Privacy Policy

1. Who we are

This site ("Swapnil Service Store") is operated by Swapnil Popat, based in India. This policy explains what personal information we collect from you, why we collect it, how we use it, and the choices you have.

2. Information we collect

• Order details: name, email, phone, city, optional company name and LinkedIn URL, requirement description, preferred slots and the items in your order.
• Payment confirmations: the Razorpay order ID, payment ID and signature verification status. We never see or store your card number, CVV, UPI PIN, OTP or banking credentials — those stay with Razorpay.
• Lead form submissions: name, contact info and the requirement details you share via the Custom Quote form.
• Account data (if you sign in): email and authentication identifiers managed by our backend (Lovable Cloud / Supabase).
• Email logs: message IDs, delivery status, bounce/complaint events, and unsubscribe state for transactional emails we send.
• Basic technical data: standard request logs (IP, user-agent, timestamps) needed for security, debugging and rate-limiting. We do not run third-party advertising or cross-site tracking.

3. Why we use it

• To process your order, verify payment and deliver the service you bought.
• To send transactional email — order receipts, scheduling, follow-up.
• To respond to your Custom Quote or support request.
• To keep the service secure, prevent fraud and meet legal obligations.
• To improve the service based on aggregate, non-identifying usage patterns.

We do not sell your personal information, and we do not use it for marketing/promotional email or third-party advertising.

4. Sub-processors we rely on

We share the minimum data necessary with the following providers:

• Razorpay — payment processing. Their privacy policy applies to data they collect from you directly during checkout.
• Lovable Cloud (Supabase) — database, authentication and serverless hosting for the application.
• Email delivery provider — for sending transactional emails (order receipts, account emails, custom-quote acknowledgements).
• Meeting platforms — Google Meet / Microsoft Teams / Zoom links shared with you for the actual session.

5. How long we keep data

Order and payment records are retained for as long as needed to meet accounting, tax and legal obligations (typically up to 8 years under Indian law). Lead submissions are kept until you ask us to delete them or for up to 24 months of inactivity, whichever is sooner. Email suppression and unsubscribe records are kept indefinitely so we honour your preference.

6. Security

We use HTTPS for all traffic, role-based database access, row-level security policies, and never expose payment secrets to the browser. Razorpay signature verification happens server-side before an order is marked PAID. No system is perfectly secure, so please use strong, unique passwords and keep your email account safe.

7. Cookies & local storage

We use essential cookies and browser local storage only — for example, to remember the items in your cart and to keep you signed in. We do not use third-party advertising cookies or cross-site tracking pixels.

8. Your rights

You can ask us to access, correct or delete personal information we hold about you, or to stop sending you non-essential email at any time. Transactional emails contain a one-click unsubscribe link in the footer. For any other request, write to us via the Contact page — we'll respond within a reasonable time.

9. Children

The Service is intended for users aged 18 and above. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

10. International transfers

Our hosting and email providers may store data in regions outside India. Where that happens, we rely on the provider's standard contractual safeguards and only share the minimum data needed.

11. Changes to this policy

We may update this policy as the service evolves. The "Last updated" date at the top reflects the most recent version. Major changes will be communicated by email or a prominent notice on the site.

12. Contact

For any privacy question or request, reach us via the Contact page.