Rattanote LogoRattanote

Privacy Policy

Effective Date: March 1, 2025

Rattanote ("we," "us," or "our") operates the website rattanote.com and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Service, in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology Act, 2000 ("IT Act"). By using the Service, you consent to the practices described in this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

When you create an account or use our Service, we may collect:

  • Full name
  • Email address
  • Phone number
  • Account nickname or display name
  • Payment information (processed by our third-party payment processors)

1.2 Information Collected Automatically

When you access or use our Service, we may automatically collect:

  • Device information (browser type, operating system, device identifiers)
  • Log data (IP address, access times, pages viewed, referring URL)
  • Usage data (features used, content viewed, subscription and purchase history)
  • Download history and access logs
  • Cookies and similar tracking technologies

2. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide, maintain, and improve our Service
  • To process transactions and send related information (confirmations, receipts)
  • To deliver purchased digital materials via download or email
  • To manage your account and subscriptions
  • To communicate with you about products, services, promotions, and events
  • To personalise content and recommendations
  • To detect, prevent, and address fraud, abuse, and technical issues
  • To comply with legal obligations under applicable Indian law

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

  • Service Providers: We share information with third-party vendors who perform services on our behalf (e.g., payment processing, data hosting, email delivery, analytics).
  • Content Providers: When you purchase materials delivered via email, we may share your name and email address with the content creator solely for the purpose of delivering the purchased materials. Content providers are required to delete this information within 30 days of delivery.
  • Legal Requirements: We may disclose your information if required by law, regulation, legal process, or governmental request under Indian law, including orders from competent courts or authorities.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Service. We may also retain information as necessary to:

  • Comply with legal obligations under applicable Indian law
  • Resolve disputes and enforce agreements
  • Maintain transaction records (up to 5 years for purchase and download history)
  • Maintain access logs (up to 1 year for security and analytics)

If your account is inactive for more than 12 months, we may move your personal data to a separate database. You may request deletion of your data at any time.

5. Your Rights Under the DPDP Act, 2023

5.1 Rights of Data Principals

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the right to:

  • Right to Access: Obtain a summary of personal data being processed and the processing activities undertaken by us.
  • Right to Correction and Erasure: Request correction of inaccurate or misleading personal data, completion of incomplete data, and erasure of personal data that is no longer necessary for the purpose for which it was collected.
  • Right to Grievance Redressal: Have readily available means to register a grievance with us and receive a response within a reasonable time.
  • Right to Nominate: Nominate another individual who shall exercise your rights in the event of your death or incapacity.
  • Right to Withdraw Consent: Withdraw consent at any time, with the understanding that withdrawal will not affect the lawfulness of processing based on consent before its withdrawal.

5.2 How to Exercise Your Rights

To exercise these rights, please contact us at support@rattanote.com. We will verify your identity before processing your request and respond within the timeframe prescribed under applicable law.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Maintain your session and preferences
  • Analyse usage patterns and improve our Service
  • Personalise content and recommendations

You can control cookies through your browser settings. Disabling cookies may limit your ability to use certain features of the Service.

7. Data Security

We implement commercially reasonable technical and organisational measures to protect your personal information, including encryption of data in transit and at rest, access controls, and regular security assessments, in accordance with the IT Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. However, no method of transmission over the Internet or electronic storage is 100% secure.

8. Cross-Border Data Transfers

Your information may be stored and processed on servers located outside India. Any such transfer shall be carried out in accordance with the DPDP Act, 2023 and applicable rules framed thereunder. By using our Service, you consent to the transfer of your information to jurisdictions where we or our service providers operate.

9. Children's Privacy

Our Service is not directed to children under the age of 18. We do not knowingly collect personal data from minors without verifiable parental consent as required under the DPDP Act, 2023. If you believe we have collected information from a minor without appropriate consent, please contact us immediately at support@rattanote.com so we can delete it.

10. Third-Party Services

Our Service may contain links to or integrations with third-party websites and services (e.g., payment processors, hosting providers). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

  • Hosting: Supabase Inc. (database management and storage)

11. Grievance Officer

In accordance with the IT Act, 2000 and rules made thereunder, the name and contact details of the Grievance Officer are provided below. Any complaints or concerns with regard to the processing of your personal data may be addressed to:

  • Email: support@rattanote.com
  • We shall resolve your grievance within 30 days of receipt.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Effective Date" above. Your continued use of the Service after such changes constitutes your acceptance of the revised policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

  • Email: support@rattanote.com