Who operates CoManufacturing
CoManufacturing.in is operated by Hartman Enterprises LLP, at 4, Red Cross Road, Sadar, Nagpur – 440001, Maharashtra, India ("CoManufacturing", "we", "us" or "our"). This Privacy Policy explains how we handle information through the website and related product-guidance and introduction services. For privacy questions or requests, email hello@comanufacturing.in.
Information you provide
Account registration collects your name, email address and password. We store a one-way password hash, not your readable password. Password recovery creates a hashed, single-use reset token and expiry time. Product Builder submissions can include a product idea, ingredients, product category and format, target market, intended customer, positioning, quantity and other manufacturing requirements. Match requests can additionally include your company, contact details, development stage, timeline, requested services and free-text requirements.
Projects, requests and provider records
When you submit a match request, we save the associated product idea, project, selected roadmap stage and request status to your account. Product Builder analysis is returned to your browser but is not saved to your account unless information from it is included in a submitted request. Authorised administrators can view and manage requests. Administrators may also maintain manufacturer and service-provider business records, including business contact details, capabilities, verification status and private internal or verification notes. Private notes, private contact fields and request-only provider identities are not intended for public display. Published articles and explicitly public provider fields may appear on public pages and in search metadata.
How we use information
We use information to create and secure accounts; authenticate sessions; recover passwords; analyse product ideas; generate structured product understanding and manufacturing roadmaps; save projects and requests; identify relevant provider capabilities; arrange requested introductions; send service emails; respond to enquiries; administer public content and provider records; prevent duplicate submissions and abuse; diagnose errors; and protect, maintain and improve the service. We do not currently process payments through CoManufacturing.
AI processing
Product ideas sent to the Product Builder are transmitted from our server to OpenAI to generate structured product information and roadmap steps. The current integration requests that OpenAI not store the response for application history. OpenAI may still process request data for service delivery, security and abuse monitoring under its applicable terms. AI output can be incomplete, inaccurate or out of date. Do not include patient records, sensitive health information, passwords, trade secrets or personal information that is unnecessary for the manufacturing request.
Cookies and browser storage
The service uses signed, HTTP-only cookies to maintain customer and administrator sessions. Customer sessions expire after 12 hours; administrator sessions expire after eight hours. These cookies are used for authentication and security, not advertising. The match-request form uses session storage in your browser to retain an unfinished draft and removes it after successful submission. Product ideas can also appear in page URLs while you move through the builder, so avoid including secrets in a product idea. Clearing cookies or browser storage signs you out or removes local drafts but does not delete records already submitted to our servers.
Technical information and security controls
Vercel and other infrastructure used to deliver the website may process technical information such as IP address, device and browser information, requested URLs, timestamps, response status and error or security events. CoManufacturing stores pseudonymous rate-limit records generated with a keyed hash to restrict repeated login, signup, reset and request attempts. We use access controls, password hashing, signed cookies, TLS, restricted public database access and other safeguards, but no online service can guarantee absolute security.
Analytics
Google Analytics code is available in the application but is not active in the current production configuration because no Google Analytics measurement ID is configured. The active service sends only two named conversion events if analytics is deliberately enabled: completion of product analysis and submission of a match request. We will update this Policy and implement any required consent controls before enabling analytics or adding advertising trackers.
Service providers
We use Vercel for website hosting and delivery, Supabase/Postgres for the production database, OpenAI for Product Builder analysis and Resend for transactional email delivery. These providers process information only as needed to provide their services to us and may process it in countries other than yours. Their own terms and privacy notices apply to their processing. We do not sell personal information or use it for third-party behavioural advertising in the current service.
Provider introductions and disclosure
If you ask for a match or introduction, we may share relevant contact information and portions of your brief with selected manufacturers, laboratories or other service providers so they can assess fit and respond. We do not publish private project briefs as a public supplier directory. An introduction does not create confidentiality obligations. Agree appropriate confidentiality terms before sharing formulas, trade secrets or other sensitive know-how with us or a third party.
Retention and deletion
Account, project, request, provider and security information is kept while needed to operate the service, fulfil active requests, maintain records, prevent abuse, resolve disputes or meet applicable obligations. Personal and account data will generally be deleted or anonymized within 12 months after account closure, unless retention is necessary to comply with law, resolve disputes, prevent fraud or abuse, or maintain records that must legally be retained. Password-reset links expire after 30 minutes and are single use. Browser session drafts last for the browser tab session unless cleared earlier. You may request account or personal-information deletion, but limited information may be retained where reasonably necessary for security, dispute resolution or legal obligations, and backups may expire on a later operational schedule.
Your choices and requests
You may ask to access, correct or delete personal information, or close your account, by emailing hello@comanufacturing.in. We may need to verify your identity and authority before acting. Available rights, response periods and appeal or complaint routes depend on the law that applies to you and the completed operator details above. Do not send passwords or sensitive documents in the initial email.
Children
CoManufacturing is a business-oriented manufacturing platform and is not directed to children. You must have legal capacity to use the service or be authorised to act for the organisation you represent. Contact us if you believe a child has submitted personal information.
Changes to this Policy
We may update this Policy when the service or its data practices change. The revised version will be posted here with a new last-updated date. We will provide additional notice where required by applicable law.