Privacy Policy

1. Data We Collect

We collect minimal personal data only for order processing and delivery:

• Name — provided during checkout (optional)
• Email address — provided during checkout for order confirmation and download delivery
• Payment information — processed securely by Razorpay; we do not store full card details
• Order metadata — order ID, amount, currency, timestamp, payment status

We do NOT collect or store: Extracted lead data, WhatsApp group data, Google Maps search results, or any data processed by the extensions. All extraction runs locally in your browser.

2. How We Use Your Data

• Process and verify payments via Razorpay
• Deliver download access for purchased products
• Send order confirmation and delivery emails
• Provide customer support for installation and usage questions
• Comply with legal obligations (tax records, etc.)

3. Data Sharing

We share data only with trusted service providers:

• Razorpay — Payment processing (see their Privacy Policy)
• Google Cloud — Secure file storage for product delivery (see their Privacy Policy)
• Microsoft Clarity — Anonymous usage analytics (see their Privacy Policy)

We do not sell your data. We do not share data with advertisers or third parties for marketing purposes.

4. Data Retention

• Order records: Retained for 7 years for tax/compliance purposes
• Email addresses: Retained while account/order exists; deletable on request
• Download tokens: Expire after 24 hours; automatically cleaned up
• Analytics data: Retained per Microsoft Clarity's retention policy

5. Your Rights

Under applicable law (GDPR, India's DPDP Act, etc.), you may have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion (subject to legal retention requirements)
• Object to processing
• Data portability

To exercise these rights, email privacy@thepeoplecraft.in

6. Cookies & Analytics

We use Microsoft Clarity for anonymous usage analytics (heatmaps, scroll depth, session recordings). Clarity uses cookies to track sessions. No personally identifiable information is sent to Clarity.

Essential cookies (session, CSRF protection) are used for site functionality. You can disable non-essential cookies in your browser settings.

7. Security

• HTTPS enforced on all pages
• Payment data handled entirely by Razorpay (PCI DSS compliant)
• Download tokens are hashed, time-limited, and single-use
• Database access restricted to application server
• Secrets managed via environment variables, never in code

8. Changes to This Policy

We may update this policy. Changes will be posted on this page with an updated "Last updated" date. Material changes will be communicated via email to recent customers.