Privacy Policy

Last updated: 2026-05-06

CreativeCape (“we”, “us”, “our”) operates this website and the related digital products and services. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.

1. Who we are

CreativeCape is a software design and development studio based in Nagercoil, Tamil Nadu, India. For privacy questions, contact privacy@creativecape.com.

2. Information we collect

We collect information you provide directly and information collected automatically when you use our site.

2.1 Information you provide

• Account details: name, email address, password (stored as a one-way hash), phone, and company.

• Order details: billing name, billing country, items purchased, applied coupons, invoices.

• Support tickets and messages: the content of any ticket, contact form, or reply you send us, including any files you attach.

• Reviews and ratings: content you publish on a product or article.

• Profile media: an avatar image if you upload one.

2.2 Information collected automatically

• Device and connection data: IP address, user agent, language, time zone, referring URL.

• Usage data: pages viewed, links clicked, downloads requested, errors encountered.

• Cookies and similar technologies: see our Cookie Policy for the full list and your choices.

• Authentication data: session tokens stored as HttpOnly cookies so you stay signed in.

2.3 Information from third parties

• Payment processors (e.g. Razorpay) confirm that a payment succeeded; we never receive or store your card number or UPI PIN.

• Analytics and tag managers (e.g. Google Tag Manager, Google Analytics) may share aggregated insights about how visitors find and use our site.

• Email delivery providers report deliverability events (delivered, opened, bounced).

3. How we use your information

We use your information to:

1. Create and operate your account.

2. Process orders, deliver downloads, generate invoices, and grant license keys.

3. Provide the support window your purchase entitles you to and respond to tickets.

4. Send transactional email (purchase receipts, support replies, password resets, security alerts). These are operational and cannot be opted out of while you have an active account.

5. Send product updates, marketing emails, and announcements if you have opted in. You can unsubscribe at any time from any marketing email.

6. Detect, investigate, and prevent fraud, abuse, and security incidents.

7. Improve our products, content, and user experience.

8. Comply with our legal obligations (tax, accounting, lawful requests).

4. Legal bases (GDPR / DPDP Act)

Where applicable law requires a legal basis, we rely on:

• Contract — to deliver the products and services you purchased.

• Legitimate interests — to secure our services, prevent abuse, and improve our products, balanced against your rights.

• Consent — for marketing communications and non-essential cookies.

• Legal obligation — to retain invoices and respond to lawful requests.

5. Sharing your information

We do not sell your personal data. We share it only with:

• Service providers acting on our behalf under written contracts: hosting (Vercel), database (Neon), object storage (Cloudflare R2 / AWS S3), email (SMTP/transactional), payments (Razorpay), analytics, and error monitoring.

• Professional advisors (lawyers, accountants, auditors) under confidentiality.

• Authorities when required by law, regulation, court order, or to protect rights and safety.

• Successors in the event of a merger, acquisition, or asset sale, with notice.

6. International transfers

Our service providers may process data outside your country. Where required, we use appropriate safeguards (e.g. standard contractual clauses) for cross-border transfers.

7. Retention

We keep personal data only as long as necessary for the purposes above:

• Account data: while your account is active, plus a short window for backup and recovery.

• Order and tax records: typically up to 8 years to satisfy tax and accounting law.

• Support tickets: up to 3 years after resolution.

• Marketing consent and unsubscribe lists: indefinitely (so we don't email you again).

• Server and security logs: typically up to 90 days.

When data is no longer needed, it is deleted or anonymized.

8. Your rights

Subject to the laws that apply to you, you may:

• Access, correct, or delete your personal data.

• Export a copy of your data in a portable format.

• Object to or restrict certain processing.

• Withdraw consent for marketing or non-essential cookies at any time.

• Lodge a complaint with your local supervisory authority.

To exercise these rights, email privacy@creativecape.com from the address on your account. We will respond within the timelines required by law.

9. Security

We protect your data with TLS in transit, hashed passwords (bcrypt), HttpOnly session cookies, role-based access control, regular dependency updates, and least-privilege production access. No system is perfectly secure — please choose a strong password and keep your account credentials private.

10. Children's privacy

Our services are not directed at children under 13 (or under 16 in some jurisdictions). We do not knowingly collect data from children. If you believe a child has given us personal data, contact privacy@creativecape.com so we can delete it.

11. Third-party links

Our site may link to third-party sites and services. Their privacy practices are governed by their own policies, which we encourage you to read.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced on this page and, where appropriate, by email. Continued use after the effective date constitutes acceptance.

13. Contact

For privacy questions, write to privacy@creativecape.com or to CreativeCape, Nagercoil, Tamil Nadu, India.