Privacy Policy

Last updated 19 October 2026

This policy explains what personal data FLEXVISI collects when you visit flexvisi.in, subscribe, or buy from us, why we collect it, and the choices and rights you have.

1. Who is responsible

FLEXVISI, based in India, decides how your data is used (the “data fiduciary”). Contact us at [email protected]. Our Grievance Officer's details are at the end of this page.

2. What we collect

When you buy

• Your name, email address and phone or WhatsApp number, and anything else you give us for the order.
• Order details: the product, amount, date, and the payment status and transaction reference.
• Not your payment details. Card, UPI and bank details are entered on the secure page of our payment partner, an RBI-authorised payment aggregator. We never see or store them.

When you subscribe or contact us

• Your email address when you join our mailing list, and the messages you send us.

When you browse

• Usage data: pages viewed, device and browser type, approximate location from your IP address, referring site, and the time of your visit.
• Your IP address, briefly, for security, rate limiting and preventing abuse.
• Small items stored in your browser (see section 9).

3. Why we use it

• To process payments, deliver products and services by email or WhatsApp, and send receipts.
• To provide support and handle refunds and complaints.
• To send emails you signed up for. Every email has an unsubscribe link.
• To keep the website secure and stop fraud and abuse.
• To understand how the site is used and improve it.
• To meet legal, tax and accounting duties.

We use your data on the basis of your consent, to carry out a purchase you ask for, or where the law requires it. You can withdraw consent at any time by writing to [email protected]; it does not affect what was done before.

4. Who we share it with

We do not sell your personal data. We share it only with service providers who process it for us, under their own security and privacy terms:

• Payment processing: our payment partner, an RBI-authorised payment aggregator.
• Hosting and security: Railway (hosting) and Cloudflare (network, security and bot checks).
• Data storage: Supabase.
• Email delivery: Resend.
• Website analytics: PostHog.
• Messaging: WhatsApp (Meta), when you choose to talk to us or receive your order there.

We may also disclose data when the law, a court or a government authority requires it.

5. Transfers outside India

Some of these providers store or process data outside India, for example in the United States. We use providers that protect data with industry-standard safeguards.

6. How long we keep it

• Order and payment records: as long as tax and accounting law requires.
• Mailing-list email: until you unsubscribe.
• Support messages: up to 24 months after the conversation ends.
• Analytics: according to our analytics provider's retention settings.

7. Your rights

Under India's Digital Personal Data Protection Act, 2023, you can ask us to:

• tell you what personal data we hold about you and how we use it;
• correct, complete or update it;
• erase it, unless we must keep it by law;
• nominate someone to act for you if you die or cannot act yourself.

Write to [email protected]. If you are not satisfied with our answer, you may complain to the Data Protection Board of India. Visitors from other countries have the rights their local law gives them, and can use the same address.

8. Security

The site is served only over HTTPS. Access to data is restricted, and payments happen on our payment partner's secure page. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.

9. Cookies and browser storage

• Analytics: PostHog stores an anonymous identifier in your browser to count visits and understand usage.
• Security: Cloudflare may set cookies to detect bots and protect the site.
• Site features: the website remembers small things, such as your poll vote, in your browser's local storage.

You can clear or block cookies and site data in your browser settings. The site still works without them.

10. Children

Our products are not directed at children under 18, and we do not knowingly collect their data without a parent's or guardian's consent.

11. Changes

We may update this policy. The date at the top shows the latest version.

12. Contact and grievances