Privacy Policy

This Privacy Policy describes how Planet AI (operating under the brand name Pichup, hereafter "we", "us", "our") collects, uses, stores, and protects your personal information when you use the website pichup.org ("Website"). This policy complies with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, as applicable.

§01Information We Collect

1.1 Information You Provide

• Purchase: Email address, payment information (processed by Razorpay, we do not store card numbers, CVV, or bank credentials), affirmative acceptance of the Terms, Privacy Policy, and Refund Policy at order time
• Exchange submission: Email address, company being submitted, company desired in return, file link (Google Drive/Dropbox URL), the date the bank was sourced, an authenticity description, and your affirmative acceptance of the Submission Terms
• Contact form: Name, email address, message content

1.2 Information Automatically Collected

• At order time and exchange-submission time, persisted as an audit record: IP address, User-Agent string, country code derived from IP (Cloudflare CF-IPCountry header), timestamp. This audit data is used to defend against chargebacks and to support contributor indemnification under our Terms; see §06 Data Retention.
• Server logs (Cloudflare): IP address, browser type, referring URL, pages visited, timestamps
• Payment data (from Razorpay webhook): Transaction ID, order ID, payment status, amount, currency

1.3 Information We Do NOT Collect

• We do not use cookies for tracking or advertising
• We do not use any third-party analytics (Google Analytics, etc.)
• We do not collect sensitive personal data such as passwords, financial information (beyond payment processing), biometric data, or government IDs

§02How We Use Your Information

Data	Purpose	Legal Basis
Email address	Deliver download links, order confirmations, exchange status updates, customer-support outreach	Contract performance
Payment info	Process transactions via Razorpay	Contract performance
IP address, User-Agent, country code	Security, fraud prevention, abuse detection, chargeback defense, audit trail	Legitimate interest, legal claim defense
Exchange submission data (sourced-when, authenticity description, file link)	Review the submission and evaluate authenticity claim	Contract performance
Affirmative consent record (Terms / Submission Terms acceptance, timestamp)	Evidence of informed agreement to enforce against disputes	Legitimate interest, legal claim defense

§03PDF Watermarking and Download Tokens

1. All Question Bank PDFs delivered to you are digitally watermarked.
2. Each download link is a uniquely signed, single-account token tied to your order and email address, cryptographically signed with HMAC-SHA256, valid for 1 hour, and limited to 3 downloads.
3. The combination of file watermark and signed token is an anti-redistribution measure: any unauthorized sharing of either the file or the link is traceable to the issuing order.
4. By purchasing or receiving a Question Bank, you consent to this watermarking and tokenization.

§04Third-Party Services

We share limited personal data with the following third-party services, solely for the purposes described:

Service	Data Shared	Purpose	Privacy Policy
Razorpay	Payment details, email, order info	Payment processing	razorpay.com/privacy
Cloudflare	IP address, request data	Website hosting, security, CDN	cloudflare.com/privacypolicy
Resend	Email address	Transactional email delivery	resend.com/legal/privacy-policy

We do not sell, rent, or trade your personal information to any third party for marketing or other purposes.

§05Data Storage and Security

1. Your data is stored on Cloudflare's infrastructure (Pages, R2 object storage, Workers KV) with encryption at rest and in transit. Audit records are stored in R2 (durable object storage) with a mirrored copy in KV for fast operator lookup during the chargeback window.
2. Payment information is processed and stored exclusively by Razorpay (PCI-DSS Level 1 certified). We never have access to your full card details.
3. Download tokens are cryptographically signed (HMAC-SHA256), expire after 1 hour, and are limited to 3 downloads per token.
4. Webhook events from Razorpay are signature-verified (HMAC-SHA256) before processing. Operator endpoints (approve, reconcile, send-message) are protected by a rotating server-side secret with timing-safe comparison.
5. We implement reasonable security practices including HTTPS everywhere, timing-safe authentication, input validation, access controls, and rate limiting.

§06Data Retention

Data Type	Retention Period	Reason
Transaction records (Razorpay)	8 years	Indian tax / GST compliance, legal obligations
Order audit records (R2): order id, email, bank, amount, currency, consent timestamp, accepted documents, IP, User-Agent, country	Indefinite (durable storage)	Chargeback defense, dispute resolution, legal claim defense
Order audit records (KV mirror)	180 days	Fast operator lookup during the typical chargeback window
Exchange-submission audit records (R2 and KV)	Indefinite (R2) / 180 days (KV)	Evidence of consent and indemnification under §08A.c of the Terms; defense against third-party rights claims
Delivery audit records (R2 and KV): payment id, email, bank shipped, timestamp	Indefinite (R2) / 180 days (KV)	Proof of delivery for chargeback contestation
Email address	Duration of business relationship + 3 years	Customer support, re-issuance of download links
Download tokens and per-token counters	1 hour (auto-expire)	Access control
Webhook idempotency keys	7 days	Prevent duplicate processing of retried webhook deliveries
Cloudflare server logs	~7 days (Cloudflare retention default)	Security and abuse detection

Audit records (orders, deliveries, exchange submissions) are stored in R2 object storage and treated as durable evidence; they will not be deleted in the ordinary course. Requests to delete audit records will be evaluated against our legal-claim-defense obligations and Indian retention requirements; see §07.

§07Your Rights

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate personal data.
• Deletion (subject to retention obligations): Request deletion of your personal data. Tax / transaction records (8-year retention) and audit records held for the defense of legal claims are not deletable until those obligations expire; we will tell you which records fall into this category if you ask.
• Withdraw consent: Withdraw consent to ongoing processing where the original basis was your consent. Withdrawal does not affect lawfulness of processing already done.
• Nominate: Nominate another individual to exercise rights on your behalf in case of incapacity, in accordance with the DPDP Act.
• Grievance: File a grievance via the contact route in §11 below.

To exercise any of these rights, contact us via our contact page. We will acknowledge within 7 days and respond substantively within 30 days.

§08International Data Transfers

Our infrastructure providers (Cloudflare, Resend) operate globally. Your data may be processed in countries outside India, including the United States. These providers maintain adequate data protection standards. By using this Website, you consent to such transfers.

§09Children's Privacy

This Website is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us and we will promptly delete it.

§10Changes to This Policy

We may update this Privacy Policy from time to time. Changes take effect immediately upon posting. We recommend reviewing this page periodically. The "Last updated" date at the top indicates the most recent revision.

§11Grievance Officer

In accordance with the Information Technology Act, 2000, and the rules made thereunder, the Grievance Officer for the purpose of this Privacy Policy can be reached via our contact page. Grievances will be addressed within 30 days of receipt.

§12Contact

For privacy-related questions or requests, contact us via our contact page.