Privacy Policy — Noyabhi

1. Who We Are

Noyabhi (noyabhi.com) is a personal art gallery and shop. This privacy policy explains what personal data we collect when you visit or make a purchase on our website, and how we use and protect that data.

2. What Data We Collect

We collect the following categories of personal data:

Account data — your name and email address, obtained via Google Sign-In when you choose to log in.
Order data — shipping name, email, phone number, and postal address when you place an order.
Payment data — payment is processed securely by Razorpay. We do not store your card details; we only record the Razorpay order and payment IDs.
Usage data — basic server logs (page visits, errors) for troubleshooting purposes. No third-party analytics are used.

3. How We Use Your Data

To authenticate you when you log in with Google.
To process and fulfil your orders and send order confirmations.
To respond to any support or enquiry messages you send us.

We do not sell, rent, or share your personal data with any third parties for marketing.

4. Third-Party Services

We use the following third-party services that may process your data:

Google OAuth — for sign-in. Governed by Google's Privacy Policy.
Razorpay — for payment processing. Governed by Razorpay's Privacy Policy.
Supabase — for database storage, hosted in a secure cloud environment.
Vercel — for website hosting and edge delivery.

5. Data Retention

We retain your account and order data for as long as your account exists or as required to fulfil orders and comply with applicable legal obligations. You may request deletion of your account data at any time by contacting us.

6. Your Rights

You have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your data.
Withdraw consent for data processing at any time.

To exercise any of these rights, please contact us at the email address below.

7. Cookies & Sessions

We use a single secure, HTTP-only session cookie to keep you logged in. This cookie does not track you across other websites and is deleted when you sign out or your session expires. We do not use advertising or tracking cookies.

8. Contact

If you have any questions about this privacy policy or wish to exercise your data rights, please reach out via the contact information on our homepage.

2. What Data We Collect

We collect the following categories of personal data:

Account data — your name and email address, obtained via Google Sign-In when you choose to log in.

Order data — shipping name, email, phone number, and postal address when you place an order.

Payment data — payment is processed securely by Razorpay. We do not store your card details; we only record the Razorpay order and payment IDs.

Usage data — basic server logs (page visits, errors) for troubleshooting purposes. No third-party analytics are used.

4. Third-Party Services

We use the following third-party services that may process your data:

Google OAuth — for sign-in. Governed by Google's Privacy Policy.

Razorpay — for payment processing. Governed by Razorpay's Privacy Policy.

Supabase — for database storage, hosted in a secure cloud environment.

Vercel — for website hosting and edge delivery.