Is IndiaMART automation safe?
The honest answer is that it depends entirely on how the tool is built — and the difference is easy to check before you install anything.
There are two very different architectures sold as "IndiaMART automation". Local browser extensions run on your machine, inside the session you are already signed into, and never receive your login. Server-side tools ask you to connect or hand over your account, which means they can act without you present. Engyne is the first kind: it never receives your IndiaMART login, and your session never leaves your browser.
The question that actually matters
Most "is this safe" conversations get stuck on trust — whether the vendor seems reputable. That is the wrong test, because it is unfalsifiable. The useful test is architectural: what would this tool still be able to do if the company turned malicious tomorrow?
For a tool holding your platform login on its servers, the answer is: everything you can do, at any time, without you present. For a local browser extension, the answer is: nothing, unless you are sitting at your machine with the browser open.
How Engyne is built
| Your IndiaMART login | Never asked for, never received, never stored. There is no credential handling in the extension at all. |
|---|---|
| Your IndiaMART session | Stays in your browser. Requests go from your browser directly to IndiaMART — they do not pass through our servers. |
| Lead evaluation | Happens locally, on your machine, against rules you configured. Lead text is not uploaded for processing. |
| Our server-side access to your account | None. There is no mechanism for it. |
| When your computer is off | Nothing runs. It is an extension, not a cloud service. |
| What we do receive | A diagnostic heartbeat — see below. Disclosed in full rather than glossed over. |
What Engyne does send us
We could stop at "it all stays on your machine", and it would read better. It would also be untrue. Here is the complete list of what the extension transmits:
- Your licence key and a generated device ID — for licence validation
- The extension version and whether a run is currently active
- Counters: leads scanned, picked, verified
- Your own rule configuration — the keywords and filters you set
- The last rejection reason, and the last error message if one occurred
That is everything. A rejection reason can include a short description of the lead it applied to, because that is what makes the log useful when we tune your rules with you. It exists for licence checks and support, not analytics, and it is covered in the privacy policy.
Four questions to ask any vendor
Including us. A vendor who cannot answer these precisely is telling you something.
- Does it require my IndiaMART login, or ask me to connect my account? If yes, that credential can be used without you present.
- Does my lead data leave my machine to be processed? "For AI features" is still a yes.
- Exactly what is transmitted — can you list it? A vendor who cannot enumerate it has not thought about it.
- Can it act on my account when my computer is off? This is the cleanest test of whether anything is running server-side.
A tool needing an account connection is not automatically unsafe — plenty of legitimate software works that way, and server-side execution buys real features, like running when your laptop is shut.
The point is that it is a different risk profile, and you should choose it knowingly rather than discover it later. Among the tools we compare here, AutoSift requires a Google sign-in, which its own site states. We have no evidence that any tool in this category handles IndiaMART credentials improperly, and we are not suggesting it.
What automation cannot protect you from
- Your own rules. A badly configured keyword list spends credits on the wrong leads. Run in test mode first — it executes every rule and logs every decision while spending nothing.
- Platform terms. These tools automate actions you can already perform manually, using no official API. Satisfy yourself that this fits your agreement with IndiaMART.
- Anyone with access to your computer. Local execution means local security. Your machine is the trust boundary.
Frequently asked questions
Is it safe to use an IndiaMART automation tool?
It depends entirely on the architecture. A browser extension that runs locally only sees what you already see, in your own logged-in session, on your own machine. A tool that asks for your IndiaMART username and password, or asks you to connect your account to its servers, is a different risk category — those credentials can be used without you present. Ask any vendor which of the two they are before you install anything.
Does Engyne need my IndiaMART login?
No. Engyne never asks for, receives or stores an IndiaMART username or password. There is no credential handling anywhere in the extension. It works inside the browser session you are already signed into, and requests to IndiaMART go from your browser straight to IndiaMART — they never pass through Engyne's servers.
Where does my lead data actually go?
BuyLead text is read and evaluated locally, in your browser, against the rules you configured. It is not uploaded for processing. Engyne's servers have no ability to read your IndiaMART account or pull your leads.
So nothing at all leaves my machine?
Not quite, and we would rather say so. Engyne sends a small diagnostic heartbeat to our backend: your licence key, a generated device ID, the extension version, whether a run is active, counters for leads scanned, picked and verified, your own rule configuration, and the last rejection reason or error message. A rejection reason can include a short description of the lead it applied to. That is the full list. It exists for licence validation and support, not analytics.
Can Engyne act on my account when my computer is off?
No. It is a browser extension, not a cloud service. If Chrome is closed or the machine is asleep, nothing runs. That is a genuine limitation of the scheduler, and it is also the reason there is no way for anything to happen on your account without you.
What should I ask any vendor in this category?
Four questions. Does it require my platform login or an account connection? Does lead data leave my machine for processing? Exactly what is transmitted, and can you list it? Can it act on my account when my computer is off? A vendor who cannot answer those precisely is telling you something.
Is Engyne affiliated with IndiaMART?
No. Engyne is an independent third-party tool, not affiliated with, endorsed by or operated by IndiaMART InterMESH Ltd, and it uses no official IndiaMART API. It automates actions you can already perform yourself in your own account.
Check it yourself
Install it from the Chrome Web Store and read the permissions Chrome shows you. Then run it in test mode — every rule executes, every decision is logged, nothing is spent.