Privacy Policy

This policy explains what personal data Obsidian Digital collects, how we use it, and your rights as a data subject.

Effective Date: August 12, 2026. We are committed to protecting your privacy and handling your data transparently.

1. Information We Collect

a) Information You Provide: When you register or make a purchase, we collect your full name, email address, and password (stored as a one-way bcrypt hash — we never store your plain-text password). We do not collect or store your payment card details; these are processed directly by our payment partner, Razorpay, under their own privacy and security standards.

b) Transaction Data: We store records of your purchases, order numbers, payment confirmation references (not card details), and download history.

c) Technical Data: We automatically collect your IP address, browser type, operating system, referral URL, and pages visited. This data is used solely for security, fraud prevention, and platform analytics.

d) Communications: If you contact us via email or our contact form, we retain those communications for quality and legal purposes.

2. How We Use Your Information

We use your personal data exclusively for the following purposes: (a) to process and fulfil your digital product orders; (b) to send transactional emails (order confirmations, download links, receipts); (c) to provide customer support; (d) to detect, investigate and prevent fraudulent transactions and abuse; (e) to comply with our legal obligations; (f) to improve the platform based on aggregated, anonymised usage data.

We do NOT sell, rent, or share your personal data with any third party for marketing purposes. Ever.

3. Cookies

We use strictly necessary session cookies to maintain your login state and a CSRF protection token to keep your account secure. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. You may disable cookies in your browser settings, but doing so will prevent you from using core platform features such as logging in or making a purchase.

4. Data Sharing

We share your data only with: (a) Razorpay (our payment processor) — solely to process your payment; (b) our hosting provider — who stores your encrypted data on our behalf under a data processing agreement; (c) legal authorities — only if required by valid court order, subpoena, or applicable law. We require all third parties to handle your data securely and in compliance with applicable privacy legislation.

5. Data Retention

We retain your account data for as long as your account is active. Purchase and transaction records are retained for a minimum of 7 years as required by Indian financial regulations. If you request account deletion, we will delete all personal data except that which we are legally required to retain. Download logs are retained permanently for fraud prevention and intellectual property protection.

6. Security

We implement industry-standard security measures including: bcrypt password hashing (cost factor 12), AES-256 encryption for sensitive data at rest, HTTPS/TLS encryption for all data in transit, CSRF token protection on all forms, rate limiting to prevent brute-force attacks, and regular security audits. No method of transmission over the internet is 100% secure, but we take every reasonable precaution to protect your data.

7. Your Rights

Subject to applicable law, you have the right to: (a) access the personal data we hold about you; (b) request correction of inaccurate data; (c) request deletion of your personal data (subject to legal retention requirements); (d) object to processing of your data; (e) data portability. To exercise any of these rights, please contact us through our Contact page.

8. Children's Privacy

The Obsidian Digital platform is intended for users aged 18 and above. We do not knowingly collect personal data from children under 18. If we discover that we have collected data from a minor, we will delete it immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top of this page reflects the most recent revision. We encourage you to review this policy periodically.

10. Contact

For any privacy-related queries or to exercise your rights, please contact us through our Contact page.

Last Updated: August 12, 2026