Privacy Policy

1. Information We Collect

When you make a purchase on BodyDecode.site, we collect your email address, name (optional), and transaction records generated via Razorpay. We do not store, process, or have access to raw credit card numbers or banking passwords. All payment details are processed through Razorpay's PCI-DSS compliant infrastructure.

2. Telemetry & Analytics

We believe in privacy-by-design. We do not utilize third-party cross-site advertising trackers (such as Meta Pixel or Google Analytics tracking IDs). Our analytics subsystem hashes visitor IP addresses using SHA-256 and a secret salt to record anonymous pageviews without profiling your identity.

3. Purpose of Processing

We use collected information solely to:

• Generate and deliver short-lived HMAC digital asset download tokens.
• Send transactional order receipts and updates via email.
• Protect against brute-force attacks and fraudulent payment attempts.
• Maintain mandatory tax and accounting ledgers.

4. Data Sharing & Third Parties

We will never sell, rent, or monetize your contact information. Data is shared strictly with necessary operational providers: Razorpay (payment processing), transactional email gateways (for order receipts), and our PostgreSQL persistence cluster.

5. Your Rights

You may request access to, correction of, or deletion of your customer record at any time by emailing privacy@bodydecode.site.