Privacy Policy

Overview

Chaya ("we", "us", "our") is based in Bangalore, Karnataka, India. We collect the minimum information needed to run this store, fulfill orders, and respond to you. This policy explains what we collect, why, who we share it with, and your choices.

Information we collect

• Account info: your email address, managed via Supabase authentication.
• Photos you send us: the image(s) you provide for your custom lamp, used only to design and produce your order.
• Order & shipping details: name, phone number, address, city, and pincode, collected at checkout to fulfill and ship your order.
• Payment reference: the UPI transaction ID (UTR) you enter to confirm payment. We do not collect or store your UPI PIN, bank details, or card numbers — payment happens directly in your UPI app.
• Contact form submissions: name, email, subject, and message, if you use our contact form.
• Usage data: aggregate, privacy-focused analytics (see "Analytics" below).
• Cookies and similar technologies (see our Cookie Policy).

We only ask for what we need to run the store and do not collect data we have no use for (e.g. we do not ask for your date of birth, gender, or government ID).

How we use your information

We use order and shipping information to process, pack, and ship your purchases, and to send you an order confirmation email. Photos you send us are used only to design and produce your lamp — we never publish or share them without your explicit permission, and you can ask us to delete them once your order is delivered. Contact form messages are used only to respond to you. Usage data helps us understand and improve site performance.

Analytics

We use Vercel Analytics and Vercel Speed Insights to understand aggregate site traffic and performance. These are privacy-focused, do not use tracking cookies, and do not build a profile of you across other sites. We do not use Google Analytics, Facebook Pixel, or any advertising/retargeting trackers.

Sharing & third parties

We share information only with the service providers needed to run the store, and only the data each one needs to do its job:

• Supabase — hosts our database and handles account authentication and order records.
• Formspree — processes submissions from our contact and newsletter forms.
• QR Server (api.qrserver.com) — generates the UPI payment QR code at checkout; the payment amount and our UPI ID (not your personal data) are sent to this service to render the code.
• Titan Email (SMTP) — delivers your order confirmation email, which includes your name, shipping address, phone number, and order details.
• Vercel — hosts this website and provides analytics as described above.

We do not sell your personal data, and we do not share it with advertisers. We may disclose information if required by law or to protect our legal rights.

Security

We take reasonable measures to protect your information, but no online service is completely secure. If you suspect unauthorized access to your account, contact us immediately.

Data retention & access

We retain account and order information as long as needed to provide our services, comply with legal obligations (such as tax and consumer-protection recordkeeping), and resolve disputes. You may request access to, correction of, or deletion of your personal data by contacting us below; we will respond within a reasonable time, subject to our legal obligations to retain certain records.

Children

Our store is not intended for children under 18. We do not knowingly collect personal information from children.

Contact

For questions about this policy or your data, or to request access, correction, or deletion of your data, please email: hello@chaya.example.