This policy explains what Tanvi Goel collects when you buy from ebooks.tanvigoel.com, why, and what you can ask us to do about it.
What we collect
- What you type at checkout: your name, email address and mobile number.
- Payment records: a payment reference, amount and status from our payment partner. We never see or store your card number, UPI PIN, CVV or bank password.
- Technical records: your IP address and the time of your request, used to spot fraud and to rate-limit abuse.
- Delivery records: whether the email carrying your link was accepted or rejected, so we can help when something does not arrive.
Why we collect it
To take payment, to deliver your file to the right person, to answer support requests, to keep accounting records the law requires us to keep, and to protect the store from fraud and abuse. Nothing else.
Who we share it with
- Razorpay, to process your payment. Your card and bank details are handled by them directly, under their own privacy policy.
- ZeptoMail (Zoho), to send your delivery email.
- Our hosting provider, which stores the site and its database.
We do not sell your data, rent it, or hand it to advertisers. There are no advertising or analytics trackers on the checkout flow.
Watermarking
If a product is watermarked, your name and email address are printed onto the pages of your own copy. This is deliberate: it discourages sharing and makes a leaked file traceable. It is stated on the product page before you pay.
Cookies
We set a single session cookie, used to keep your checkout secure against cross-site request forgery. It disappears when you close your browser. We do not use advertising cookies.
How long we keep things
Order and payment records are kept as long as tax and accounting law requires, typically eight years. Your access links expire much sooner, on the schedule shown on the product page. Watermarked copies are deleted when the link expires.
Your rights
You can ask us to show you the personal data we hold about you, correct it if it is wrong, or delete it where we are not required to keep it. Write to the support address on this site and we will respond within 30 days. Deleting your data may end your access to a purchase.
Keeping it safe
The site runs over HTTPS. Files are stored outside the public web folder and can only be reached through a unique, expiring link. Passwords for the admin area are stored hashed, never in plain text.
Children
This store is meant for adults and is not directed at anyone under 18.
Grievances
Tanvi Goel
the support address on this site
Changes
We update this policy when our practices change. The current version always lives at this address.