Privacy Policy

The information we gather includes your Name, Email and Phone Number provided at purchase, transaction metadata received from Razorpay (never the raw card details), technical data captured through Vercel Analytics, and session cookies used to keep the site secure.

• Personal Information: Your name, email address and phone/WhatsApp number provided during purchase.
• Payment Information: We never store card details ourselves; they are handled by Razorpay (a PCI-DSS compliant gateway), and we only receive the Transaction ID and payment status.
• Technical Information: IP address, browser type and device information obtained through Vercel Analytics, along with the pages you visit.
• Cookies: Only the cookies strictly necessary to maintain your session and keep the site secure.

Your data helps us fulfil and deliver orders, issue invoices, share product updates (which you may unsubscribe from at any time), guard against fraud, and meet our legal obligations.

• To fulfil your order and deliver the ebook to you via email and WhatsApp.
• To send you the purchase invoice.
• To inform you about new books and offers (you always have the option to unsubscribe at any time).
• To keep your account secure and prevent fraud.
• To comply with applicable legal obligations.

Your personal data is never sold, rented, or traded by us. We share only the data strictly required with the following trusted service providers to complete your order.

For tax and audit compliance, order data is kept for 7 years, while account data stays with us for as long as the account is active plus 1 year after it is closed; session cookies are cleared the moment the browser is closed.

• Order Data: 7 years, to meet tax and audit compliance requirements
• Account Information: As long as the account is active, plus 1 year after it is closed
• Session data / Cookies: Until the session ends when the browser is closed

We rely on SSL/TLS encryption, the PCI-DSS compliant Razorpay gateway for payments, secure AWS S3 storage for files, and database-level encryption. Since no transmission over the internet can be guaranteed 100% safe, we reduce the risk by applying industry-standard safeguards.

DPDPA 2023 entitles you to view the data we hold about you, to have any inaccuracies corrected, to ask for your data to be erased (within the limits of legally required retention), and to nominate someone to handle your data. Write to kayadyachasalla@gmail.com to exercise any of these rights.

• Right to Access: The right to know what data we hold about you.
• Right to Correction: The right to have inaccurately recorded information corrected.
• Right to Erasure: The right to request deletion of your data, subject to certain conditions.
• Right to Nominate: The right to nominate a person to handle your data after your death.