Privacy Policy

This website is operated by PAVAN A, Karnataka, India, acting as the Data Fiduciary under the DPDP Act, 2023. Privacy questions, consent matters and Data Principal requests go to pavana25t@gmail.com — the same person also serves as the Grievance Officer and the contact for answering questions about processing.

An English version of this notice is available here; a copy in any language listed in the Eighth Schedule of the Constitution will be provided on request to the address above.

• Account data — name, email address, avatar and sign-in identifiers.
• Contact & chat data — messages, call booking requests, attachments you upload.
• Order data — billing name, address, GSTIN (if provided), items purchased, invoices.
• Payment metadata — payment status and transaction reference. Card/UPI credentials are handled by our payment gateway and never reach our servers.
• Technical data — device, browser, approximate region and anonymous usage events used to keep the site secure and fast.

• Running your account — sign-in, security, fraud and abuse prevention. Necessary to provide the service you asked for.
• Orders & delivery — processing payments, issuing invoices and releasing template/remix downloads. Necessary to perform our contract with you.
• Support & communication — replying to messages, tickets and booked calls you initiate.
• Legal obligations — tax, accounting and record-keeping duties under Indian law.
• Preferences (consent, optional) — remembering theme, filters and trusted devices.
• Product analytics (consent, optional) — aggregated usage events to fix broken pages and improve speed. No advertising, no cross-site tracking, no profiling.
• Updates & offers (consent, optional) — occasional product emails you can unsubscribe from in one click.

We never sell personal data, never share it for advertising, and never use it for automated decisions that produce legal effects for you.

Optional purposes run only on consent that is free, specific, informed, unconditional and unambiguous, given by a clear affirmative action. Nothing is pre-ticked, and refusing optional purposes never blocks access to the site or your purchases.

Every choice you make is recorded with its date and the version of this notice, so both sides have proof of what was agreed. You can change or withdraw consent at any time — as easily as it was given — from the Your Data Rights page or the "Privacy choices" link in the footer. Withdrawal stops future optional processing; processing already carried out lawfully, and processing required to complete your orders or meet tax law, continues.

• Cloud database, authentication, storage and hosting providers.
• Razorpay for payment processing (an RBI-regulated payment aggregator).
• Email delivery for transactional notices, invoices and support replies.
• Issue tracking for incident and support escalation.

Each processor acts only on our documented instructions under a valid contract, receives the minimum data needed, and may not use it for its own purposes. Personal data may be processed on servers outside India; such transfers are made only to countries not restricted by the Central Government under Section 16 of the DPDP Act, with contractual safeguards in place.

Essential cookies and browser storage keep you signed in, remember your cart and remember trusted admin devices. Optional preference and analytics storage is written only after you consent. No advertising or third-party tracking cookies are set at any time. Manage everything from the privacy choices panel.

• Account & profile — while your account exists; erased when you delete it.
• Orders, invoices, tax records — retained for the period required by Indian tax and accounting law, then erased.
• Chat, contact and support messages — up to 24 months.
• Consent records — kept as long as needed to evidence the consent, then erased.
• Dormant accounts — if you neither sign in nor contact us for three years and no legal duty requires retention, your personal data is erased. We email you before that erasure so you can keep the account alive.

Anything else is deleted or irreversibly anonymised once its purpose ends.

• Access — a summary of your personal data and how it is processed.
• Correction, completion and updating of inaccurate or incomplete data.
• Erasure of your data and account, unless a law requires us to keep it.
• Nomination — appoint someone to exercise your rights if you die or become incapacitated.
• Withdrawal of consent at any time.
• Grievance redressal, with escalation to the Data Protection Board of India.

Use the Your Data Rights page, or export your data and delete your account instantly from your profile page. Requests are acknowledged within 24 hours and answered within 15 days. Under Section 15 of the Act you must not file false or impersonating requests.

Data is encrypted in transit, stored with row-level access rules so each account can only read its own records, and admin access is protected with multi-factor authentication, re-authentication for high-risk actions, rate limiting and an immutable audit log. Access follows least privilege and is reviewed regularly.

If a breach affects your personal data we will notify you and the Data Protection Board of India without delay, in the form and timelines the DPDP Act and its rules require — describing the nature and extent of the breach, the likely consequences, the measures taken to mitigate risk, and what you should do next.

This site is not directed at children. We do not knowingly process the personal data of anyone under 18 without verifiable consent from a parent or lawful guardian, and we never carry out tracking, behavioural monitoring or targeted advertising directed at children — the site runs no advertising at all. The same protection applies to persons with a disability who have a lawful guardian. If you believe a child's data has been submitted here, write to us and it will be erased.

Complaints are handled by our Grievance Officer, PAVAN A, reachable at pavana25t@gmail.com. Details and a complaint form are on the grievance redressal page. We acknowledge every complaint within 24 hours and resolve it within 15 days. If you remain dissatisfied you may approach the Data Protection Board of India.

Material changes are published here with a new "last updated" date, and where the change affects consent you will be asked to review your choices again.