Privacy Policy

How we handle your data on Digithela.

Last updated: April 8, 2026

Digithela (“Digithela,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, store, and share personal data when you use our website, dashboard, and related services (the “Service”). It should be read together with our Terms & Conditions.

If you do not agree with this Policy, please do not use the Service.

1. Who is responsible?

The operator of Digithela (the data controller for personal data described here) is the entity operating the Service and the website at the domain where you access Digithela. For questions about this Policy, use the contact methods we publish on the Service (for example, in the footer or your account area).

2. Data we collect

Depending on how you use Digithela, we may process the following categories of information:

Account & authentication

  • Information you provide when registering or signing in (for example, email address, name, and authentication identifiers managed by our identity provider).
  • Profile and session data needed to keep you logged in securely.

Shop & catalog content

  • Business details you add to your shop (such as name, slug, address, phone, description, social handles, currency).
  • Optional payment-related images you upload for display to customers (for example, a UPI or other payment QR code), which we store and may show on your public catalog when you choose to expose that section.
  • Catalog and menu data you create or upload (items, prices, descriptions, images, and uploaded source files for analysis).
  • Technical metadata tied to uploads (for example, storage paths and timestamps) needed to run the Service.

Payments & billing

  • Subscription status, plan identifiers, and payment-related references processed by our payment partner. We do not store full payment card numbers on Digithela servers; card or wallet data is handled by the payment provider according to its terms and PCI standards.
  • If you redeem a complimentary or promotional code for paid-tier access, we process that code on our servers to update your subscription record; we do not display your code on public pages.

AI-assisted processing

  • When you use AI features (for example, catalog or image analysis), content you submit may be sent to our AI providers to generate results for you. Do not submit sensitive personal data in uploads unless necessary and lawful for your use case.

Usage & technical data

  • Log, device, and diagnostic information (such as IP address, browser type, approximate location derived from network data, and error logs) to secure and improve the Service.
  • Analytics events where enabled (for example, page views and interactions) to understand how the Service is used.

3. How we use your data

We use personal data to:

  • Provide, operate, and maintain accounts and the Service.
  • Display your public catalog and shop pages to visitors you choose to share links with.
  • Process subscriptions and payments, and communicate about billing or service changes.
  • Run optional AI features you request, and improve reliability and quality of those features.
  • Detect abuse, fraud, and security incidents; enforce our terms; and comply with law.
  • Analyze usage in aggregate to improve product experience (where permitted).

4. Public information

Information you publish as part of your public catalog or shop page (for example, business name, items, prices, and images you mark as visible) may be accessible to anyone with the link or who finds your listing in public directories we operate. If you add a payment QR or similar image, anyone who can view your public page may see it when you choose to show that section—only upload what you intend customers to see. Do not publish data you are not allowed to share publicly.

5. Sharing & subprocessors

We share data with trusted providers who help us run the Service, including:

  • Hosting & infrastructure — for example, deployment and edge hosting (such as Vercel).
  • Database, auth & storage — for example, Supabase for authentication, application data, and file storage for images you upload.
  • Payments — for example, Razorpay (or successor providers) to process subscriptions and related notifications.
  • Artificial intelligence — for example, Google's AI services when you use AI catalog or vision features, subject to their terms and safeguards.
  • Analytics — where enabled, tools such as Vercel Analytics to measure site usage.

We do not sell your personal data. We may disclose information if required by law, court order, or to protect our rights, users, or the public.

6. Cross-border transfers

Our providers may process data in India and other countries where they operate. Where required, we rely on appropriate safeguards (such as contractual clauses or provider certifications) and limit sharing to what is needed to provide the Service.

7. Retention

We keep personal data only as long as needed for the purposes above, including to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. When you delete content or close your account (where supported), we delete or anonymize data within a reasonable period, subject to backup and legal retention requirements.

8. Security

We implement technical and organizational measures appropriate to the nature of the Service (such as access controls, encryption in transit where standard for web apps, and secure credential handling). No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

9. Your rights

Depending on applicable law (including India's Digital Personal Data Protection Act, 2023, where it applies to you), you may have rights to access, correct, update, or request deletion of your personal data; withdraw consent where processing is consent-based; and lodge a complaint with a supervisory authority where available.

To exercise rights, contact us through the official channels we provide. We may need to verify your identity before responding. If we cannot fulfill a request (for example, due to legal retention), we will explain why.

10. Cookies & similar technologies

We use cookies and similar technologies for essential functions (such as session and security), preferences (such as theme), and, where enabled, analytics. You can control cookies through your browser settings; blocking some cookies may affect functionality.

11. Children

The Service is not directed at children under 16 (or the minimum age in your jurisdiction). We do not knowingly collect personal data from children. If you believe we have, contact us and we will take appropriate steps.

12. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the new version on this page and change the “Last updated” date. Continued use after changes may constitute notice where permitted by law; material changes may require additional notice if required.

13. Contact

For privacy-related requests or questions, contact us through the official channels published on our website or in the application (for example, support or contact information in the footer or dashboard).