Privacy, in plain English.

1. Who we are

Sayline is an independent digital-products business operating from India. For the purposes of applicable data-protection law, Sayline is the controller of the personal data described in this policy. You can reach us at support@sayline.shop.

2. What we collect

• Order details: your name, email address, phone number (if you provide it at checkout), the product purchased, the amount, the Razorpay order ID and payment ID, and the date and time of purchase.
• Delivery and access data: the packs you download, the time of download, and a short-lived access cookie that lets the success page show your files. The cookie contains a signed order reference, not your card details.
• Support messages: the content of emails you send us, including any screenshots or payment IDs you choose to share.
• Technical data: IP address, browser type, device type, referring page and basic server logs generated when you use the site. These are used for security, fraud prevention and keeping the site online.

We do not ask for and do not store your full card number, UPI PIN, CVV, netbanking password or any other payment credential. Card and UPI payments are collected and processed by Razorpay Software Private Limited on its own secure infrastructure.

3. Payments

Checkout is processed by Razorpay Software Private Limited. When you pay, Razorpay receives the payment and billing information you enter, and sends us a confirmation containing your name, contact details, order ID and payment ID. Razorpay's own privacy policy and security terms apply to the payment data it processes. We use the confirmation only to deliver the kit, provide support, prevent fraud, and meet accounting and legal obligations.

4. How we use your data

• To confirm your payment and give you access to the download page.
• To deliver the PDFs, audio and video packs you bought.
• To answer support requests, fix download problems and handle refunds.
• To detect duplicate payments, chargeback abuse and unauthorised access.
• To keep records required by tax, accounting and consumer-protection law.
• To improve the site and the product using aggregated, non-identifying usage data.

We do not sell your personal data. We do not rent it, trade it, or add you to a third-party marketing list. We do not send marketing email unless you separately ask to receive it.

5. Lawful bases

Where India's Digital Personal Data Protection Act, 2023 applies, we process personal data on the basis of your consent (which you give when you submit your details at checkout or email us) and for the legitimate purposes of performing our contract with you, complying with law, and protecting the service from fraud. You may withdraw consent at any time by emailing us; withdrawing consent may mean we can no longer provide access to the kit.

6. Cookies and local storage

We use a small number of essential cookies. The access cookie keeps you signed in to the success page for a limited period so you can download your packs. Razorpay may set its own cookies during checkout. We do not use advertising cookies, cross-site tracking pixels or third-party behavioural profiling on this site.

You can clear or block cookies in your browser. If you block the access cookie, the success page may not be able to show your downloads; you can still use the confirmation link in your Razorpay receipt or email us for help.

7. Who we share data with

• Razorpay Software Private Limited: to process the payment, issue receipts, handle refunds and manage disputes.
• Supabase: secure database and file storage for orders, download records and the product files.
• Cloudflare: hosting, content delivery and security for the website.
• Email and support providers: only to send order confirmations and reply to you.
• Professional advisers and authorities: where required by law, a court order, a tax authority or to establish or defend a legal claim.

These providers are given only the information needed to perform their task. They are not permitted to use your data for their own marketing.

8. International transfers

Some of our service providers process data outside India. Where that happens, we use providers that maintain appropriate contractual and technical safeguards, and we share only the data needed for the relevant service. By using the site and buying the kit, you understand that your data may be processed in another country under those safeguards.

9. How long we keep it

Order and payment records are kept for as long as needed to provide support and to meet tax, accounting and legal requirements — normally up to eight years after the end of the relevant financial year. Support emails are kept for up to three years after the issue is closed. Access cookies expire automatically. Server logs are kept for a short period for security and then deleted or aggregated. When data is no longer needed, we delete it or anonymise it.

10. Security

We use HTTPS, signed download links, restricted storage credentials and access controls. Payment credentials never reach our servers. No system is perfectly secure, but we take reasonable technical and organisational steps to protect your data. If a breach affects your rights, we will notify you and the relevant authority where the law requires it.

11. Your rights

Subject to applicable law, you can ask us to:

• confirm what personal data we hold about you and give you a copy;
• correct data that is wrong or incomplete;
• delete data we no longer need, subject to legal retention duties;
• withdraw consent to processing that relies on consent;
• explain how your data is used and who it is shared with; and
• register a grievance with our Grievance Officer.

Email support@sayline.shop with the subject "Privacy request". We may ask you to verify your identity before acting. We respond within 2 business days. If you are not satisfied, you may complain to the Data Protection Board of India or another competent authority.

12. Children

The kit is intended for people who are 18 or older. If you are under 18, use it only with the involvement and consent of a parent or guardian. We do not knowingly collect personal data from children. If you believe a child has sent us data, email us and we will delete it.

13. Links to other sites

The site may link to Razorpay, Supabase or other services. Those services have their own privacy policies. We are not responsible for their content or data practices.

14. Changes to this policy

We may update this policy when the product, the law or our providers change. The "last updated" date at the top shows the current version. If a change materially affects how we use your data, we will take reasonable steps to tell you before it applies.

15. Grievance Officer

Grievance Officer, Sayline
Email: support@sayline.shop
Address: India

This policy is effective from 21 October 2026.