Privacy Policy

Effective date: {{EFFECTIVE_DATE}} · Version: 1.0

This Privacy Policy explains how {{LEGAL_ENTITY_NAME}} ("we", "us"), operating PrasuNova Showroom, collects and processes personal data, in accordance with India's Digital Personal Data Protection Act, 2023 (DPDP Act).

1. Who we are (Data Fiduciary)

{{LEGAL_ENTITY_NAME}}, {{REGISTERED_ADDRESS}}. We are the Data Fiduciary for the personal data described below.

2. What we collect

Shop owner account data: email address, hashed password, shop name, and shop URL slug.
Content you upload: tile images and their metadata.
Visitor room photos: images uploaded by end visitors for tile preview are processed to generate masks and are automatically deleted from storage after 30 days. No visitor account or identifying information is stored.

3. Purpose & legal basis

We process shop-owner personal data on the basis of your consent, given at registration, solely to create and operate your account and your public showroom. We practise data minimisation and do not use your data for unrelated purposes.

4. Your rights (Data Principal)

Access & portability: download all your data as JSON from your dashboard.
Correction: edit your shop name in the dashboard; for other corrections contact the Grievance Officer.
Erasure: delete your account from the dashboard. It is soft-deleted immediately and permanently erased after a 30-day grace period.
Withdraw consent: withdrawing consent deletes your account (consent is our basis for processing).

5. Retention

Account data is retained until you delete your account (then purged after 30 days). Visitor room photos and masks are purged after 30 days.

6. Security

Passwords are hashed (bcrypt). Data is transmitted over HTTPS. Database credentials are held only on our backend server and never exposed to browsers or public code.

7. Sharing & processors

We use infrastructure processors (hosting, email delivery, object storage) solely to run the service. We do not sell personal data.

8. Grievance Officer

As required by the DPDP Act, you may contact our Grievance Officer for any privacy concern or to exercise your rights:
{{GRIEVANCE_OFFICER_NAME}} — {{GRIEVANCE_EMAIL}}. We aim to respond within the timelines prescribed by law.

9. Changes

We will email registered shop owners when this policy materially changes and update the version above.