Privacy Policy

Overview

Vedastra operates this website to sell digital college project kits (source code and setup guides), process payments, and deliver purchases to your account library. This policy explains how we collect, use, and protect your personal data.

What We Collect

Account Data: Name, email address, session and sign-in data, and OAuth provider identifiers when you sign in with Google or GitHub.

Order Data: Cart contents, purchase records, payment confirmations, and access entitlements for projects you buy.

Contact & Support Data: If you use our contact form, we collect the name, email, topic, and message you submit. Messages are stored in our database and forwarded to our team by email.

Wallet & Referrals: Referral codes you enter, wallet balance and transaction history, and UPI payout details you provide for wallet redemptions (stored using encryption and hashing on our servers).

Technical Logs: Server logs, diagnostics, and security-related events needed to run and protect the site.

Operational Data: Request data we process to deliver pages, enforce access to purchased content, and detect abuse. We do not use a separate marketing or behavioral analytics product on the public site.

Payments

Payments are processed by Razorpay. We receive only the transaction details needed to confirm orders and fulfill access. We do not store full card or UPI credentials on our servers.

Downloads and Fulfillment

Purchased project files are delivered through secure server-side systems, including release assets hosted on GitHub. Download access is tied to your account and is not exposed as public links in client-side code.

How We Use Information

We use your data to:

• Authenticate users and maintain sessions
• Process transactions and grant library access
• Operate wallet and referral features you choose to use
• Respond to contact and support requests
• Prevent fraud, abuse, and security incidents
• Keep the platform reliable and secure

Cookies

We use cookies and similar technologies primarily to keep you signed in, remember preferences (such as theme), and protect the service. We do not use cookies for third-party advertising or behavioral analytics. You can control cookies through your browser settings; disabling session cookies may prevent sign-in.

Legal Basis for Processing

We process data based on:

• Your consent (for example, when you submit the contact form)
• Contractual necessity (orders and account access)
• Legal obligations
• Legitimate interests such as fraud prevention and service security

Sharing

We do not sell personal data. We may share data with:

• Payment providers (Razorpay)
• Authentication providers (Google, GitHub)
• Email delivery (Resend, for contact form notifications)
• Hosting, database, and infrastructure providers
• GitHub (for secure delivery of purchased project artifacts)
• Legal authorities when required by law

Third-Party Services

Third-party providers operate under their own privacy policies. We are not responsible for their independent practices, but we share only what is needed for each integration to work.

Data Retention and Security

We retain data as long as necessary for service operation, legal compliance, support, and fraud prevention. Contact form messages are kept for support history unless deletion is requested. We use industry-standard security measures, but no system is completely secure.

Your Rights

You may request access, correction, or restriction of your data by contacting us. Identity verification may be required.

Account Deletion

There is no self-service account deletion in the app today. You may request deletion by emailing us or using the contact page. Some records (for example, completed orders or fraud-prevention logs) may be retained where required by law.

Communication

We send service-related messages when needed—for example, to respond to your contact form submission or to support orders and your account. We do not run a marketing newsletter on the public site.

Children

This platform is not intended for users under 13. If such data is identified, it will be removed as required by law.

Jurisdiction

This Privacy Policy is governed by applicable laws of India.

Changes

We may update this policy periodically. Continued use of the platform after updates indicates acceptance of the revised policy.

Contact

For privacy questions, use our contact page or email support@vedastra.io.