Privacy Policy

INKZIO ("INKZIO", "we", "us", "our") operates an Indian online store for custom printed and personalized products, including apparel, accessories, and Design Studio creations for individual shoppers. This Privacy Policy explains how we handle personal information in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act), as applicable.

By creating an account, placing an order, using Google Sign-In, or browsing our website, you acknowledge that you have read this policy. If you do not agree, please discontinue use of our services.

Account and identity data

• Full name, email address, and phone number when you register or checkout.
• Profile photo and display name when you sign in with Google OAuth (if provided by Google).
• Hashed passwords for email/password accounts (we never store plain-text passwords).
• Order history, saved designs, wishlist items, and saved delivery addresses.

Transaction and payment data

• Order details, product customizations, billing and shipping addresses.
• Payment status, transaction references, and amounts processed through PayU (our payment gateway).
• We do not store full card numbers, UPI PINs, or net-banking credentials on INKZIO servers.

Design and upload data

• Artwork, text, and images you upload in the Design Studio.
• Product previews and print-ready files generated for fulfillment.

Technical and usage data

• IP address, browser type, device identifiers, and session cookies.
• Pages visited, cart activity, and referral sources for analytics and fraud prevention.

• Process orders, payments, printing, and delivery across India.
• Authenticate your account via email/password or Google Sign-In.
• Send transactional emails (order confirmations, shipping updates, password resets) through Resend, our email service provider.
• Provide customer support, refunds, and dispute resolution.
• Comply with tax, accounting, and legal obligations under Indian law.
• Improve product quality, website performance, and fraud detection.
• Send marketing communications only where you have opted in.

We process personal data based on one or more of the following grounds: performance of a contract (fulfilling your order), your consent (marketing, optional cookies), compliance with legal obligations, and legitimate interests (security, analytics, service improvement) where such interests are not overridden by your rights.

• PayU — payment processing and fraud screening.
• Resend — delivery of transactional and account-related emails.
• Google — authentication when you choose Google Sign-In.
• Our Vendors and other print-on-demand partners — production and shipping of customized products (name, phone, address, design files as required).
• Cloud infrastructure and storage providers hosting our application and uploaded assets.
• Law enforcement or regulators when required by valid legal process in India.

We retain account and order records for as long as your account is active and for up to seven (7) years thereafter for tax, warranty, and legal compliance. Uploaded designs may be deleted upon account closure unless required for open orders or disputes.

• HTTPS encryption for data in transit.
• HTTPOnly, Secure session cookies for authenticated users.
• Role-based access controls for administrative systems.
• Encrypted storage of OAuth tokens in production environments.

Under applicable Indian law, you may request access, correction, or erasure of your personal data, withdraw consent for optional processing, and lodge a grievance with our Data Protection Officer or nodal contact.

• Response timeline: within 30 days for verified requests, subject to legal exceptions.

INKZIO is not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a child has provided us information, contact us for deletion.

We may update this Privacy Policy to reflect legal, technical, or operational changes. Material updates will be posted on this page with a revised Last Updated date. Continued use after changes constitutes acceptance.