Privacy Policy

1. What We Collect

When you use Cove, we may collect:

• Your name, email address, and phone number (when you sign up)
• Product details you upload (name, price, description, files)
• Payment confirmation details from Razorpay (we do not see or store your card/UPI details directly)
• Basic usage data such as pages visited, clicks, and device/browser type, collected via Google Analytics and PostHog (see Section 3)

2. How We Use Your Data

We use your information to:

• Process your sales and deliver purchased files
• Send you order confirmations and download links
• Show your products on the Explore page (name, price, category — never your personal contact details)
• Understand how people use Cove, so we can improve it

3. Cookies & Analytics

Cove uses cookies and similar tracking technologies to understand how visitors use our site. When you first visit Cove, you'll see a cookie banner asking you to Accept or Reject non-essential cookies. Analytics tools listed below only run after you click "Accept". You can change your choice at any time by clearing your browser's local storage for this site and reloading the page, which will bring the banner back.

We use the following tools, only with your consent:

• Google Analytics (GA4) — collects anonymized, aggregate data such as which pages are visited and general location (city/country level). This data is not linked to your name or used to identify you individually.
• PostHog — collects product usage data such as pages visited, clicks, and feature usage, to help us understand how Cove is used and improve it. This may include session replay, which records anonymized playback of how you navigate and interact with the site (mouse movement, clicks, scrolling). Sensitive input fields, such as passwords, are automatically excluded from these recordings.

If you reject cookies, none of the above tools will run, and only strictly necessary cookies (needed for login and core site functionality) will be used. You can also opt out of Google Analytics tracking separately using browser extensions like the Google Analytics Opt-out Add-on, or your browser's "Do Not Track" / cookie-blocking settings.

4. Who We Share Data With

We share payment information with Razorpay solely to process transactions, and anonymized usage data with Google Analytics and PostHog as described above. We do not sell your personal data to any third party.

5. Data Storage & Location

Your data is stored securely using Supabase and hosted on cloud infrastructure that may be located outside India. Where your data is processed or stored outside India, we take reasonable steps to ensure it remains protected consistent with this policy. We take reasonable measures to protect your information, but no online platform can guarantee absolute security.

6. Data Retention

We retain your account data for as long as your account is active. If you request account deletion, we will delete your personal data (name, email, phone number) within 30 days, except where we are required to retain certain transaction records for legal, tax, or accounting purposes.

7. Your Rights

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request erasure of your data (subject to Section 6 above)
• Withdraw your consent to data processing at any time
• Raise a grievance if you believe your data has been misused

You can exercise any of these rights by contacting us. We aim to respond to all requests within 30 days. Withdrawing consent may limit or end your ability to use certain features of Cove (for example, you cannot sell or buy products without an active account).

8. Contact & Grievance Redressal

For any privacy-related questions, data requests, or grievances, reach out at covehelpdesk@gmail.com. We will acknowledge your request within a reasonable time and aim to resolve it within 30 days.