Privacy Policy

iDigital Store is an online store for digital products operated by D. Chandra. For this policy, iDigital Store decides why and how your personal data is processed.

This policy covers this website, customer accounts, checkout, digital downloads, support and the affiliate programme. It does not cover third-party websites or services we link to.

We only ask for what is needed for the purposes below.

Directly from you (sign-up, checkout, contact and support forms, affiliate registration and profile), automatically when you use the site (cart, sign-in session, affiliate link clicks and, where enabled, analytics), and from our payment provider (payment status and reference only).

Payments are processed by Razorpay. Card, UPI, netbanking and wallet details are entered on Razorpay's secure checkout and are not received or stored by iDigital Store. We receive only the payment ID, order reference, amount and status. Razorpay processes payment data under its own privacy policy.

When you download a purchase we record the download count, time and expiry so download limits can be applied. Download links are tied to your order.

If you join as an affiliate we keep your name, email, mobile number, profile details and the payout details you provide (sensitive payout destination details such as account numbers and UPI IDs are protected with additional technical safeguards and shown masked), plus your links, clicks, attributed orders, commissions and payouts. When a visitor clicks an affiliate link, a reference is saved in their browser and a click record is stored so an eligible purchase can be credited. Affiliates see order totals and commission amounts for their sales, not customers' contact details.

We send service emails (sign-in codes, order confirmation, download access, payment failed, refunds, support and affiliate account updates) through our email provider. Where WhatsApp messaging is enabled, order and affiliate updates are sent to the mobile number you gave us using Meta's WhatsApp Business Platform. These are service messages linked to your order or account, not bulk marketing.

We use browser storage for essentials such as your cart, sign-in session, consent choice and affiliate reference. Analytics (Google Analytics) and advertising measurement (Meta Pixel and Meta Conversions API) are used only after you opt in through Cookie Preferences. See the Cookie Policy.

We share data only with providers who help run the store, for the purposes above:

• Razorpay — payment processing
• Google Firebase — accounts, sign-in and data storage
• Hostinger — website hosting and email delivery
• Google Sheets — internal operational copies of order, payment, customer, support and affiliate records, where enabled
• Meta (WhatsApp Business Platform, Pixel, Conversions API) — where enabled; customer identifiers sent for purchase measurement are hashed
• Google Analytics — site usage statistics, where enabled

Each provider also holds the data it processes under its own terms and privacy policy; this policy describes iDigital Store's own records. We do not sell personal data. We may disclose data where required by law or to protect against fraud.

We use access controls, server-side handling of credentials, encrypted connections and signed, limited download links. No system is completely secure, and we will act on any personal data breach as required by law.

We keep personal data only for as long as it is needed for the purposes above or to meet legal, accounting, tax, fraud-prevention and dispute-handling requirements. Account data is kept while your account is active. Order, payment and commission records are kept for as long as needed for support, disputes and tax/accounting obligations. Retention is set per category of record and reviewed periodically; records are not all deleted automatically after one fixed period.

Subject to applicable law, including the Digital Personal Data Protection Act, 2023, you can:

• ask for a summary of the personal data we hold about you and how it is used;
• correct, complete or update your data (many details can be changed in your account);
• ask us to erase your data or close your account. Requests are reviewed manually and may need identity verification, so erasure is not instant. Some records may be kept or anonymised where needed for accounting, tax, fraud and security, legal obligations, disputes or proof of how your request was handled. Copies held in connected internal spreadsheets or by service providers are handled separately and are not removed automatically;
• withdraw consent where processing is based on consent (for example analytics or marketing cookies) — this does not affect processing already done;
• nominate another person to act for you in case of death or incapacity;
• raise a grievance with us, and then with the Data Protection Board of India if unresolved.

Signed-in customers can submit a request from My Account → Privacy & Data. You can also use Grievance & Privacy Requests or write to our Support page.

This store is meant for adults. We do not knowingly collect personal data from children under 18. If you believe a child has given us data, contact us and we will delete it.

We may update this policy when our services or the law change. The date at the top shows the latest version.