Privacy policy | Transworld Commercial Enterprises

Who we are

Transworld Commercial Enterprises (partnership firm), 39 B&C, 6th Floor, Onlooker Building, Sir P.M. Road, Fort, Mumbai 400001, India, is responsible for the personal data described here. Contact us about privacy at sales@transworldindia.in.

Quote requests and contact messages

We collect your name, company, email, phone, country, the page you sent the form from, the details you type and any files you attach, plus the time you accepted this notice. We use them to answer you and prepare a quotation (steps you asked for before a contract, GDPR Art. 6(1)(b)) and to follow up on that request (legitimate interest, Art. 6(1)(f)). We send you an automatic confirmation email. Attached files are stored on our own server and only signed-in staff can open them.

Website assistant (chat)

The chat assistant answers questions from this website's own content. When you use it, your question and the last few messages of the conversation are sent to OpenRouter (an AI model routing service) to generate the answer with a third-party language model (currently a Z.ai GLM model). Our website does not store the conversation; it is kept only in your open browser window and is gone when you close or reload the page. To prevent abuse we count messages per IP address in our server's memory for a short time; this count is not written to disk. Technical errors are logged without your message text. Please do not enter personal or confidential data in the chat; for anything order-specific, use the quote form. Basis: legitimate interest in answering visitors' questions.

Voice assistant

When you use the voice assistant, your microphone audio is streamed to LiveKit (a real-time media server run by our group), converted to text and back to speech by Deepgram, and answered by a language model through OpenRouter, using this website's content. Your browser asks for microphone permission first, and you start and end the call yourself (consent, Art. 6(1)(a)). Please do not share personal or confidential data in a call.

Drawing uploads (AI Bill of Materials Takeoff)

When you upload drawings or parts lists to the AI Bill of Materials Takeoff tool, we use the files only to extract a parts list, match it to our product range and prepare a quotation if you ask for one (steps before a contract, GDPR Art. 6(1)(b), and our legitimate interest in offering the tool, Art. 6(1)(f)). The files are processed by the takeoff service we use and the AI model providers it relies on, which are located in the USA; where GDPR applies, the transfer relies on standard contractual clauses. Your files are not used to train AI models. Files and the extracted list are deleted after 30 days. To prevent abuse we count uploads per IP address in our server's memory for 24 hours. Before the full list is released, we verify your email address with a one-time code sent to it (kept in server memory for at most 15 minutes, stored only as a hash). If you unlock the full list, we store your name, business email, company and the extracted list as an enquiry, kept like quote requests (see below). To have an upload deleted earlier, write to sales@transworldindia.in with the time of the upload and the file names.

Certificate uploads (MTC Checker)

When you upload a mill test certificate to the MTC Checker, we use it only to read its values and show you the check (our legitimate interest in offering the tool, Art. 6(1)(f), with your consent to the transfer, Art. 49(1)(a)). The file is sent through OpenRouter to an AI model provider in the USA, limited to providers that do not store prompts or use them for training. On our server the file is held in memory for the duration of the request only: it is not written to disk, not stored in our systems or logs, and not kept after the check. To prevent abuse we count checks per IP address in our server's memory for 24 hours.

If you subscribe, we store your email address, the time you agreed, the page and language you signed up from, and when you confirmed. We only send newsletters after you click the link in our confirmation email (double opt-in), and every newsletter has an unsubscribe link (consent, Art. 6(1)(a)). Emails are sent from our own mail infrastructure; we do not use a third-party newsletter service. If you do not confirm, we send nothing further.

Website analytics and server logs

Analytics: only if you accept analytics cookies, Google Analytics 4 records pages viewed, device type and approximate location; IP anonymisation is on (consent, Art. 6(1)(a)). You can withdraw consent at any time under "Cookie settings" in the footer.
Server logs: our hosting keeps technical logs (IP address, time, page) to keep the site secure (legitimate interest).

Who receives your data

Our sales team, through our content management system and email.
Our email provider, which delivers form notifications, confirmations and newsletters.
Our group's own automation and customer-relationship systems (n8n and Twenty CRM, self-hosted), which receive quote and contact requests and alert our team by WhatsApp or Telegram.
OpenRouter and the model provider it routes to, for chat and voice answers; Deepgram, for voice; LiveKit, run by our group, for voice.
Google, for analytics, only if you accept analytics cookies.
Cloudinary hosts images on the site; it receives no personal data from forms.
Where a request needs it, the partner manufacturer that will make the part receives your specification (not your contact details unless needed), and our group freight forwarder receives shipping details.

We do not sell personal data.

International transfers

We are based in India. Data you send us is processed in India and by providers that may be located elsewhere, including the USA. Where GDPR applies, we rely on appropriate safeguards such as standard contractual clauses.

How long we keep it

Quote requests and correspondence: as long as needed to handle your enquiry and any resulting order, then for the period Indian tax and trade law requires, or until you ask us to delete it where the law allows.
Newsletter: until you unsubscribe or ask us to delete your address. An unsubscribed address is kept, marked unsubscribed, so we do not email it again.
Chat: not stored by our website.
Analytics data: 14 months.

Your rights

You can ask for access, correction, deletion, restriction or a copy of your data, object to processing based on legitimate interest, and withdraw consent at any time (this does not affect processing before you withdrew). Write to sales@transworldindia.in. If you are in the EU or UK you may also complain to your data protection authority.

Last updated 12 Nov 2026.