KalaConnect LogoकलाConnect

Privacy Policy

Last updated: June 2025

1. Introduction

Welcome to कलाConnect ("we," "our," or "us"). We operate the website kalaconnect.me (the "Service"), an online marketplace connecting Indian artisans with art lovers worldwide.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Account Information

  • Name and email address (required for account creation)
  • Password (stored securely as a hash — we never see your password)
  • Profile avatar and bio (optional, for artisans)
  • Role (buyer, artisan, or admin)

Transaction Information

  • Shipping address and phone number (for order delivery)
  • Order history and purchase details
  • Payment is processed through secure third-party payment providers — we do not store credit card numbers

Automatically Collected Information

  • IP address and browser type (for security and rate limiting)
  • Pages visited and time spent on the Service
  • Device information and operating system

Information from Third Parties

  • If you sign in with Google, we receive your name, email, and profile picture from Google OAuth

3. How We Use Your Information

  • To provide, maintain, and improve the Service
  • To process transactions and send related information (order confirmations, delivery updates)
  • To create and manage your account
  • To communicate with you about products, services, and promotions
  • To detect, prevent, and address technical issues and fraud
  • To comply with legal obligations

4. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

  • With artisans: When you place an order, the artisan receives your name and shipping address to fulfill the order
  • With payment processors: Payment information is shared with our secure payment provider to process transactions
  • With hosting providers: Our data is stored on secure cloud infrastructure (MongoDB Atlas, Vercel)
  • For legal compliance: When required by law, regulation, or valid legal process
  • With your consent: When you explicitly agree to share information for a specific purpose

5. Data Retention

We retain your account information for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where we need to retain certain information for legal or legitimate business purposes (such as order records for tax compliance).

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including encryption in transit (HTTPS), secure password hashing, and access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your personal data
  • Objection: Object to processing of your personal data
  • Data Portability: Request transfer of your data in a machine-readable format

To exercise any of these rights, please contact us at privacy@kalaconnect.me.

8. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

9. Cookies and Tracking

We use cookies and similar tracking technologies to maintain your session and remember your preferences. We also use third-party advertising services (such as Google AdSense) that may use cookies to serve personalized advertisements.

  • Essential cookies: Required for the Service to function (authentication, session management)
  • Analytics cookies: Help us understand how visitors interact with the Service
  • Advertising cookies: Used by third-party ad networks to serve relevant advertisements

You can control cookie preferences through your browser settings and our cookie consent banner.

10. Third-Party Services

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of every website you visit.

Third-party services we use include: Google OAuth (authentication), Google AdSense (advertising), MongoDB Atlas (database hosting), Vercel (hosting), and Resend (transactional emails).

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us: