Privacy Policy
Effective May 12, 2026
This policy describes what information we collect when you use our website or buy from us, what we do with it, and how to control it. We keep our data footprint deliberately small.
1. Who we are
ZyphraGuard is reachable at support@zyphraguard.com. The ZyphraGuard service and website are operated by Pilix Technologies Pvt Ltd, registered in India at Agartala, Tripura — 799001. For the purposes of data protection law, Pilix Technologies Pvt Ltd is the data controller for the information described in this policy.
2. What we collect
When you submit our contact form we collect the first name, last name, email address, subject, and message that you enter. That is all.
When you place an order we collect:
- Your name, email address, and phone number, so we can deliver your key and contact you about the order.
- The product you bought and the amount you paid.
- Payment metadata returned by Razorpay (order ID, payment ID, payment status). We do not see, receive, or store your card number, CVV, UPI ID, bank credentials, or one-time passwords — these are handled exclusively by Razorpay.
- The email exchange in which you confirm that the payment was authorised. We retain these messages as proof of authorisation and to support the order if any question arises later.
When you browse the site our server records standard request information (IP address, browser type, pages visited) for security and troubleshooting. We do not run advertising trackers, behavioural profiling, social-media pixels, or third-party analytics scripts.
3. How we use it
- Contact form submissions are saved to our internal spreadsheet so we can reply to you.
- Order details are used to deliver your license key, send your receipt, and provide support during your refund window.
- Server logs are used to debug issues and block abuse — never to build a profile of you.
- We do not use your data to send marketing emails, and we do not sell, rent, or trade it.
4. Who else sees it
- Razorpay processes your payment. The information Razorpay collects is governed by their own privacy policy, available on the Razorpay website.
- Our cloud productivity provider hosts the spreadsheet and email account that store your contact submissions and order records and that send your delivery email.
- The software vendor (for example, Norton) receives the minimum information required to issue your license key against your order.
- Indian tax and law-enforcement authorities, if compelled by valid legal process.
We do not share your information with any other third party.
5. How long we keep it
- Contact form submissions: retained until you ask us to delete them.
- Order records: retained for 7 years from the date of purchase, as required for accounting and tax records under Indian law.
- Server logs: rotated and discarded within 30 days.
6. Your rights
You can ask us to do any of the following with the information we hold about you:
- Tell you what we have.
- Correct anything that is wrong.
- Delete it, subject to the retention rules above for order records.
Email support@zyphraguard.com from the address on file. We respond within 7 days.
7. Cookies
We use only session cookies that are strictly necessary for the site to function. We do not use advertising cookies, retargeting cookies, or third-party analytics cookies.
8. Security
Our site is served over HTTPS. Payment information never touches our servers — it is sent directly to Razorpay. Contact and order records are stored in access-controlled cloud accounts limited to authorised staff. No system is perfectly secure, but we take care to limit what we store and to whom it is accessible.
9. Children
Our products and our service are intended for adults. We do not knowingly collect information from anyone under the age of 18. If you believe a minor has submitted information to us, contact support@zyphraguard.com and we will remove it.
10. Changes to this policy
If we change this policy, we will update the effective date at the top of this page. Material changes will also be flagged on the homepage for at least 30 days.
