Privacy Policy

This Privacy Policy describes how Softlynx Dataworks Private Limited, operating the fivedaylaunch service (the "Service"), collects, uses, discloses, and safeguards your personal data. It is issued in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023.

1. Information we collect

We collect the following categories of personal data:

(a) Account and identity data

• Name, business name, email address, mobile number.
• Login credentials (password stored using industry-standard hashing — bcrypt with per-user salt).
• Preferred communication language and time zone.

(b) Business content

• Photographs, logo, product listings, testimonials, and other content you upload for use on your website.
• Content you post inside the community platform, comments, direct messages.

(c) Payment data

• Billing name, address, GSTIN (if provided), and payment method identifier issued by Razorpay.
• We do not collect or store full card numbers, CVVs, UPI PINs, or net-banking credentials. These are transmitted directly to Razorpay under their PCI-DSS-compliant infrastructure.

(d) Technical data

• IP address, browser type and version, device identifiers, referring URL, pages visited, session duration.
• Cookies and similar tracking technologies (see Section 6).

(e) Support data

• Correspondence with our support team, tickets, and screen recordings you voluntarily submit.

2. How we use your data

We process personal data for the following purposes and legal bases:

• Providing the Service — delivering your website, hosting, and portal features (contractual necessity).
• Payments and billing — collecting subscription and one-time fees, issuing invoices, tax reporting (legal obligation).
• Communication — service updates, feature announcements, security notices, transactional email (contractual necessity and legitimate interest).
• Support — responding to your questions and resolving issues (contractual necessity).
• Security and fraud prevention — rate limiting, anomaly detection, blocking abusive behaviour (legitimate interest).
• Product improvement — aggregated analytics on feature usage (legitimate interest, non-identifiable).
• Marketing — only with your explicit opt-in; you may withdraw consent at any time.

3. Sharing and disclosure

We share personal data only with:

• Razorpay Software Private Limited — for payment processing.
• Brevo (Sendinblue SAS) — for transactional and marketing email delivery.
• DigitalOcean, LLC — for cloud infrastructure hosting.
• Government or law-enforcement authorities when compelled by a valid legal request.
• Advisors (lawyers, auditors, accountants) under confidentiality obligations.

We do not sell your personal data to third parties for advertising purposes.

4. Data retention

We retain personal data only for as long as necessary to provide the Service and meet legal obligations:

• Account data — for the life of the account, plus 3 years after closure for tax and audit purposes.
• Payment records — 8 years, as required under the Income Tax Act, 1961 and GST law.
• Support tickets — 3 years from closure.
• Server access logs — 180 days.

5. Your rights

Under Indian law, you have the following rights over your personal data:

• Right of access — request a copy of the personal data we hold about you.
• Right to correction — ask us to correct inaccurate or outdated data.
• Right to erasure — request deletion of your account and associated personal data, subject to our legal retention obligations.
• Right to withdraw consent — withdraw consent for any processing based on consent.
• Right to grievance redressal — contact our Grievance Officer (Section 8).

Requests should be sent to privacy@fivedaylaunch.in. We respond within 30 days.

6. Cookies

We use cookies for authentication (keeping you logged in), CSRF protection, and preference storage. Analytics cookies are strictly first-party and aggregate. You can disable cookies in your browser, but portions of the Service will not function.

7. Security

We implement reasonable security practices consistent with the SPDI Rules, 2011, including TLS 1.2+ for data in transit, encrypted disk storage for backups, per-user access controls, magic-byte validation on file uploads, distributed rate limiting, bot detection, and 24×7 anomaly monitoring. No system is completely secure — we cannot guarantee absolute safety of information transmitted over the internet.

8. Grievance Officer

In accordance with Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021:

9. Cross-border transfers

Some of our infrastructure providers (DigitalOcean, Brevo) may store or process data outside India. In all such cases, we ensure the recipient is subject to contractual data-protection commitments no less protective than Indian law.

10. Children

The Service is intended for use by businesses. We do not knowingly collect data from anyone under 18. If you become aware that a minor has provided data to us, please contact our Grievance Officer for prompt deletion.

11. Changes to this Policy

Material changes will be notified via email and by prominent notice on the Service at least 15 days before they take effect.

12. Contact