If the change is significant, we will tell account holders by email.