Privacy notice
Version 1.0 · In force from 18 August 2026
Two different things
This notice concerns this website — people who visit it or ask us for a demo.
It does not govern participant or specimen data held inside a customer's Specibo deployment. For that data the customer institution is the controller and Specibo acts only as a processor under a separate agreement; in on-premise and sovereign deployments we hold no access to it at all. Keeping these two apart is the single most important thing this notice has to do.
What we collect on this site
- Demo and contact enquiries — the name, organisation, work email, country, type of collection and free-text description you submit. Stored in a Cloudflare D1 database operated by us.
- Limited request context — the country your request came from and your browser's user-agent string, kept with the enquiry so we can identify automated abuse. We do not store your IP address. It is passed to Cloudflare Turnstile for the bot check and not retained by us.
- Technical data — the request information any web server or CDN necessarily processes to serve a page.
The form is protected by Cloudflare Turnstile, a bot check that replaces a CAPTCHA. It is used only to tell a person from a script.
We use Cloudflare Web Analytics to count page views and see which pages are read. It sets no cookies, does not fingerprint your browser, and does not track you across other sites. It records the page address, referrer, and coarse device and country information. We cannot identify you from it, and it is not combined with anything you send us through the demo form.
No other analytics or advertising trackers run on this site, and the only cookies set are those strictly necessary to serve the page and run the bot check.
Why we use it
- To respond to your enquiry and arrange a demonstration.
- To keep the site available and secure.
We do not sell personal data, and we do not use enquiry details for unrelated marketing.
Our basis for this differs by framework, because the two are built differently. Under India’s Digital Personal Data Protection Act 2023 we rely on section 7(a): you provided these details voluntarily, for the specified purpose of us answering your enquiry, and you have not indicated that you object. Under the GDPR, where it applies, we rely on Article 6(1)(f), our legitimate interest in responding to a business enquiry we did not solicit — an interest you can object to at any time using the contact below.
If we ever want to use these details for anything else, marketing included, we will ask you first. We will not quietly repurpose an enquiry into a mailing list.
How long we keep it
We delete an enquiry twelve months after we receive it, whether or not a conversation followed. The country and browser information described above is kept for a shorter period — 90 days — because it exists only to help us spot automated abuse, and that purpose expires well before the enquiry does; after 90 days it is erased and the enquiry is kept without it.
Both are enforced automatically by a scheduled job, not by anyone remembering to run one. If a conversation becomes a customer relationship, any information we keep after that point is governed by the contract with that organisation, not by this notice.
Who processes it
Cloudflare, Inc. hosts this site, serves it through its network, stores enquiries in its D1 database service, provides the Turnstile bot check, and provides the Web Analytics described above. Cloudflare processes this data on our instructions.
Google LLC provides the mailbox we use to read and answer enquiries (Google Workspace).
Enquiries are stored in Cloudflare’s Asia-Pacific region. Transfers outside India are permitted under section 16 of the Digital Personal Data Protection Act 2023, which restricts transfer only to countries the Central Government has notified; none relevant to this storage is currently notified.
Your rights
You may ask us to give you a copy of the personal data we hold about you, to correct or complete it, or to erase it. You may withdraw a consent you have given as easily as you gave it, and you may nominate another person to exercise these rights on your behalf if you die or become incapacitated. We will answer within one month.
These rights arise under India’s Digital Personal Data Protection Act 2023, which governs this notice. If you are in the European Economic Area or the United Kingdom, the GDPR may also apply to this enquiry data, and we will honour its equivalent rights.
To exercise any of them, or to raise a grievance about how we have handled your data, write to our data protection contact at dpo@machers.tech. If you are not satisfied with our answer you may complain to the Data Protection Board of India, or to your local supervisory authority if you are in the EEA or the UK.
If something goes wrong
If personal data we hold is exposed, lost or accessed without authorisation, we will notify the Data Protection Board of India and every affected person, as required by section 8(6) of the Act and the Digital Personal Data Protection Rules 2025.
Children
This site is not directed at children and we do not knowingly collect their personal data. If you believe a child has sent us data through this site, write to dpo@machers.tech and we will erase it.
Automated decisions
We do not make any automated decision about you that produces a legal or similarly significant effect. The bot check on the demo form decides only whether a submission is likely to be automated.
Who we are, and how to contact us
The data fiduciary for this site is Tech Machers Consulting Pvt Ltd, the company that operates specibo.com.
Data protection contact:
dpo@machers.tech
Everything else: contact@machers.tech