Skip to content
D2CBooster

Policies

Privacy policy

What we collect, why, and how long we keep it.

Updated 25 Oct 2026

What we collect

Account details: your name and email address, and a password stored as a hash by our authentication provider (Supabase).

Orders: what you bought, prices, coupon used, and payment status and identifiers from Razorpay. We never receive or store card numbers, UPI PINs or bank credentials.

Downloads: which file was downloaded and when, a one-way hash of your IP address and your browser's user-agent, used to prevent link sharing and abuse.

Messages you send through the contact form.

Reviews you choose to write: the rating, your text, and your first name and last initial (for example “Priya S.”). A review is shown publicly on the product page with a “Verified buyer” label. You can edit or delete it at any time, and it is removed if you delete your account.

Why

To deliver what you bought, keep your library available, send transactional emails (receipts, refund notices), prevent fraud, and meet tax and accounting obligations.

We don't sell personal data and don't use it for advertising profiles.

Who processes it

Supabase (database, authentication, file storage), Razorpay (payments), Resend (email delivery) and our hosting provider. Each processes data only to provide its service to us.

Retention and your rights

Order and payment records are kept for as long as tax law requires. Download logs are kept for 12 months.

You can ask for a copy of your data, a correction, or deletion of your account through the contact page. Deleting an account ends access to its library; order records we must keep by law are retained.

Privacy policy · D2CBooster