Privacy policy
Effective: [Effective date]
This policy explains what personal data [Legal name of the business, e.g. AJ Academy] collects through bookvirasat.in and app.bookvirasat.in, why, and the choices you have. We follow the Digital Personal Data Protection Act, 2023.
What we collect
Contact details: your name and WhatsApp number (website forms and your account).
Account data: your password in hashed form only (we cannot read it), your language and program.
Your book: text, voice recordings, photos, covers and files you create or upload.
Payment records: amount, date, order and payment reference from our payment partner. We never receive your card number, UPI PIN or bank password.
Basic technical data: sign-in times, device type and error logs, used to keep the service secure.
Why we use it
To run your account and deliver the services you bought; to give mentor feedback; to send reminders and updates you agreed to; to prevent fraud and misuse; to meet legal, tax and accounting duties.
We do not sell your personal data, and we do not use your book in our marketing without your separate written consent.
Who processes it for us
Cloudflare (hosting, database and file storage); our AI provider, which processes the text you send to the writing assistant to return a response under commercial terms [confirm: not used to train models]; payment partners such as Razorpay or Instamojo; WhatsApp messaging provider [name] for reminders; printers and publishing platforms only when you ask us to print or publish.
How long we keep it
Your account and book: until you delete them, plus up to [30] days in backups. Payment and tax records: as long as the law requires (usually 8 years). Website enquiries you did not follow up: up to [12] months.
Your rights
You can ask to see, correct, download or delete your personal data, withdraw consent for messages, or name someone to act for you. Write to [support email]. We reply within [30] days.
Grievance officer: [Name of grievance officer], [support email], [Registered address].
Security
Passwords are hashed, connections are encrypted (HTTPS), sign-in attempts are limited, and only staff who need access for your book can see it.
Children
Our paid services are for adults. A child may take part only with a parent or guardian who manages the account.
Changes
If we change this policy, we will update the date below and tell account holders about important changes.