NavKalp operates this website. We are the Data Fiduciary for the personal data described below under India’s Digital Personal Data Protection Act, 2023.
1. What we collect
You give us, at checkout
- your name;
- your email address — this is what we deliver your purchase to, so it is required;
- your phone number — optional; we ask for it only so we can reach you if a delivery email bounces.
Created by the purchase itself
The product you bought, the amount, the currency, the payment status, the Razorpay order and payment identifiers, and a unique access token for your download link.
Collected automatically
Your IP address, which we record briefly to rate-limit checkout and download requests — a security measure that stops automated abuse of the site. Our hosting provider also keeps standard server logs (IP address, browser type, pages requested).
Advertising identifiers
If you arrived from a Meta (Facebook or Instagram) ad, we store the click identifier attached to your visit and an event identifier, so a purchase can be matched back to the ad that produced it. See section 5.
We never collect your card, UPI or bank details. Those are entered inside Razorpay’s own checkout and never reach our servers.
2. Children’s data
Our products are made for children, but they are sold to adults. We collect personal data only about the adult making the purchase. We do not knowingly collect any personal data about a child, and we do not ask you to tell us anything about your children in order to buy. If you believe a child has provided us personal data, write to support@navkalp.co.in and we will delete it.
3. Why we use it
- To take your payment and deliver the product you paid for.
- To email you your access link, and to re-send it if you ask.
- To answer your support emails.
- To detect and prevent fraud and abuse, and to keep the site available.
- To measure and improve our advertising (see section 5).
- To meet legal, tax and accounting obligations.
We do not sell your personal data. We do not add you to a marketing mailing list from a purchase alone; the only emails we send you are about your order and your access, unless you separately opt in.
4. Who we share it with
We use a small number of service providers, each of which processes data only to provide their service to us:
| Provider | What they handle |
|---|---|
| Razorpay Software Pvt Ltd | Payment processing. Receives your name, email, phone and the amount; holds your payment instrument details, which we never see. |
| Supabase Inc. | Our database and the private storage your product is delivered from. |
| Resend | Sends your delivery and support emails. Receives your name, email and access link. |
| Vercel Inc. | Hosts the website and keeps server logs. |
| Meta Platforms | Receives purchase events for ad measurement, where advertising is active. |
Some of these providers process data on servers outside India. We rely on their contractual commitments to protect it. We may also disclose data where the law requires it.
5. Advertising, cookies and tracking
We advertise on Meta (Facebook and Instagram). Where advertising is running, we use the Meta Pixel and Meta’s Conversions API to measure which ads lead to purchases. This means a purchase event — including a hashed form of your email address, and the click identifier from the ad you clicked — may be sent to Meta and matched to your Meta account. Meta uses it to report on and optimise our campaigns, and its own use of that data is covered by Meta’s privacy policy. We may also use a web-analytics provider to understand how the site is used in aggregate.
You can limit ad tracking through your browser’s cookie settings and through your ad preferences on Meta. Blocking these does not prevent you from buying — checkout and delivery do not depend on them.
6. How long we keep it
We keep your order record — including your name, email and access token — for as long as your access link remains valid, and for as long as we are required to retain transaction records for tax and accounting purposes under Indian law. Because your access link does not expire, deleting your order record also ends your access to the files you bought; we will tell you that before acting on a deletion request. Rate-limiting records are short-lived and are discarded automatically.
7. Your rights
Under the DPDP Act you may ask us to:
- tell you what personal data of yours we hold and who we have shared it with;
- correct or complete anything inaccurate;
- erase your personal data, where we are not required to keep it;
- note a nomination — someone who can exercise these rights on your behalf if you are unable to.
Write to support@navkalp.co.in from the email address you used at checkout. We will respond within a reasonable period, normally within 30 days.
8. Security
Your order data is held in a database that is not readable by the public, and product files are stored privately and served only through short-lived signed links. Your access link is a long random token that cannot be guessed. No system is perfectly secure, and you are responsible for keeping your access link private.
9. Grievance redressal
For any question, request or complaint about your personal data — including the rights in section 7 — write to support@navkalp.co.in. The same address handles data questions and order support, so you never have to work out which one to use. We acknowledge every message and aim to resolve grievances within 30 days.
If you are not satisfied with our response, you may complain to the Data Protection Board of India.
10. Changes
We will update this page when our practices change, and revise the effective date above. See also our Terms & Conditions.