Privacy Policy

1. Personal Data We Collect

We collect the following categories of personal data when you use TechProductIndia:

• Account data: email address, name, password hash, optional phone number, optional avatar
• Profile data: username, bio, social URLs, country
• Product submissions: product name, description, screenshots, links, pricing details
• Payment data: invoice records (the payment card itself is processed by Razorpay; we do not store card numbers)
• Usage data: pages visited, products viewed, upvotes, comments, reviews, IP address, user-agent
• Communications: support emails, refund claims, feedback

2. Purposes of Processing

We process your personal data for the following purposes:

• To provide, operate, and maintain the Service
• To verify your identity and prevent fraud
• To process payments and issue GST invoices
• To execute paid-tier deliverables (e.g. UGC video, newsletter inclusion)
• To send transactional emails and important account notices
• To send marketing communications, only where you have opted in
• To improve the Service through analytics
• To comply with legal obligations and respond to lawful requests

3. Legal Basis for Processing

Under the Digital Personal Data Protection Act, 2023, we process personal data primarily on the basis of your consent, and where applicable on the basis of legitimate uses (such as the performance of a contract with you, compliance with law, or responding to a medical emergency).

4. How We Share Your Data

We share personal data only with the following categories of recipients (“Data Processors”), each bound by contractual confidentiality obligations:

• Razorpay - payment processing and invoicing
• Cloudflare R2 - image and file storage
• Resend - transactional email delivery
• MSG91 - SMS and WhatsApp delivery
• Meilisearch - product search index (self-hosted)
• Sentry - error and crash reporting (anonymised where possible)
• PostHog - product analytics (anonymised IPs, no PII in events)
• Hostinger - application hosting

We do not sell personal data. We do not share personal data with advertisers.

Vouches are public endorsements. When you vouch for a product, the maker of that product may see your name and public profile as one of its supporters. You can remove a vouch at any time. We never share your email address with makers unless you explicitly ask us to (see below).

When you ask us to pass on your details. If you send a maker an enquiry (for example “Request a demo”), or tick “share my email with the maker” on a launch reminder, we share your name, email and message with that maker only. If you request an introduction to a partner agency, we share your details with that partner only.

Launch reminders, follows and the weekly buyer alert. A “Notify me” reminder is used for one email on that product’s launch day. Products you save or follow, and categories you follow, are used for your weekly buyer alert, which you can turn off from your Saved page or the one-click link in every alert. Makers see only how many people follow or saved their product, never who.

Service and partner requests. When you request a service or apply to be a partner, we store your contact details, your message and which page or campaign brought you to us, so our team can reply.

Reviews and verification. A review left through a maker’s invite link is labelled “Invited by the maker”. If a maker verifies their domain, we store the address the code was sent to; only the domain is shown publicly.

Clicks to a maker’s website are counted anonymously. Makers may see aggregate statistics - the day, device type, approximate city or country, and which page or channel a click came from. We do not record your IP address against a click, and makers never see who you are.

5. Data Retention

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, plus any retention period required by law (for example, GST records: 6 years).

When you close your account, we permanently delete or anonymise your personal data within 30 days, except where retention is required by law.

6. Your Rights

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access your personal data
• Correct or update inaccurate personal data
• Erase your personal data (right to be forgotten)
• Withdraw consent at any time
• Nominate another person to exercise your rights in case of death or incapacity
• File a grievance with our Data Protection Officer
• Escalate unresolved grievances to the Data Protection Board of India

To exercise any of these rights, email contact@techproductindia.com or use the account-deletion option in Settings → Account.

7. Security

We implement reasonable technical and organisational measures to protect your personal data, including:

• TLS 1.2+ encryption for all data in transit
• Bcrypt hashing for passwords (cost factor 12+)
• Encryption at rest for stored files
• Role-based access control for staff
• Audit logging of all administrative actions
• Rate limiting and abuse prevention on every public API

No system is perfectly secure. If we ever experience a personal data breach, we will notify you and the Data Protection Board of India in accordance with applicable law.

8. International Transfers

Some of our Data Processors (e.g. Razorpay’s sub-processors, Cloudflare R2 storage edges) may process data outside India. Where such transfers occur, they are subject to contractual safeguards and, where applicable, the Central Government’s notifications under the Digital Personal Data Protection Act.

9. Children

TechProductIndia is not directed at individuals under 18. We do not knowingly collect personal data of minors. If you believe a minor has provided personal data to TechProductIndia, email contact@techproductindia.com and we will delete it.

10. Data From Platform Features

• Visitor counting: when you click through to a product, a random, anonymous identifier (tpi_vid) and limited network information let us count each visitor once. Makers see totals, not who you are.
• How you found us: the campaign or referring site that brought you (tpi_attr) is stored with your account when you sign up.
• Free website audit: we keep the address you scanned, the results and the email address you verify, to send your report and to link it to a product you later list.
• Newsletter: creating an account adds your email address to our newsletter. Every email has one-click unsubscribe; if you unsubscribe we keep your address only as a do-not-email record, so you are never re-added automatically.
• Community: vouches, comments, reviews and public collections show your name and username. Builder points are calculated from this activity.
• Enquiries: messages you send to a maker, such as a demo request, are shared with that maker.

11. Cookies and Tracking

We use a small number of cookies and equivalent technologies. See our Cookie Policy for details.

12. Changes to This Policy

We may amend this Privacy Policy from time to time. We will notify you of material changes by email or via a notice on the Service at least 14 days before the change takes effect.