Privacy Policy

1. Overview

We take your privacy seriously. This policy covers:

• What personal data we collect and why
• How your data is stored and protected
• Who we share your data with
• Your rights regarding your personal data

This policy applies to all data collected through our website (punjabit.in), checkout process, customer dashboard, and any communications with us.

2. Data We Collect

We collect the following categories of personal data:

Identity & Contact Data

• Full name
• Email address
• Phone number

Transaction Data

• Products purchased
• Order ID and payment reference
• Amount paid
• Date and time of purchase

Technical Data

• IP address
• Browser type and version
• Device information
• Pages visited and time spent

Account Data

• Dashboard login activity (OTP requests and verifications)
• Profile information you update
• License keys assigned to your account

3. How We Collect It

We collect data through:

• Direct interactions - when you fill in a form, make a purchase, or contact us.
• Automated technologies - cookies and server logs that record technical data when you visit our site.
• Payment processors - Razorpay shares transaction confirmation data with us after a successful payment.
• Dashboard activity - login events, profile updates, and tool access are logged for security purposes.

4. How We Use Your Data

We use your personal data for the following purposes:

• Order fulfilment - to process your purchase and deliver your license key.
• Account management - to create and maintain your customer dashboard.
• Authentication - to send OTP codes for secure login.
• Customer support - to respond to enquiries and resolve issues.
• Transactional emails - to send payment confirmations, license keys, and account notifications.
• Security & fraud prevention - to monitor for suspicious activity and protect your account.
• Legal compliance - to meet our obligations under applicable laws, including GST invoicing.

We do not use your data for third-party advertising or sell your data to any third party.

5. Sharing Your Data

We only share your personal data with:

• Razorpay - our payment processor, to handle transactions securely. Their privacy policy applies to payment data.
• Email service providers - to deliver transactional emails (order confirmations, OTPs, license keys).
• Legal authorities - if required by law, court order, or to protect our legal rights.

We do not sell, rent, or trade your personal data to any marketing company or data broker.

6. Payment Data

All payment transactions are processed by Razorpay. We do not store your credit card number, debit card number, CVV, or any sensitive payment credentials on our servers.

We retain only the transaction reference ID, amount, and status for order management and GST compliance purposes.

Razorpay is PCI-DSS compliant. You can review their privacy policy at razorpay.com/privacy.

7. Cookies

We use the following types of cookies:

• Session cookies - to keep you logged in to your dashboard during a session. These are deleted when you close your browser.
• Functional cookies - to remember your preferences (e.g. selected tool quantity).

We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

You can disable cookies in your browser settings. Note that disabling session cookies will prevent you from logging in to your dashboard.

8. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy:

• Account data - retained while your account is active and for up to 3 years after last activity.
• Transaction data - retained for 7 years to comply with Indian GST and accounting regulations.
• Activity logs - retained for up to 1 year for security purposes.
• OTP tokens - automatically deleted after 24 hours.

You may request deletion of your account data at any time (see Your Rights below). Transaction data required for legal compliance cannot be deleted.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

• OTP-based authentication - no passwords stored.
• Session tokens that expire automatically.
• All payment processing handled by PCI-DSS compliant Razorpay.
• Database access restricted to authorised personnel only.
• Activity logging for all administrative actions.

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

10. Your Rights

You have the following rights regarding your personal data:

• Access - request a copy of the personal data we hold about you.
• Correction - update incorrect or incomplete data via your dashboard profile page.
• Deletion - request deletion of your account and associated personal data (subject to legal retention requirements).
• Portability - request your data in a structured, machine-readable format.
• Objection - object to processing of your data in certain circumstances.

To exercise any of these rights, email us at info@punjabit.in with your registered email address and the nature of your request. We will respond within 30 days.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policy of any third-party site you visit.

12. Children's Privacy

Our services are not directed at or intended for use by anyone under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised date. We encourage you to review this policy periodically.

For significant changes, we will notify registered users via email.

14. Contact Us

For any privacy-related questions, requests, or concerns: