What we hold, and why.

The short version

We collect only what we need to send you a book and answer you. We do not sell your data, we do not run advertising trackers, and we do not share your details with anyone beyond the services required to fulfil your order.

What we collect

When you place an order: your name, email address, phone number and postal address. When you create an account: your email address, phone number and a password, stored only as a one-way cryptographic hash that can never be read back. When you join the pre-launch list: your name, email address and phone number. If you sign in with Google, Google shares your name and email address with us; we keep only the email address.

Why we hold it

To take payment, deliver your order, issue your proforma invoice, and contact you about that order. To answer you if you write to us.

We do not use your details for marketing unless you have asked us to.

Who else sees it

Razorpay, to process your payment, governed by Razorpay’s own privacy policy. Our email delivery provider, which carries your order confirmation and proforma invoice to your inbox. Our hosting provider, which stores the database. A courier, which receives your name, address and phone number in order to deliver your book. Nobody else.

• Your card, UPI and bank details are handled entirely by Razorpay and never reach our servers.
• Your email address is never displayed publicly and is never sold or shared for marketing.
• We do not use advertising or cross-site tracking cookies. The only cookie we set keeps you signed in to your account.

How long we keep it

Order and proforma records are kept for as long as tax and accounting law requires. Account and pre-launch list entries are removed once you ask.

Your rights

You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Write to innotech1delhi@gmail.com and we will respond within a reasonable period.

Security

Payments are verified cryptographically. Passwords are stored only as salted hashes, and the administrative area is restricted to authorised accounts. The database is not publicly reachable.