Privacy Policy

1. Personal Data We Collect

We collect the following categories of personal data when you use TechProductIndia:

• Account data: email address, name, password hash, optional phone number, optional avatar
• Profile data: username, bio, social URLs, country
• Product submissions: product name, description, screenshots, links, pricing details
• Payment data: invoice records (the payment card itself is processed by Razorpay; we do not store card numbers)
• Usage data: pages visited, products viewed, upvotes, comments, reviews, IP address, user-agent
• Communications: support emails, refund claims, feedback

2. Purposes of Processing

We process your personal data for the following purposes:

• To provide, operate, and maintain the Service
• To verify your identity and prevent fraud
• To process payments and issue GST invoices
• To execute paid-tier deliverables (e.g. UGC video, newsletter inclusion)
• To send transactional emails and important account notices
• To send marketing communications, only where you have opted in
• To improve the Service through analytics
• To comply with legal obligations and respond to lawful requests

3. Legal Basis for Processing

Under the Digital Personal Data Protection Act, 2023, we process personal data primarily on the basis of your consent, and where applicable on the basis of legitimate uses (such as the performance of a contract with you, compliance with law, or responding to a medical emergency).

4. How We Share Your Data

We share personal data only with the following categories of recipients (“Data Processors”), each bound by contractual confidentiality obligations:

• Razorpay — payment processing and invoicing
• Cloudflare R2 — image and file storage
• Resend — transactional email delivery
• MSG91 — SMS and WhatsApp delivery
• Meilisearch — product search index (self-hosted)
• Sentry — error and crash reporting (anonymised where possible)
• PostHog — product analytics (anonymised IPs, no PII in events)
• Hostinger — application hosting

We do not sell personal data. We do not share personal data with advertisers.

5. Data Retention

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, plus any retention period required by law (for example, GST records: 6 years).

When you close your account, we permanently delete or anonymise your personal data within 30 days, except where retention is required by law.

6. Your Rights

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access your personal data
• Correct or update inaccurate personal data
• Erase your personal data (right to be forgotten)
• Withdraw consent at any time
• Nominate another person to exercise your rights in case of death or incapacity
• File a grievance with our Data Protection Officer
• Escalate unresolved grievances to the Data Protection Board of India

To exercise any of these rights, email privacy@techproductindia.com or use the account-deletion option in Settings → Account.

7. Security

We implement reasonable technical and organisational measures to protect your personal data, including:

• TLS 1.2+ encryption for all data in transit
• Bcrypt hashing for passwords (cost factor 12+)
• Encryption at rest for stored files
• Role-based access control for staff
• Audit logging of all administrative actions
• Rate limiting and abuse prevention on every public API

No system is perfectly secure. If we ever experience a personal data breach, we will notify you and the Data Protection Board of India in accordance with applicable law.

8. International Transfers

Some of our Data Processors (e.g. Razorpay’s sub-processors, Cloudflare R2 storage edges) may process data outside India. Where such transfers occur, they are subject to contractual safeguards and, where applicable, the Central Government’s notifications under the Digital Personal Data Protection Act.

9. Children

TechProductIndia is not directed at individuals under 18. We do not knowingly collect personal data of minors. If you believe a minor has provided personal data to TechProductIndia, email privacy@techproductindia.com and we will delete it.

10. Cookies and Tracking

We use a small number of cookies and equivalent technologies. See our Cookie Policy for details.

11. Grievance Officer

In accordance with the Information Technology Act, 2000 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the contact details of the Grievance Officer are:

[LAWYER-REVIEW: insert name, postal address, and email of the appointed Grievance Officer]

12. Changes to This Policy

We may amend this Privacy Policy from time to time. We will notify you of material changes by email or via a notice on the Service at least 14 days before the change takes effect.