Privacy Policy | StackHub

1. Introduction

Welcome to StackHub ("we," "us," or "our"), a digital marketplace operating as StackHub, with its operational address at West Milan Nagar, O Lane, House No. 6, Dibrugarh, Assam – 786003, India.

StackHub operates the website https://www.stackhublabs.com ("Platform"), through which we sell ready-made software project codebases ("Products") to college students and developers across India.

This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and what rights you have over your data. By accessing or using our Platform, you agree to the collection and use of information in accordance with this policy.

If you do not agree with any part of this policy, please discontinue use of our Platform immediately.

2. Information We Collect

We follow a minimal data collection approach — we only collect what is strictly necessary to operate our service.

2.1 Information You Provide Directly

When you create an account or make a purchase on StackHub, we collect:

Full name — to personalise your account and order communications
Email address — to create your account, send order confirmations, and communicate service-related updates

We do not collect your phone number, date of birth, gender, government ID numbers, or any other personal information beyond name and email.

2.2 Information Collected Automatically

When you visit or use our Platform, we automatically collect certain technical information:

Device and browser information — browser type, operating system, device type
Usage data — pages visited, time spent on pages, links clicked, search queries on our Platform
IP address — for security, fraud prevention, and approximate geolocation (country/city level only)
Cookies and similar tracking technologies — as described in Section 7 below

2.3 Payment Information

StackHub uses Razorpay (operated by Razorpay Software Private Limited) as its payment processor. All payment transactions — including credit/debit card details, UPI IDs, net banking credentials, and wallet information — are entered directly on Razorpay's secure payment interface and are processed and stored solely by Razorpay.

StackHub does not collect, store, or have access to your card numbers, CVV, UPI IDs, bank account details, or any other sensitive payment instrument data.

The only payment-related information we store on our systems is:

Razorpay Order ID — a reference identifier for your transaction
Razorpay Payment ID — a reference identifier confirming your payment
Transaction amount — the amount paid in Indian Rupees (₹)
Payment status — whether the order is pending, paid, or refunded
Timestamp — date and time of the transaction

This information is stored solely for order fulfilment, customer support, and financial record-keeping purposes.

Razorpay's handling of your payment data is governed by Razorpay's own Privacy Policy, available at https://razorpay.com/privacy/.

2.4 Information from Third-Party Sign-In

If you choose to sign in using Google OAuth, we receive from Google only the following:

Your name (as registered with Google)
Your email address

We do not receive your Google password, phone number, contacts, or any other data from your Google account.

3. How We Use Your Information

We use the information we collect for the following purposes:

Purpose	Legal Basis
Creating and managing your account	Performance of contract
Processing your purchase and delivering digital products	Performance of contract
Sending order confirmation and purchase receipt emails	Performance of contract
Providing access to purchased products via your dashboard	Performance of contract
Responding to your support queries	Legitimate interest
Sending product update notifications for purchased items	Legitimate interest
Preventing fraud and ensuring platform security	Legitimate interest
Improving our Platform through analytics	Legitimate interest / Consent
Complying with applicable Indian laws and regulations	Legal obligation

We do not use your personal information for unsolicited marketing emails, targeted advertising, or sell your data to any third party for commercial purposes.

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We share your information only in the following limited circumstances:

4.1 Service Providers

We share your data with trusted third-party service providers who help us operate our Platform, strictly under data processing arrangements:

Supabase Inc. — cloud database and authentication infrastructure (servers located in AWS ap-south-1, Mumbai)
Razorpay Software Private Limited — payment processing (your name and email are shared with Razorpay as required for payment processing and compliance)
Resend Inc. — transactional email delivery (your name and email are shared to send order confirmation emails)
Cloudflare Inc. — file storage infrastructure for secure product delivery
Vercel Inc. — website hosting and infrastructure
PostHog Inc. — anonymised product analytics
Sentry Inc. — anonymised error tracking and performance monitoring

Each of these providers is contractually obligated to use your data only for the purposes of providing services to us and not for their own commercial purposes.

