Privacy Policy

1. Information We Collect

We collect information that you provide directly and information that is automatically gathered when you use our website:

Personal Information (Provided by You)

• Account details: Full name, email address, and password when you create an account
• Contact information: Phone number for order updates and delivery coordination
• Shipping & billing address: Required to process and deliver your orders
• Payment information: Card details, UPI, netbanking, or wallet information — processed securely by Razorpay and never stored on our servers
• Quote requests: Name, email, and project details when you submit a custom quote
• Reviews: Star ratings, review text, and uploaded images

Automatically Collected Information

• Device data: Browser type, operating system, screen resolution
• Usage data: Pages visited, time spent, products viewed, search queries
• IP address: Used for security, fraud prevention, and approximate location
• Cookies and local storage: Authentication tokens, cart data, theme preferences, and recently viewed products

2. How We Use Your Information

We use your personal information for the following purposes:

• Order processing: To confirm, pack, ship, and deliver your purchases
• Payment verification: To process payments securely via Razorpay
• Communication: To send order confirmations, shipping updates, quote responses, and customer support replies
• Account management: To manage your profile, saved addresses, wishlist, and order history
• Phone verification: To verify the phone number associated with your shipping address via OTP
• Product improvement: To understand customer preferences and improve our keycap designs
• Security: To detect and prevent fraud, unauthorized access, and abuse
• Legal compliance: To comply with applicable laws and regulations in India

3. Data Protection & Security

We take the security of your data seriously and implement the following measures:

• Encryption in transit: All data is transmitted over HTTPS/TLS encryption
• Secure authentication: Powered by AWS Cognito with JWT tokens and industry-standard password policies
• Payment security: Card and payment details are handled exclusively by Razorpay (PCI-DSS compliant) and never touch our servers
• Database encryption: Your data is stored in encrypted PostgreSQL databases hosted on secure cloud infrastructure
• Error sanitization: Internal system errors are never exposed to the frontend — only generic messages are shown
• API protection: Our API endpoints are protected by CloudFront with origin verification to prevent unauthorized access

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Cookies & Local Storage

Our website uses cookies and browser local storage for the following purposes:

• Authentication: JWT access tokens to keep you logged in
• Cart persistence: Your cart items are synced with your account
• Theme preference: Your light/dark mode selection
• Recently viewed: Products you have viewed for quick access
• Analytics: Anonymous usage data to understand how visitors use our site

You can clear cookies and local storage at any time through your browser settings. Disabling cookies may affect your ability to use certain features like the shopping cart and account login.

5. Third-Party Services

We use the following third-party services that may process your data under their own privacy policies:

• Razorpay — Payment processing (UPI, cards, netbanking, wallets). Razorpay is PCI-DSS compliant and handles all sensitive payment data directly.
• Shiprocket — Shipping, order fulfillment, tracking, and delivery services. Your name, phone number, and shipping address are shared with Shiprocket and their courier partners to deliver your order.
• AWS (Amazon Web Services) — Cloud infrastructure for website hosting, user authentication, database management, file storage, and content delivery.

We recommend reviewing the privacy policies of these services for details on how they handle your data.

6. Data Retention

We retain your personal data for as long as necessary to:

• Maintain your account and provide services
• Comply with legal obligations (tax records, order history)
• Resolve disputes and enforce our agreements

If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

7. Your Rights

As a user, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate information via your dashboard
• Deletion: Request deletion of your account and associated data
• Portability: Request your data in a machine-readable format
• Withdraw consent: Opt out of marketing communications at any time

To exercise any of these rights, contact us at contact@keysync.in. We will respond within 30 days.

8. Children's Privacy

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

9. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make changes, the "Last Updated" date at the top of this page will be revised. We encourage you to review this policy periodically. Continued use of our website after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:

• Email: contact@keysync.in
• Phone: +91 92175 45258
• Address: 391, Shiv Mandir, Sector 65 Ballabhgarh, Faridabad, Haryana 121004, India