Privacy Policy
This policy explains what information OTT Store collects, why, and what we do (and do not do) with it. We aim to collect the minimum needed to sell and deliver digital products and support you afterwards.
1. What we collect
- Contact details: the email address (and, where you provide it, phone/WhatsApp number and name) used to place and deliver your order.
- Order data: the products you bought, prices, timestamps, delivery records, and payment references (transaction IDs and status from the payment provider). We do not receive or store your full card numbers or banking credentials — payments are processed by the payment provider.
- Account and API data: for registered customers and resellers — login email, hashed credentials, wallet balance and transaction history, API keys, and API usage logs.
- Technical basics: standard server logs (IP address, request time, user agent) generated when you use the site.
2. Why we collect it
- Delivery: emailing your license and keeping it retrievable in your account area.
- Support and warranty: linking your order to its key so we can verify and replace failed products.
- Fraud prevention: payment references and logs help us detect duplicate, fraudulent or abusive orders.
- Service operation: account login, wallet accounting, and API authentication.
3. What we do not do
- We do not sell or rent your personal data to anyone.
- We do not use your data for third-party advertising.
- We do not store card numbers, banking passwords or UPI PINs — those never pass through us.
4. Cookies
We use functional cookies only: a session cookie to keep you signed in to your account, and equivalent session storage for cart/checkout state. We do not run third-party advertising or cross-site tracking cookies.
5. Third parties we share with
- Payment processors — to process your payment; they receive the data needed for the transaction under their own privacy policies.
- Email provider — to send delivery and account emails to your address.
- Messaging platforms (e.g. WhatsApp) — only where you choose to interact with us there.
Each provider processes data under its own terms; we share only what the specific function requires.
6. Retention and deletion
Order records are retained while needed for warranty support, accounting and legal obligations. To request deletion of your personal data (or a copy of the data we hold about you), contact [email protected] from the email address on your orders. We will action requests within a reasonable time, except where retention is legally required (e.g. transaction records).
7. Security
Data is stored on access-controlled systems; passwords are stored hashed; API keys should be treated as secrets on your side and can be rotated on request. No system is perfectly secure — if we become aware of a breach affecting your data, we will inform affected users.
8. Contact
Privacy questions or requests: [email protected] or the contact page.