Privacy Policy

1. Introduction

This Privacy Policy ("Policy") explains how ArthaSutra, a proprietary concern operated by Ajay Chaudhary ("we", "us", "our", or "ArthaSutra"), collects, uses, discloses, and protects information from users ("you", "your", or "user") of our website arthasutra.site (the "Website") and related services (collectively, the "Services").

We are committed to protecting your privacy and handling your personal information with care. This Policy describes our privacy practices in accordance with applicable Indian laws, including the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our practices, please do not use our Services.

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide when using our Services:

• Account Information: Name, email address, password when you create an account
• Payment Information: Billing details processed through our payment gateway (*******). We do not store credit/debit card numbers
• Profile Information: Additional details you choose to add to your profile
• Communications: Information in emails, WhatsApp messages, or support requests
• Reviews and Feedback: Content you submit as reviews or feedback
• Survey Responses: Information provided in optional surveys or research

2.2 Information Collected Automatically

When you use our Services, we automatically collect certain technical information:

• Usage Data: Pages viewed, features used, time spent, click patterns
• Device Information: Device type, operating system, browser type and version
• Log Data: IP address, access times, referring URLs
• Analytics Data: Aggregated usage patterns via Vercel Analytics
• Authentication Data: Login timestamps and security-related events via Supabase

2.3 Information from Third-Party Services

We integrate with third-party services that may collect information:

• Supabase: Authentication and database services
• Cloudinary: File storage and delivery
• *******: Payment processing
• Vercel: Hosting and analytics
• Formspree: Contact form submissions

2.4 Information We Do Not Collect

We do not knowingly collect:

• Information from children under 18 years of age
• Sensitive personal data such as health records, biometric data, or genetic information
• Government identification numbers except as required for tax compliance

3. How We Use Your Information

3.1 Primary Uses

We use collected information to:

1. Provide, maintain, and improve our Services
2. Process transactions and send transaction-related communications
3. Authenticate users and ensure account security
4. Deliver purchased content and manage subscriptions
5. Respond to support requests and customer service inquiries
6. Send important service announcements and updates
7. Enforce our Terms of Service and other policies
8. Comply with legal obligations and regulatory requirements

3.2 Communications

We may use your information to communicate with you about:

• Service-related announcements (essential communications)
• Security alerts and account notifications
• Customer support responses
• Updates to our policies or terms

Note: We do not send promotional marketing emails. All communications are service-related.

3.3 Analytics and Improvements

We use aggregated and anonymized data to:

• Understand usage patterns and user preferences
• Improve our content and Services
• Develop new features and offerings
• Monitor and analyze trends
• Measure the effectiveness of our Services

4. Information Sharing and Disclosure

4.1 We Do Not Sell Your Information

4.2 Service Providers

We share information with trusted third-party service providers who assist us in operating our Services:

• Supabase: Authentication and database management
• Cloudinary: Content delivery and storage
• *******: Payment processing and transaction management
• Vercel: Website hosting and analytics
• Formspree: Form processing
• WhatsApp: Customer support communications

These providers are contractually obligated to protect your information and use it only for providing services to us.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal requests, including:

• Court orders, subpoenas, or other legal process
• Government or regulatory authority requests
• To protect our rights, property, or safety
• To prevent fraud or illegal activities
• To enforce our Terms of Service

4.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control.

4.5 Aggregated Information

We may share aggregated, anonymized information that does not identify you personally for research, analysis, or business purposes.

5. Data Security

5.1 Security Measures

We implement reasonable security measures to protect your information, including:

• Encryption of data in transit using SSL/TLS protocols
• Secure authentication through Supabase
• Regular security assessments and updates
• Access controls limiting employee access to personal information
• Secure storage of files through Cloudinary
• Regular backups and disaster recovery procedures

5.2 Your Responsibilities

You can help protect your information by:

• Using strong, unique passwords
• Not sharing your login credentials
• Logging out when using shared devices
• Promptly notifying us of any security concerns
• Keeping your account information up to date

5.3 No Absolute Security

While we strive to protect your information, no security system is impenetrable. We cannot guarantee absolute security of your data. By using our Services, you acknowledge and accept this inherent risk.

6. Data Retention

6.1 Retention Periods

We retain your information for as long as necessary to:

• Provide our Services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Maintain business records for tax and accounting purposes

6.2 Specific Retention Periods

• Account Data: Retained while account is active plus 15 days after deletion request
• Transaction Records: 7 years for tax compliance
• Support Communications: 2 years from last interaction
• Usage Analytics: 1 year in identifiable form, then aggregated
• Reviews: Indefinitely unless removal requested

6.3 Deletion Requests

Upon account deletion request, we will delete or anonymize your personal information within 15 days, except where retention is required for legal, tax, or legitimate business purposes.

7. Your Rights and Choices

7.1 Access and Correction

You have the right to:

• Access your personal information
• Correct inaccurate or incomplete information
• Update your account details
• Request a copy of your data in a portable format

7.2 Deletion and Restriction

You may request:

• Deletion of your account and associated data
• Removal of specific content you've submitted
• Restriction of processing in certain circumstances

7.3 Communications Preferences

Since we only send service-related communications, you cannot opt out of these essential messages while maintaining an account. To stop receiving communications, you must close your account.

7.4 How to Exercise Your Rights

To exercise any of these rights, contact us at:

• Email: support@arthasutra.site
• Include "Privacy Request" in the subject line
• Provide sufficient information to verify your identity
• Specify the right you wish to exercise

We will respond to your request within 30 days.

8. Cookies and Tracking Technologies

8.1 Essential Cookies

We use essential cookies for:

• Authentication and maintaining logged-in sessions
• Security features and fraud prevention
• Remembering your preferences
• Ensuring website functionality

8.2 Analytics

We use Vercel Analytics to understand usage patterns. This data is aggregated and does not personally identify you.

8.3 No Third-Party Tracking

We do not use third-party advertising cookies or tracking pixels. We do not participate in behavioral advertising networks.

8.4 Do Not Track

We respect Do Not Track browser settings. When DNT is enabled, we limit data collection to essential functions only.

9. International Data Transfers

9.1 Data Location

Your data may be processed and stored in various locations by our service providers:

• Supabase: Multiple global regions
• Cloudinary: Global CDN network
• Vercel: Global edge network

9.2 Data Protection

When data is transferred internationally, we ensure appropriate safeguards are in place through:

• Contractual clauses with service providers
• Ensuring providers maintain adequate security standards
• Compliance with applicable data protection laws

10. Children's Privacy

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete such information promptly.

If you believe we have collected information from a child, please contact us immediately at support@arthasutra.site.

11. Third-Party Links

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:

• Posting the updated Policy with a new effective date
• Sending a notice to registered users via email
• Displaying a prominent notice on our Website

Your continued use of our Services after such changes constitutes acceptance of the updated Policy.

13. Contact Information

13.1 Data Controller

ArthaSutra
Operated by: Ajay Chaudhary
Address: Village Dastoi, Post Sarawa, District Hapur, Uttar Pradesh, PIN 245101
Email: ajay@arthasutra.site
Phone: +91 6398443200

13.2 Privacy Inquiries

For privacy-related questions or concerns:

• Email: info@arthasutra.site
• Subject Line: "Privacy Inquiry"
• Response Time: Within 30 days

13.3 Grievance Officer

In accordance with Information Technology Act, 2000:
Name: Ajay Chaudhary
Email: ajay@arthasutra.site
Response Time: 24-48 hours for acknowledgment