Privacy Policy

What personal data we collect, why, who it is shared with, how long we keep it and the rights you have.

1. What we collect

• Account details: your email address, name, and optionally phone number, postal address and profile photo.
• Library activity: books borrowed and returned, reviews, plans, notifications.
• Wallet and payments: wallet balance, transaction history, recharge and refund records and Razorpay payment references. We never see or store your full card number, UPI PIN or net-banking credentials; Razorpay handles those.
• Consent records: which documents you accepted, when, and the IP address and browser used.
• Technical data: IP address and basic request logs for security, fraud prevention and fixing errors.

2. Why we use it

• To create and secure your account and sign you in with one-time codes.
• To lend books, charge your wallet, send receipts and reminders, and run refunds.
• To prevent fraud and abuse, keep the service reliable, and meet legal and accounting obligations.
• To respond to your questions and complaints.

3. Who we share it with

We do not sell your data. We share only what is needed with:

• Razorpay Software Private Limited, to process payments and refunds.
• Our email delivery provider (the Areeze notification service and its mail provider), to send sign-in codes and notices.
• Hosting and infrastructure providers that run the website and database for us, under confidentiality obligations.
• Authorities, where the law requires it.

4. How long we keep it

Account and activity data is kept while your account is open. When you close your account we keep wallet, payment, refund and consent records for as long as accounting and tax law requires (typically up to eight years), then delete or anonymise them. Reviews you wrote may remain, shown without your full name.

5. Your rights

• Access and correct your data from your Profile page, or ask us for a copy.
• Ask us to erase your data. We will, except for records we must keep by law.
• Withdraw consent for optional emails in Profile > Preferences. Account-safety and legal notices cannot be switched off while you have an account.
• Complain to us (see Grievance Redressal) or to the relevant data protection authority.

6. Security

Sign-in uses one-time codes with attempt limits; sessions use short-lived tokens; data is encrypted in transit; and access to production systems is restricted. No system is perfectly secure, so please tell us at once if you suspect misuse of your account.

7. Children

The service is for adults. A parent or guardian may create an account to borrow for a child.

8. Changes

If we make material changes we will ask you to accept the new version the next time you sign in.