Privacy Policy

Dewiride Technologies Private Limited decides how and why your personal information is handled on this store, and is responsible for it. Our registered office and contact details are on the Legal and business details page.

This policy covers Dewiride Store only. It is written to meet the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and the Consumer Protection (E-Commerce) Rules, 2020 in India, and the General Data Protection Regulation where it applies to you as a reader in the European Union or the United Kingdom.

Account details

Your name, email address and password, held as a one-way hash that cannot be reversed. Optionally your organisation name, country, state and GSTIN, which we need in order to issue a correct tax invoice.

Order and payment records

What you bought, when, the amount, the currency, the tax applied, the payment provider’s transaction reference, the payment status and the last four digits and brand of the card. We never receive your full card number, expiry date or security code. Where you have asked us to renew a membership automatically, we also keep the payment provider’s reference for that card, for as long as that instruction stands.

Download records

Which release you downloaded and when, with your network address and browser stored as a one-way hash. This is what lets us tell a genuine re-download from a shared link.

Support correspondence

The messages you send us and our replies.

Technical information

Ordinary server logs of requests to our systems, including network address, browser and the page requested, kept so that we can operate the service securely and diagnose faults.

Visitor statistics

Which pages you visit, the page that sent you here, your screen size, language and time zone, how long you read and how far you scroll, and the wording of the buttons and links you press — never anything you type. Our own analytics service records these without cookies or anything else kept on your device, and cannot connect your visits on one day with those on another.

We do not collect sensitive personal data as Indian law defines it, beyond the password we hold as a hash, and we do not ask for information we do not need.

To perform our contract with you

Creating your account, taking payment, granting access, delivering downloads, issuing invoices, and handling refunds and support.

To meet legal obligations

Keeping the order, invoice and tax records that Indian tax and company law require us to keep.

For our legitimate interests

Keeping the store secure, preventing fraud and the sharing of paid downloads, understanding faults so that we can fix them, and counting visits so that we can see which pages are useful. We do this in the least intrusive way we can.

With your consent

Anything you opt into, such as an email about a new release. You can withdraw consent at any time, as easily as you gave it.

We do not sell your personal information, we do not rent it, and we do not disclose it to data brokers or advertisers under any circumstances.

We share your information only with the categories of recipient below, only to the extent each one needs it, and only under a written contract that requires them to protect it and to use it solely on our instructions.

Payment providers

Stripe and Razorpay, to take payment, issue receipts and handle refunds and disputes. They act as independent controllers of the payment details you enter directly into their fields.

Hosting and infrastructure

Microsoft Azure, which runs our services, databases, file storage and backups, and Contabo, which hosts our visitor statistics in Germany.

Email

Microsoft, to send the transactional email that confirms an order, delivers a link or resets a password.

Professional advisers

Our accountants, auditors and lawyers, where tax, audit or legal work requires it.

Authorities and courts

Where we are legally required to disclose, or where disclosure is necessary to establish, exercise or defend a legal claim. We review every request, disclose only what is legally required, and tell you unless we are prohibited from doing so.

A buyer of the business

If we are ever part of a merger, acquisition or sale of assets. We would tell you before your information became subject to a different privacy policy.

• Every page and every request between systems is encrypted in transit with TLS 1.2 or higher.
• Databases, file storage and backups are encrypted at rest.
• Card details are captured by our payment providers and never reach or rest on our systems.
• Access is role-based and least-privilege, administrative accounts require a second factor, and secrets are held in a managed key vault rather than in code.
• Paid files are stored privately and are reachable only through a short-lived link issued after we have checked that you own the product.
• Access and system logs are retained for review, backups are taken regularly and restoring from them is rehearsed.
• Every action by a member of staff that changes a customer’s access is recorded in a permanent audit log.

No system is perfectly secure, so we cannot promise absolute security. If we discover a breach that is likely to affect you, we will tell you and the relevant authority without undue delay. If you think your account has been compromised, write to us immediately.

Account details

While your account is open, and deleted within 90 days of you closing it, unless you ask us to delete them sooner.

Order, invoice and payment records

Eight years, because Indian tax and company law require us to keep them. Closing your account does not remove them.

Support correspondence

Three years from the last message.

Download and access logs

Twelve months, after which they are deleted.

Visitor statistics

Network addresses for 72 hours, after which they are deleted; the visit records themselves for twelve months.

You can ask us to:

• give you a copy of the personal information we hold about you
• correct anything that is wrong or out of date
• delete information we no longer have a lawful reason to keep
• restrict or object to a particular use of it
• provide it in a portable form, or send it to someone else
• withdraw a consent you previously gave

Write to us and we will acknowledge within one business day and answer within one month. If a request is unusually complex we may need longer, and we will tell you why before the month is up. Withdrawing consent does not undo anything we did lawfully before you withdrew it, and it does not remove records we are required by law to keep.

If you are unhappy with how we have handled your information or your order, you can escalate to our grievance officer, whose name, designation and contact details are published on the Legal and business details page.

We acknowledge every escalation within 48 hours and resolve it within one month, as the Consumer Protection (E-Commerce) Rules, 2020 require. If you are in the European Union or the United Kingdom, you may also complain to your national data protection authority.

We are based in India and our systems are hosted there. Some of the providers listed above operate internationally, so your information may be processed in other countries. Where that happens we rely on the safeguards those providers offer, including the European Commission’s standard contractual clauses where they apply. Our visitor statistics are held in Germany.

This store is not intended for children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, tell us and we will delete it.

What this site stores in your browser, and what it does not, is described in the Cookie Policy.

We may update this policy. The date it was last updated is shown at the top of this page, and we will tell you directly about any change that materially affects you.