Privacy Policy

1 Introduction

This Privacy Policy describes how Promota India ("we", "our", or "us"), a sole proprietorship operating from Sainik Colony, Bareilly, Uttar Pradesh, India, collects, uses, and protects your personal information when you visit our website or use our services.

This policy applies to our website and all digital services we provide. By using our services, you consent to the practices described in this document.

2 Information We Collect

We collect the following types of information:

Information you provide directly:

• Full name, business name, email address, phone number
• Billing information (processed and stored by Stripe — we do not store raw card details)
• Business details you share when onboarding for a service
• Messages or queries you send us via contact forms or email

Information collected automatically:

• IP address, browser type, operating system, device type
• Pages visited, time spent on pages, referring URLs
• Clicks, scrolls, and interactions on our website (via analytics tools)
• Cookies and similar tracking technologies (see Section 4)

Information from third parties:

• Aggregated audience insights from Meta and Google when you interact with our ads
• Basic profile info if you choose to sign in via a third-party login (e.g., Google)

3 How We Use Your Information

We use the information we collect to:

• Deliver and manage the services you have purchased
• Process payments and send billing receipts
• Send important service-related communications (updates, invoices, renewal reminders)
• Respond to your support requests and queries
• Improve our website, products, and services based on usage patterns
• Run targeted advertising campaigns (with your consent where required)
• Comply with applicable legal obligations

We will never send you unsolicited promotional emails without your consent. You can opt out of marketing communications at any time by clicking "Unsubscribe" in our emails or contacting us directly.

4 Cookies & Tracking

Our website uses cookies and similar tracking technologies to enhance your browsing experience and collect analytics data. The types of cookies we use:

• Essential cookies — Required for the website to function (session management, security). Cannot be disabled.
• Analytics cookies — Google Analytics tracks how visitors use our website (pages visited, session duration, traffic source). This data is anonymised and aggregated.
• Marketing cookies — Meta Pixel tracks user actions on our website to measure ad effectiveness and enable retargeting on Facebook & Instagram.
• Preference cookies — Remember your settings and choices across visits.

You can manage or disable cookies through your browser settings. Note that disabling certain cookies may affect website functionality. You can also opt out of Google Analytics tracking at tools.google.com/dlpage/gaoptout.

5 Third-Party Services

We use the following trusted third-party services to operate our business. Each has their own privacy policy:

• Stripe — Payment processing. Your payment data is handled directly by Stripe under PCI-DSS compliance. We never store your raw card details.
• Google Analytics — Website traffic and behaviour analysis. Data is anonymised and processed by Google.
• Meta Pixel (Facebook) — Conversion tracking and ad retargeting. Meta may use this data in accordance with their own data policy.
• Supabase — Cloud database for storing application data. Hosted on secure AWS infrastructure.
• Google Firestore — Cloud database for real-time application data. Hosted and secured by Google Cloud.

We ensure all third-party services we use adhere to industry-standard data security practices. We do not sell or rent your data to any third party.

6 Data Storage & Security

Your data is stored in secure cloud databases (Supabase and Google Firestore), protected by encryption at rest and in transit (TLS/HTTPS). We implement the following security measures:

• All data transmitted between your browser and our servers is encrypted via HTTPS
• Database access is restricted to authorised personnel only
• Payment data is handled entirely by Stripe and never stored on our servers
• We conduct periodic security reviews of our infrastructure

While we take all reasonable precautions, no system is 100% secure. In the event of a data breach that affects your personal information, we will notify you within 72 hours of becoming aware of it.

7 Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations:

• Active clients — Data is retained for the duration of our engagement plus 2 years
• Billing records — Retained for 7 years as required by financial regulations
• Marketing data — Retained until you withdraw consent or unsubscribe
• Inactive accounts — Deleted after 2 years of inactivity upon request

You may request deletion of your personal data at any time (see Section 8).

8 Your Rights

Under applicable privacy laws (including India's Digital Personal Data Protection Act, 2023), you have the right to:

• Access — Request a copy of the personal data we hold about you
• Correction — Ask us to correct inaccurate or incomplete data
• Deletion — Request that we delete your personal data (subject to legal retention obligations)
• Withdraw consent — Opt out of marketing communications at any time
• Portability — Request your data in a machine-readable format

To exercise any of these rights, email us at hello@promota.in. We will respond within 30 days.

9 Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal information, please contact us immediately and we will delete it promptly.

10 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will notify you via email and update the "Last updated" date at the top of this page.

We encourage you to review this policy periodically.

11 Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us: