Privacy Policy
Last updated: 25 October 2026. This version applies from the date it is published on insightore.in.
This policy explains what personal information insightore.in collects, why, who we share it with, how long we keep it, and what you can do about it.
It applies to this website, our sales and sign-up pages, our email newsletter, and purchases of our digital products. It does not cover other companies' websites that we link to. Those have their own policies.
Who we are
insightore.in is run by Indies Groups (proprietor: Santanu Saha), 340, APR Praveens Grandio, Patancheru, Hyderabad, Telangana 502319, India ("we", "us"). We decide how and why your information is used. Contact: [email protected].
Our Grievance Officer's name and contact details are below.
Who collects and keeps your information
We collect your information ourselves, and the companies below collect or keep it for us or alongside us. SPDI Rules 2011, rule 5(3), requires us to tell you who they are and where they are.
| Organisation | Role | Address |
|---|---|---|
| Indies Groups (proprietor: Santanu Saha) (insightore.in) | Collects your information through our forms and pages, and decides how it is used | 340, APR Praveens Grandio, Patancheru, Hyderabad, Telangana 502319, India |
| Cloudflare, Inc. (Cloudflare) | Hosts our main website, insightore.in, delivers it through its network (CDN), runs its domain name service (DNS) and keeps its server logs | San Francisco, California, USA |
| ITACWT Limited (operator of systeme.io) | Runs our sign-up (opt-in) pages, email list and email sending, and our sales pages, and stores newsletter and order data for us. It does not host the main insightore.in website | 2 Cruise Park Rise, Tyrrelstown, Dublin 15, Ireland. Its privacy policy says data is stored on Amazon Web Services servers in Ireland |
| Razorpay Software Limited | Collects and keeps payment details for INR payments (buyers in India) | 1st Floor, SJR Cyber, 22 Laskar Hosur Road, Adugodi, Bengaluru 560030, Karnataka, India |
| Lemon Squeezy (Sold through Link, LLC) | Collects and keeps payment and billing details for USD orders (buyers outside India) as reseller and merchant of record | 222 Main Street, Suite 500, Salt Lake City, UT 84101, USA |
| Google LLC (Google Analytics 4) | Collects analytics data, only if you accept analytics cookies | 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA |
What we collect, and why
We collect only what we need for each purpose below.
1. When you sign up for our newsletter or a free download
- What: your email address, and your first name if you choose to give it. We also record when and where you signed up and what you agreed to. Our email provider records whether our emails are delivered, opened or clicked.
- Why: to send you what you asked for (for example a free template), and, only if you tick the box for it, our newsletter. The newsletter includes recommendations, affiliate links and offers for our own products.
- Who handles it: our sign-up (opt-in) pages, email list and emails run on systeme.io, not on our main website. systeme.io is operated by ITACWT Limited, 2 Cruise Park Rise, Tyrrelstown, Dublin 15, Ireland. Its data is stored on Amazon Web Services servers in Ireland.
2. When you buy one of our products
Which checkout you see depends on where you are:
- Buyers in India pay in Indian rupees (INR) through Razorpay only.
- Buyers outside India pay in US dollars (USD) through Lemon Squeezy only.
Paying in INR (Razorpay, buyers in India):
- What: your name, email address and phone number (the checkout requires these), what you bought, the price, and the payment status.
- Who processes payment: Razorpay (India). Razorpay collects your card, UPI or bank details directly. We never see or store your full card or bank details.
- Why: to process your order, deliver the product, send receipts and invoices, handle refunds and support, prevent fraud, and keep the tax and accounting records the law requires.
Paying in USD (Lemon Squeezy, buyers outside India):
- Who you buy from: these orders are sold by Lemon Squeezy (Sold through Link, LLC, USA), acting as reseller and merchant of record.
- What Lemon Squeezy collects: your payment and billing details, under its own Buyer Terms and Privacy Policy.
- What we receive: order details from Lemon Squeezy, such as your name, email, country, product and amount, so we can give you access to the product and support you.
3. When you browse the site
Our main website (Cloudflare): insightore.in is a static website hosted and delivered by Cloudflare (Cloudflare, Inc., USA), which also runs our domain name service. Like any web host, Cloudflare's servers automatically process technical details of each visit (your IP address, browser type, the pages requested and the time) to deliver the pages and protect the site from attacks and abuse. We don't use this information to identify you or for marketing. Our website's code is stored on GitHub, but GitHub doesn't receive any information about our visitors.
Our systeme.io pages (sign-up and sales pages) use only the cookies systeme.io needs to make the page, form and checkout work. We don't add analytics or advertising tags to them.
Analytics, only with your consent:
Google Analytics 4 (Google):
- Only after you click "Accept" on our cookie banner. Until then, the Google Analytics code doesn't load and no analytics cookies are set. Our own cookie banner loads Google's tag (from googletagmanager.com) for Google Analytics only after you accept.
- What it does: helps us understand which pages are read, how people find the site, and roughly where they come from.
- How: it uses cookies and similar identifiers to collect data such as pages viewed, time on page, the referring site, device and browser type, and approximate location. Read how Google uses information from sites or apps that use its services.
- Retention: user-level and event-level data is deleted after 14 months (our Google Analytics data-retention setting).
We do not use session-recording or heatmap tools.
4. When you contact us
If you email us or fill in a contact form, we use your name, email and message to reply and to keep a record of the conversation.
5. Affiliate links
We don't have any affiliate links at the moment. If we add them, clicking one will take you to the other company's site. That company, or its affiliate network, may set its own cookies there to record that you came from us. We would normally receive only sales or commission reports, not your identity. That company's privacy policy applies to anything you do on its site. We'll update this policy before we add any affiliate links.
What we don't collect
We don't ask for passwords to your accounts, health information or government ID. We don't knowingly collect information from children (see Children).
Our legal basis
- Consent: for our newsletter and promotional emails, and for analytics cookies. You give consent by a clear action, such as ticking an unticked box or clicking "Accept". We never pre-tick boxes.
- Information you give us to get something: when you buy a product or ask for support, we use the information you provide for that purpose.
- Legal requirements: we keep purchase and tax records because tax and accounting laws require it.
You can say no. If you don't give the information a form asks for, or you later withdraw consent, we may not be able to provide that particular service, for example sending the newsletter or delivering a product. Saying no to analytics cookies never affects your access to the site.
Who we share it with
We do not sell your personal information. We share it only with:
| Who | What for | Where |
|---|---|---|
| Cloudflare (Cloudflare, Inc.) | Hosting, content delivery (CDN), DNS and security for the main insightore.in website, including visitor IP addresses and server logs | US company. Cloudflare's network has data centres in many countries, including India, and visits may be handled outside India |
| systeme.io (ITACWT Limited) | Sign-up (opt-in) pages, email list and email sending, sales pages, order and course access (not the main website) | Ireland (EU) |
| Razorpay | INR payment processing and refunds (buyers in India) | India |
| Lemon Squeezy (Sold through Link, LLC) | USD sales as reseller and merchant of record: payment, tax and refunds (buyers outside India) | USA |
| Google (Google Analytics 4) | Website analytics, only if you accept analytics cookies | USA and other countries |
| Our professional advisers (e.g. a Chartered Accountant) | Accounting, tax and legal compliance | India |
| Government or law-enforcement agencies | Only where the law requires it | India |
We require the service providers who handle data for us to keep it confidential and secure and to use it only to provide their service. Cloudflare and systeme.io process data for us as our hosting and email/page providers. Google, Razorpay and Lemon Squeezy also process some data under their own terms and privacy policies.
Transfers outside India
Some of these providers store or process data outside India: Cloudflare (a US company with data centres in many countries), systeme.io in Ireland, and Lemon Squeezy and Google in the USA and other countries. We use them because we need them to run the site, deliver your order or send you emails, or because you agreed to it. We choose providers that publish security and privacy commitments.
Under India's Digital Personal Data Protection Act, 2023, transfers are allowed except to countries the Government restricts by notification. We will stop any transfer that becomes restricted.
How long we keep it
| Information | How long |
|---|---|
| Newsletter subscriber data (email, name, engagement) | Until you unsubscribe or withdraw consent. We then delete it within 30 days, keeping only your email address on a "do not email" list so we don't email you again. |
| Inactive subscribers | If you haven't opened or clicked any email for 24 months, we send one email asking if you want to stay. If you don't confirm within 30 days, we delete your data as above. |
| Free-download sign-ups (no newsletter consent) | Deleted within 90 days after we send the download. systeme.io can't delete contacts automatically, so we delete these contacts by hand at least every 30 days. systeme.io then keeps deleted contacts in its bin for 30 days before erasing them permanently, which keeps the total within 90 days. |
| Records of your consent and unsubscribe | For as long as you are subscribed, then 1 year after you leave, so we can show what you agreed to. If you asked only for a free download, the record is deleted with your other details (within 90 days). |
| Purchase, invoice and payment records | 8 years from the end of the financial year (April–March) of the purchase. This covers the GST and income-tax record-keeping periods (see below). Kept longer only if the records are needed for an ongoing tax assessment, appeal or legal proceeding. |
| Support and contact emails | 2 years after the conversation ends. If they relate to a purchase, they are kept with the purchase records. |
| Google Analytics data | 14 months, then deleted automatically. |
Why 8 years for purchase records: the GST law (Central Goods and Services Tax Act, 2017, section 36) requires registered businesses to keep accounts and records until 72 months after the due date of the annual return for that year. The Income-tax Rules, 2026 (rule 46(9), made under section 62 of the Income-tax Act, 2025) require books and documents to be kept for seven tax years from the end of the relevant tax year. Eight years from the end of the financial year covers both.
