Privacy Policy

We collect information you provide directly: name, username, email address, and password (stored as a bcrypt hash — never in plain text) during registration.

We collect usage data automatically: IP address, browser type, device information, pages visited, time spent, and interaction logs for security monitoring and platform improvement.

If you subscribe to a paid plan, payment is processed by Razorpay. We do not store your card details. We receive only transaction confirmation data (plan type, amount, timestamp) from Razorpay.

If you sign in with Google, we receive your name, email, and Google profile ID. We do not receive or store your Google password.

To create and manage your account, authenticate your identity, and provide access to platform features.

To send transactional emails: OTP verification, password reset, and subscription confirmations. We do not send unsolicited marketing emails without your consent.

To monitor platform security, detect abuse, investigate violations of our Terms of Service, and comply with legal obligations.

To improve the platform through aggregated, anonymized analytics. We do not sell your personal data to third parties.

We do not sell, rent, or trade your personal information to third parties for marketing purposes — ever.

We share data only with: (a) Razorpay for payment processing, (b) Resend for transactional email delivery, (c) our hosting/infrastructure provider for platform operation.

We may disclose your information if required by law, court order, or government authority under the IT Act 2000, or to protect the rights, property, or safety of the Company, our users, or the public.

You have the right to access, correct, or delete your personal data. You can update your profile information from your account settings.

You may request complete deletion of your account and associated data by contacting us at team@cybersecurityghost.tech. We will process your request within 30 days.

Under India's Digital Personal Data Protection Act (DPDPA) 2023, you have rights including the right to information, correction, erasure, and grievance redressal.

For any privacy-related concerns, data requests, or grievances, contact our Data Protection Officer at: team@cybersecurityghost.tech

We will acknowledge your request within 72 hours and resolve it within 30 days as required under applicable Indian law.

This Privacy Policy is governed by the laws of India and the Information Technology Act, 2000, its amendments, and the Digital Personal Data Protection Act, 2023.