4.2 Legal Requirements

We may disclose your personal information if required to do so by law, or in good faith belief that such action is necessary to:

Comply with a legal obligation, court order, or government request
Protect and defend the rights or property of StackHub
Prevent or investigate possible wrongdoing in connection with the Platform
Protect the personal safety of users or the public

4.3 Business Transfers

In the unlikely event of a merger, acquisition, or sale of business assets, your personal information may be transferred as part of that transaction. We will notify you via email if such a transfer occurs and this Privacy Policy changes as a result.

5. Data Storage and Security

5.1 Where Your Data is Stored

Your personal data (name and email) is stored in a PostgreSQL database hosted on Supabase, which runs on AWS infrastructure in the ap-south-1 (Mumbai) region — within India.

5.2 How We Protect Your Data

We implement the following technical and organisational security measures:

All data transmitted between your browser and our Platform is encrypted using TLS 1.2 or higher (HTTPS)
Database access is protected by Row Level Security (RLS) — you can only access your own data
File downloads are served via time-limited signed URLs that expire after 15 minutes — not permanent public links
Payment data is handled entirely by Razorpay's PCI-DSS compliant infrastructure
Access to our database and admin systems is restricted to authorised personnel only
Third-party authentication (Google OAuth) is handled via Supabase Auth — we never see or store your Google password

5.3 Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. Specifically:

Account data (name, email): retained until you request account deletion
Order records (Razorpay IDs, amount, status): retained for a minimum of 7 years as required under Indian financial and tax regulations
Review data: retained until you request deletion or your account is deleted

6. Your Rights Under the Digital Personal Data Protection Act, 2023 (DPDP Act)

As a user whose personal data is processed by StackHub, you have the following rights under India's Digital Personal Data Protection Act, 2023:

Right to Access: You may request a summary of the personal data we hold about you and how it is being processed.
Right to Correction: You may request correction of inaccurate or incomplete personal data.
Right to Erasure: You may request deletion of your personal data, subject to our legal obligations to retain certain records (such as order history for tax/financial compliance).
Right to Grievance Redressal: You have the right to raise a grievance with our Grievance Officer (see Section 9) regarding the processing of your personal data.
Right to Nominate: You may nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, please contact us at the email address provided in Section 9. We will respond to your request within 30 days.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate and improve our Platform.

Types of cookies we use:

Strictly necessary cookies: Required for the Platform to function — session management, authentication state, security. These cannot be disabled.
Analytics cookies: Used by PostHog to understand how visitors interact with our Platform (pages visited, features used). This data is anonymised and aggregated.
Error tracking: Used by Sentry to capture technical errors anonymously to help us fix bugs.

We do not use advertising cookies or share data with advertising networks.

You may control non-essential cookies through your browser settings. Note that disabling cookies may affect certain functionality of the Platform.

8. Children's Privacy

StackHub is intended for use by individuals who are 18 years of age or older. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe your child has provided personal information to us, please contact us immediately and we will take steps to delete such information.

9. Grievance Officer

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, the details of our Grievance Officer are as follows:

Merchant Legal/Trade Name: StackHub Designation: Grievance Officer Operational Address: West Milan Nagar, O Lane, House No. 6, Dibrugarh, Assam – 786003, India Email: privacy@stackhublabs.com Response Time: We will acknowledge your grievance within 72 hours and resolve it within 30 days of receipt.

10. Third-Party Links

Our Platform may contain links to third-party websites (such as GitHub documentation, tutorial sites, or technology references). We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policy of every website you visit.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:

Update the "Last Updated" date at the top of this page
Notify registered users via email if the changes are material

Your continued use of the Platform after the updated policy is posted constitutes your acceptance of the revised policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us at:

Merchant Legal/Trade Name: StackHub Operational Address: West Milan Nagar, O Lane, House No. 6, Dibrugarh, Assam – 786003, India Email: privacy@stackhublabs.com Website: https://www.stackhublabs.com

This Privacy Policy was drafted in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023.