Introduction
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and make purchases. We are committed to protecting your privacy and handling your data in an open and transparent manner.
By using our Service, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our Service.
Information We Collect
Payment Information
When you make a purchase, payment information is collected and processed by Razorpay Payment Gateway. We do not store your complete credit/debit card details, CVV, or banking passwords on our servers. Razorpay handles all sensitive payment data in compliance with PCI DSS standards.
Transaction Information
We collect and store:
- Order ID and Payment ID from Razorpay
- Transaction amount and timestamp
- Product purchased and download details
- Email address (if provided during payment)
- Payment status (successful, failed, cancelled)
- Receipt filename and generation timestamp
Download Security Tokens
For secure file delivery, we generate temporary download tokens that:
- Expire after 10 minutes for security
- Can only be used once to prevent unauthorized access
- Are linked to verified purchases only
- Record usage status and timestamps for fraud prevention
Automatically Collected Information
When you visit our website, we may automatically collect:
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance user experience, analyze website traffic, and understand user behavior. You can control cookies through your browser settings.
Account & Authentication Information
No Account Required for Purchasing
You can purchase and download our digital products without creating an account. We only require basic payment information processed through Razorpay to complete your transaction.
Account Data We Collect
If you choose to create an account, we collect:
- •Email address (for login and communication)
- •Full name (optional, for personalization)
- •Encrypted password (we use industry-standard hashing)
- •Account creation date and last login timestamp
Data Security & Confidentiality
We take the security of your account data extremely seriously:
- •All passwords are encrypted using bcrypt hashing with salt
- •Account data is stored in secure, encrypted databases (Supabase)
- •We implement row-level security policies to protect your data
- •Your data is never shared with third parties for marketing purposes
- •We use secure authentication tokens with automatic expiration
- •All data transmission is encrypted using SSL/TLS protocols
Authentication Methods
We use Supabase Authentication, a secure and reliable authentication service that provides email/password authentication with built-in security features including rate limiting, email verification, and password reset functionality.
Account & Authentication
We believe in giving you control over your data. Creating an account is completely optional, and you can make purchases without signing up.
How We Use Your Information
We use the collected information for:
Payment Processing
To process and verify your payments securely through Razorpay
Order Fulfillment
To deliver digital products via secure download links after successful payment
Security & Fraud Prevention
To maintain transaction records, generate secure download tokens, and prevent fraudulent activities
Receipt Generation & Record Keeping
To generate payment receipts and maintain transaction records for accounting and compliance purposes
Customer Support
To respond to queries, verify purchases, and resolve issues using order and payment information
Service Improvement
To analyze usage patterns, track product popularity, and improve our platform experience
Data Sharing and Disclosure
We Do Not Sell Your Data
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
Payment Service Providers
We share necessary transaction information with Razorpay Payment Gateway for processing payments. Razorpay's use of your data is governed by their Privacy Policy.
Third-Party Service Providers
We may share data with:
- Cloud hosting providers (for data storage)
- Analytics services (for usage analysis)
- Customer support tools
These third parties are contractually obligated to use your information only for providing services to us and maintain confidentiality.
Legal Requirements
We may disclose your information if required by law, court order, or government regulations, or to protect our rights, property, or safety.
Data Security
We implement industry-standard security measures to protect your information:
Encryption
SSL/TLS protocols for all transactions
Secure Storage
Encrypted databases with restricted access
Access Controls
Limited employee access to personal data
PCI Compliance
Razorpay PCI DSS compliant infrastructure
Note: While we implement strong security measures, no method of transmission over the internet is 100% secure. We strive to protect your data but cannot guarantee absolute security.
Data Retention
We retain your transaction information for as long as necessary to:
Once data is no longer needed, we will securely delete or anonymize it.
Your Rights and Choices
Access and Correction
Request access to your personal data and ask us to correct inaccuracies
Data Deletion
Request deletion of your information, subject to legal retention requirements
Opt-Out
Opt-out of receiving marketing communications via contact or unsubscribe links
Cookie Management
Control cookies through your browser settings (may affect functionality)
Data Portability
Request a copy of your data in a machine-readable format
To exercise these rights, contact us at purebuay@gmail.com
Children's Privacy
Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a minor, please contact us immediately for removal.
Compliance with Indian Laws
We comply with the Information Technology Act, 2000, and related rules including:
- •IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
- •IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021
- •Reserve Bank of India (RBI) guidelines for payment processing
Policy Updates
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The "Last Updated" date at the top indicates when changes were made. Continued use of the Service after changes constitutes acceptance of the updated policy.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Business Name
PureBuay
Address
182-A, Jaisingpura Khor Road
Jaipur, Rajasthan
Phone (WhatsApp Only)
+91 7877486743
By using our Service, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.