Privacy Policy
How we collect, use and protect your personal information.
Last updated: [DATE] · Version 0.1 (draft)
Who we are
[COMPANY LEGAL NAME] ("FotoLoot", "we", "us") operates fotoloot.com. Registered office: [REGISTERED ADDRESS]. For any privacy question, contact [PRIVACY EMAIL].
What we collect
- Account details — your name, email address and, if you provide one, your mobile number.
- Sign-in data — a securely hashed password, or your Google account identifier if you sign in with Google. We never see your Google password.
- Usage data — assets you download, purchases you make, and basic technical information such as browser type and IP address.
- Verification codes — short-lived codes sent to your email or mobile to confirm they belong to you.
Why we use it
To create and secure your account, to deliver the downloads and licences you request, to enforce download allowances, to answer support requests, and to meet our legal and tax obligations. We rely on performing our contract with you, our legitimate interest in running the service securely, and your consent where required.
Who we share it with
We share data only with service providers who help us run FotoLoot — hosting, file storage, email delivery and payment processing — and with authorities where the law requires it. We do not sell your personal data. Current processors: [LIST PROCESSORS].
How long we keep it
Account data for as long as your account is open, then [RETENTION PERIOD]. Invoices and tax records for as long as Indian law requires. Verification codes expire within minutes.
Your rights
You may ask us to access, correct or delete your personal data, or to withdraw consent, by writing to [PRIVACY EMAIL]. Under India's Digital Personal Data Protection Act you may also nominate someone to exercise these rights for you, and you may complain to the Data Protection Board of India.
Cookies
We use a small number of cookies that are necessary for the site to work: keeping you signed in, protecting forms against cross-site request forgery, and remembering preferences. [ADD ANALYTICS COOKIE DETAIL IF USED]
Security
Passwords are stored using salted PBKDF2 hashing. Traffic is encrypted with HTTPS. Original files are held in private storage and released only through an authenticated download.
Grievance Officer
As required by India's IT Rules, our Grievance Officer is [OFFICER NAME], reachable at [OFFICER EMAIL], [OFFICER PHONE], [OFFICER ADDRESS]. We acknowledge complaints within 24 hours and aim to resolve them within 15 days.