Privacy Policy

We collect the minimum needed to sell you a digital product and give you access to it. We do not sell your data. We do not run advertising trackers, and there is no ad network on this site.

If you only want one takeaway: your card details never touch our servers, and nothing you do here is shared with an advertiser.

Arclight Media Productions, registered at [[REGISTERED ADDRESS]], India, is the data controller for this site. Contact us about anything on this page at info@arclight.co.in.

Account data: your name, email address and profile picture, provided by Google when you sign in. We use these to identify your account and to attach your purchases to it.

Purchase data: what you bought, when, the amount, and the currency. Your card details are handled by our payment provider, Dodo Payments outside India or Razorpay within it, and never reach our servers, so we never hold a card number, expiry date or security code.

Product data: what you have bought, which prompts you copy, and which lessons you complete. We use this to work out which material is genuinely useful and what to build next.

Referral data: if you arrive from a link carrying UTM parameters, we record them with your order so we know which content brought you here.

Support data: anything you write to us, and our replies. We keep these so a follow-up message does not start from nothing.

Technical data: standard server and edge logs, IP address, browser type, and which pages were requested. These exist to keep the site up and to spot abuse.

We do not collect payment card details, government identifiers, precise location, or any special category data. We do not buy data about you from anyone else, and we do not enrich your record with third-party profiles.

We process account and purchase data to perform our contract with you. We cannot give you access to something you bought without knowing who you are.

We process product, referral and technical data on the basis of legitimate interests: understanding what works so we can improve the product, keeping the service running, and preventing abuse. You can object to this, email us and we will act on it.

We keep transaction records because tax and accounting law requires us to, which is a legal obligation rather than a choice.

Supabase, for database and account hosting. Dodo Payments, to process payments outside India and act as merchant of record there. Razorpay, to process payments within India. Cloudinary, to deliver course video. Cloudflare, to serve and protect the site, and to tell us which country a request came from so we can show the right currency. Resend, to send transactional email such as receipts and replies. Google, for sign-in only.

Each of these handles data on our behalf under their own terms. We do not sell or rent your personal data to anyone, and we do not share it for advertising.

We may disclose data if the law requires it, or to establish or defend a legal claim, for example, providing delivery records to contest a chargeback.

Our providers operate globally, so your data may be processed outside the country you live in, including in the EU, the United States and India.

Where a transfer leaves a region with its own transfer rules, it is covered by the relevant provider's standard contractual clauses or equivalent safeguard.

Your account and its purchase history are kept for as long as your account exists, since your access to what you bought depends on it.

Transaction records are kept as long as tax and accounting law requires, which is typically several years and is not something we can shorten on request.

Server logs are kept for a short operational window and then discarded.

Ask us to delete your account and we will, subject to those record-keeping obligations. Deleting your account ends your access to purchased products, and because we do not offer refunds that access cannot be restored.

Depending on where you live, you may have the right to access, correct, delete, export or restrict the processing of your personal data, and to object to certain processing. Where we rely on consent, you can withdraw it at any time.

Access, portability and erasure are all self-service: sign in, open your account page, and use the download and delete controls there. You do not need to ask us and you do not need to wait.

For anything else, email info@arclight.co.in. We will respond within the timeframe the applicable law requires, and in practice much sooner. We may need to confirm you control the account before we act, which is a protection for you rather than an obstacle.

If you think we have handled your data badly, we would like the chance to fix it first. You also have the right to complain to your local data protection authority.

Strictly necessary cookies keep you signed in and keep checkout working. Without them the site cannot tell one visitor from another and you would be signed out on every page. These are always on and do not require consent.

Analytics cookies are off by default. The banner on your first visit is a real choice, not a formality: rejecting it sets analytics storage to denied and no Google Analytics cookie is written. You can change your mind at any time using the cookie settings link in the footer, which clears your decision, switches analytics back off immediately, and asks again.

We record referral parameters from your first visit so we know which content brought you here. That is stored in your own browser for the session and is not linked to any advertising network.

We do not use advertising or cross-site tracking cookies, and no third party sets a cookie through us for that purpose.

You do not have to email us to exercise these. Sign in and open your account page, where two controls do the work directly.

Download your data gives you a single JSON file containing your profile, your orders, what you own, your course progress and your saved prompts. It is machine readable, which is what the right to portability actually asks for, and it is readable by a person too. Security material such as password hashes is deliberately excluded: it is not information about you in any useful sense, and putting it in a file people forward to each other would be careless.

Delete your account removes the account, your access to everything on it, your progress and your saved prompts. It is permanent and it does not return any money, because we do not offer refunds.

Records of past purchases survive deletion in anonymised form, with your name and email address stripped off and replaced by a placeholder. Tax and accounting law requires us to keep evidence that a sale happened, and removing the personal data while keeping the transaction is the least identifying way to satisfy both obligations at once.

This site is not intended for anyone under 18. We do not knowingly collect data about children. If you believe a child has created an account, tell us and we will delete it.

We may update this policy. The version in force is the one published here, and the date at the top of this page changes whenever it does.

Questions about this policy: info@arclight.co.in. Our data controller is Arclight Media Productions, [[REGISTERED ADDRESS]], India.