Privacypolicy.

Who we are

Indev Digital (“Indev”, “we”) is a software studio based in Kolkata, India. We decide how personal data on this site is used, which makes us the Data Fiduciary under India's Digital Personal Data Protection Act, 2023.

Registered address: 353 Madhurdha, Hussainpur Main Road, Kolkata, West Bengal 700107, India. Email: info@indevdigital.com.

What we collect

Account

Name, email address and avatar from Google or GitHub when you sign in, plus any profile details you save.

Orders

Items in your cart, order totals, payment status, invoices and your library of purchased products.

Billing details

The billing name and address you enter at checkout and, if you buy as a business, its legal name and GSTIN. We print them on your GST invoice, use them to work out the tax, and keep your latest details to fill in your next checkout.

Messages and bookings

Your name, email, company, message, guest emails, time zone and chosen meeting slot.

Licences and code access

A licence key for each product you buy, printed with your name, order and invoice number in the code we deliver. Access tokens you create (we keep only a hash of each), and a log of every install or copy: the product, licence, token, IP address, tool used and time.

Reviews

Ratings and written reviews you post on product pages, shown with your display name.

Device and usage

Browser type, pages visited, referring page and basic logs we need to run and secure the site.

How we use it

We use your data only for the purpose you gave it to us for, or where the law allows it:

Running your account

Signing you in, keeping your cart and giving you access to the code of what you bought in My Library and through the shadcn CLI. We use the install log to stop licences and tokens being shared.

Completing orders

Processing payment, issuing invoices, meeting tax obligations and handling refunds.

Talking to you

Replying to messages, confirming calls and sending order or booking emails. No marketing email without your consent.

Keeping the site safe

Fixing bugs, measuring performance and preventing fraud or abuse.

Payments

Checkout is handled by Razorpay. Your card, UPI or net-banking details go straight to Razorpay and never reach our servers.

Razorpay tells us the payment ID, amount, method type and status so we can confirm your order, issue an invoice and process any refund. Razorpay's own privacy policy applies to the data it handles.

Who we share with

We never sell personal data. We share it only with the services that help us run Indev, and only as much as they need:

Razorpay

Payment processing and refunds.

Google, GitHub

Sign-in, only if you choose it.

Hosting and email

The servers, database, file storage and email delivery that power the site.

Authorities

When Indian law, a court or a government agency requires it, or to protect our rights.

Cookies and storage

We use only the cookies and browser storage the site needs to work: keeping you signed in, remembering your cart and saving basic preferences. We don't use advertising or cross-site tracking cookies.

You can clear or block these in your browser, but sign-in and checkout will stop working.

How long we keep it

Account

Until you delete your account or ask us to.

Orders and invoices

As long as Indian tax and accounting law requires, even after your account is deleted.

Messages and bookings

Until the conversation or project is closed, then for a reasonable period for follow-up.

Logs

Short-term, for security and debugging.

Security

Traffic is encrypted over HTTPS, code is only delivered to signed-in buyers or with an access token you can revoke at any time, and access to our systems is limited to people who need it. No system is perfectly secure. If a breach affects your data, we will tell you and the Data Protection Board of India as the law requires.

Your rights

You can ask us to:

Access

Get a summary of the personal data we hold and who we've shared it with.

Correct or update

Fix anything that's wrong or incomplete.

Erase

Delete your data, except records we must keep by law.

Withdraw consent

At any time, for anything we do based on consent.

Nominate

Name someone to use these rights for you if you die or can't act.

Email info@indevdigital.com from the address on your account. We may ask you to confirm who you are before we act.

Grievance officer

We acknowledge complaints within 48 hours and aim to resolve them within 30 days. If you're not satisfied, you can escalate to the Data Protection Board of India.

Children

Indev is not meant for anyone under 18. We don't knowingly collect data from children without a parent or guardian's verifiable consent. If you think we have, contact us and we'll delete it.

Storage outside India

Some of the services we use may store data on servers outside India. When they do, we only use providers with appropriate safeguards and follow any transfer restrictions set by the Government of India.

Changes

When the site, products or payment flow change, we'll update this page and the date at the top. For significant changes, we'll also email account holders.