When we no longer need information, we delete it or make it anonymous.
How we keep it secure
We take reasonable steps to protect your information:
- we use reputable providers (Cloudflare, systeme.io, Razorpay, Lemon Squeezy, Google) that run their own security programmes;
- the site runs over HTTPS;
- our accounts are protected by strong, unique passwords and two-factor authentication where available;
- only we (and anyone we authorise in writing) can access subscriber and customer data, and only as needed;
- we never store card or bank details, because Razorpay and Lemon Squeezy handle those;
- we keep a written information-security policy and review it at least once a year;
- if a breach affects your information, we will tell you and the authorities as the law requires.
No method of sending or storing data is completely secure, so we can't guarantee absolute security.
Your choices and rights
You can:
- Unsubscribe from emails at any time with the one-click link at the bottom of every email.
- Ask what we hold about you, and get a summary of it.
- Correct or update information that is wrong or incomplete.
- Withdraw consent you gave earlier, for example to the newsletter or to analytics cookies. Email [email protected] or use the "Cookie settings" link in the footer. Withdrawing consent doesn't affect anything we did before you withdrew it.
- Ask us to delete your information, unless we have to keep it by law (for example invoices).
- Complain to our Grievance Officer (below).
To use any of these rights, email [email protected] from the address we hold, or tell us how we can verify that it's you. We will reply within the time shown in the Grievance Officer section.
Cookies and similar technologies
Cookies are small files stored by your browser. We set no analytics or other non-essential cookies until you click "Accept" on our cookie banner. If you click "Reject" or ignore the banner, only essential cookies are used.
| Type | Set by | Purpose | When |
|---|---|---|---|
| Essential | Our website (hosted on Cloudflare, including our cookie banner and any security cookies Cloudflare sets to block attacks), systeme.io, Razorpay, Lemon Squeezy | Make pages, forms and checkout work; remember your cookie choice; security; fraud prevention | Always. The site and checkout won't work without them |
| Analytics | Google Analytics 4, loaded on insightore.in by our own cookie banner through Google's tag (googletagmanager.com) | Count visits and understand how the site is used | Only after you accept. The Google tag doesn't load before that. Not used on our systeme.io pages |
| Affiliate tracking | The companies we link to (on their own sites) | Record that you came from us, so we get the commission | Not used at the moment (no affiliate links). If added, set on their sites, not ours |
How to change your choice:
- Cookie settings: use the "Cookie settings" link in our website footer to accept or withdraw consent at any time. If you withdraw it, Google's tag and Google Analytics stop loading on your next page view.
- Google Analytics: you can also install the Google Analytics opt-out browser add-on.
- Your browser: you can block or delete cookies in your browser settings. Some parts of the site, such as checkout, may not work if you block essential cookies.
Children
This site and our products are meant for adults. We do not knowingly collect personal information from anyone under 18, and our sign-up forms ask you to confirm that you are 18 or older. If you think a child has given us information, email [email protected] and we will delete it.
Grievance Officer
If you have a concern or complaint about how we handle your information, or about a purchase, contact our Grievance Officer:
- Name: Santanu Saha
- Designation: Proprietor and Grievance Officer
- Email: [email protected]
- Address: 340, APR Praveens Grandio, Patancheru, Hyderabad, Telangana 502319, India
We will acknowledge your complaint within 48 hours and resolve it within one month of receiving it. Rule 5(9) of the SPDI Rules 2011 requires us to publish these details and to resolve grievances within one month.
Contact us
Indies Groups (proprietor: Santanu Saha) · 340, APR Praveens Grandio, Patancheru, Hyderabad, Telangana 502319, India · [email protected]
Changes to this policy
We may update this policy when our tools or the law change, and we will change the "Last updated" date at the top. If a change is significant, for example a new purpose or a new kind of data, we will tell subscribers by email and, where the law requires it, ask for consent again.
What changes in 2027
India's Digital Personal Data Protection Act, 2023 and DPDP Rules, 2025 bring in most of their duties from about 13 May 2027. We already follow most of them. From that date:
- Notices: we will give you a standalone notice listing the data and purposes, with links to withdraw consent, use your rights and complain to the Data Protection Board of India. Existing subscribers may be asked to confirm their consent.
- More rights: you will also be able to nominate someone to exercise your rights if you die or become unable to. You can complain to the Data Protection Board after using our grievance process.
- Breach notices: we will notify affected people and the Board as the Rules require.
- Minimum log retention: the Rules require us to keep personal data and processing logs for at least one year for security purposes, even after the original purpose is served. Our retention periods will be adjusted where needed.
- Our one-month grievance commitment stays. It is shorter than the maximum the DPDP Rules allow.