Your Privacy Matters

**Information you provide directly:**

• •Account registration: your name, email address, and password.
• •Payment information: billing details processed securely by Razorpay. We do not store card numbers or CVV codes on our servers.
• •Communications: any messages you send us via contact forms or support emails.

**Information collected automatically:**

• •Usage data: pages you visit, features you use, search queries, products you save, and time spent on the platform.
• •Device and log data: IP address, browser type, operating system, referring URLs, and crash reports.
• •Cookies and similar technologies: session cookies for authentication and preference cookies to remember your settings. See Section 7 for more detail.

- Create and manage your account.

• •Process payments and manage subscriptions.
• •Provide, operate, and improve the Services.
• •Send transactional emails (account confirmation, password resets, payment receipts).
• •Send product updates and promotional communications — you may opt out at any time.
• •Respond to your support requests.
• •Detect, investigate, and prevent fraud, abuse, or violations of our Terms of Service.
• •Comply with applicable Indian laws and regulations.
• •Analyse usage patterns to improve product features and fix bugs.

- **Service providers:** Razorpay (payment processing), cloud infrastructure providers (hosting and storage), and email delivery services — all bound by confidentiality agreements.

• •Analytics tools:: anonymised or aggregated usage data with analytics providers to understand platform performance.
• •Legal requirements:: if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).
• •Business transfers:: in connection with a merger, acquisition, or sale of assets, in which case we will notify you via email and/or a prominent notice on our website.

- HTTPS/TLS encryption for all data in transit.

• •Encrypted storage for sensitive fields such as passwords (bcrypt hashing) and API keys.
• •Access controls restricting internal staff access to personal data on a need-to-know basis.
• •Regular security reviews and vulnerability assessments.

- Account data is retained for the lifetime of your account plus 90 days after deletion to handle disputes or legal obligations.

• •Payment records are retained for 7 years as required by Indian financial regulations.
• •Log and usage data is typically retained for 12 months.

- **Essential cookies:** required for the platform to function (authentication sessions, CSRF protection).

• •Preference cookies:: remember your settings such as theme and language.
• •Analytics cookies:: help us understand how users interact with the platform. We use privacy-focused analytics that do not track you across third-party sites.

- **Access:** request a copy of the personal data we hold about you.

• •Correction:: request correction of inaccurate or incomplete data.
• •Deletion:: request deletion of your personal data, subject to legal retention requirements.
• •Portability:: receive your data in a structured, machine-readable format.
• •Objection:: object to or restrict certain types of processing, including direct marketing.
• •Withdraw consent:: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.