Legal

Privacy Policy

Last updated: June 2026

1. About This Policy

This Privacy Policy describes how LaDinda ("we", "us", "our") collects, uses, shares, and protects personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Consumer Protection (E-Commerce) Rules, 2020. By using LaDinda you agree to this policy.

2. What We Collect

Account Data

When you sign in with Google we receive your name, email address, and profile photo via Firebase Authentication. This is required to identify you and associate your purchases and content with your account.

Transaction Data

When you make a purchase we store your Razorpay order ID, payment ID, amount, currency, and the email/phone you provided at checkout. Card and bank details are processed entirely by Razorpay — we never store them.

Usage Data

We collect standard server logs (IP address, browser type, pages visited, timestamps) to operate and improve the platform. We do not build advertising profiles from this data.

Content You Upload

Creators uploading products (videos, PDFs, images) consent to those files being stored on Cloudflare R2 (United States/European Union datacentres) and delivered to buyers who purchase them.

3. Purpose & Legal Basis

Contract performance — processing payments and delivering purchased products.
Legitimate interest — operating the marketplace, preventing fraud, sending transactional emails.
Legal obligation — retaining financial records for 7 years as required by Indian tax law.
Consent — AI Studio features that send prompts to Google Gemini (you may decline by not using AI Studio).

4. Third-Party Services & Cross-Border Transfers

Your data is shared with the following processors, which may store data outside India:

Firebase / Google (US) — Authentication. Governed by Google's Data Processing Terms.
Razorpay (India) — Payment processing. Governed by Razorpay's Privacy Policy.
Supabase (Japan) — Database (PostgreSQL) hosting. Governed by Supabase's Privacy Policy.
Cloudflare (US/EU) — CDN and R2 file storage. Governed by Cloudflare's Data Processing Addendum.
Bunny.net (EU) — Video streaming. Governed by Bunny.net's Privacy Policy.
Resend (US) — Transactional email delivery. Governed by Resend's Privacy Policy.
Google Gemini (US) — AI features in AI Studio only. Prompts you submit are processed by Google.

These transfers are necessary to provide the services you use. Each processor is bound by contractual data protection obligations equivalent to applicable law.

5. Data Retention

Account data is retained for the life of your account. Order records and financial data are retained for 7 years for tax and legal compliance. AI Studio chat sessions are not stored server-side. You may request deletion of your account and associated personal data at any time (see Section 6).

6. Your Rights as a Data Principal (DPDP Act 2023)

Under the DPDP Act you have the following rights regarding personal data we hold about you:

Right of Access — request a summary of the personal data we process about you.
Right of Correction — request correction of inaccurate or incomplete personal data.
Right of Erasure — request deletion of your personal data, subject to legal retention obligations.
Right to Withdraw Consent — where processing is based on consent, you may withdraw it at any time without affecting past processing.
Right to Grievance Redressal — contact our Grievance Officer (see Section 8) for any data-related complaint.

To exercise any right, email support@ladinda.io. We will respond within 30 days.

7. Cookies

We use session cookies strictly to keep you logged in. We do not use advertising or tracking cookies.

8. Grievance Officer

In accordance with the Consumer Protection (E-Commerce) Rules, 2020 and the DPDP Act, 2023, we have designated a Grievance Officer for all data and consumer complaints:

Name: {{GRIEVANCE_OFFICER_NAME}}
Email: support@ladinda.io
Address: Aizawl, Mizoram, India
Response time: Within 30 days of receipt

9. Changes to This Policy

We may update this policy from time to time. We will notify registered users of material changes by email at least 7 days before the change takes effect.

2. What We Collect

Account Data

Transaction Data

Usage Data

We collect standard server logs (IP address, browser type, pages visited, timestamps) to operate and improve the platform. We do not build advertising profiles from this data.

Content You Upload

Creators uploading products (videos, PDFs, images) consent to those files being stored on Cloudflare R2 (United States/European Union datacentres) and delivered to buyers who purchase them.

3. Purpose & Legal Basis

Contract performance — processing payments and delivering purchased products.

Legitimate interest — operating the marketplace, preventing fraud, sending transactional emails.

Legal obligation — retaining financial records for 7 years as required by Indian tax law.

Consent — AI Studio features that send prompts to Google Gemini (you may decline by not using AI Studio).

4. Third-Party Services & Cross-Border Transfers

Your data is shared with the following processors, which may store data outside India:

Firebase / Google (US) — Authentication. Governed by Google's Data Processing Terms.

Razorpay (India) — Payment processing. Governed by Razorpay's Privacy Policy.

Supabase (Japan) — Database (PostgreSQL) hosting. Governed by Supabase's Privacy Policy.

Cloudflare (US/EU) — CDN and R2 file storage. Governed by Cloudflare's Data Processing Addendum.

Bunny.net (EU) — Video streaming. Governed by Bunny.net's Privacy Policy.

Resend (US) — Transactional email delivery. Governed by Resend's Privacy Policy.

Google Gemini (US) — AI features in AI Studio only. Prompts you submit are processed by Google.

These transfers are necessary to provide the services you use. Each processor is bound by contractual data protection obligations equivalent to applicable law.

6. Your Rights as a Data Principal (DPDP Act 2023)

Under the DPDP Act you have the following rights regarding personal data we hold about you:

Right of Access — request a summary of the personal data we process about you.

Right of Correction — request correction of inaccurate or incomplete personal data.

Right of Erasure — request deletion of your personal data, subject to legal retention obligations.

Right to Withdraw Consent — where processing is based on consent, you may withdraw it at any time without affecting past processing.

Right to Grievance Redressal — contact our Grievance Officer (see Section 8) for any data-related complaint.

To exercise any right, email support@ladinda.io. We will respond within 30 days.