Privacy Policy

PIXIRAIN TECHNOLOGIES PRIVATE LIMITED operates Pixirain and determines how the website, account and project information described here is used. The registered address and contact routes appear below. A professional assigned to a project may receive the information needed to fulfil it and may have independent legal duties in relation to their own work.

This policy describes the service as implemented across the website and the connected Pixirain backend. It is a notice about actual practices, not a statement that every security standard or data-protection obligation has been externally certified. Contact hello@pixirain.com about a particular processing question.

Account and profile: name, email, optional phone, sign-in credentials or Google account identifier, role, profile image, biography, preferences, verification and account status. A professional profile may include skills, rates, portfolio and payout onboarding status. We do not ask customers to place PAN, Aadhaar or bank credentials in a public profile.

Enquiries and projects: contact-form content, service selection, cart and package configuration, project brief, references, uploaded files, milestones, deliverables, messages, feedback, reviews, support tickets and disputes. Some of these may contain personal data about your staff, customers or other people if you include it.

Orders and payments: package prices, coupons, taxes and totals, order and transaction references, Razorpay order and payment identifiers, payment status, refund or transfer status, invoice and billing records, and a provider-issued saved-method reference where you choose that feature. Razorpay Checkout collects payment instrument details through its own interface. This application has no card-number or CVV field; do not send that information in project messages or support requests.

Technical and security: IP address, browser and device information, session identifiers, sign-in events, error and security logs, request metadata, cookie and browser-storage choices, and information used to prevent abuse or diagnose an outage. The exact log retention period depends on the hosting and backend configuration.

Most information comes directly from you when you register, send an enquiry, place an order, upload a brief, message a project team or seek support. Google may provide basic account details when you select its sign-in option. Razorpay returns payment status and transaction references. Assigned participants may add milestones, files, comments, reviews or dispute evidence. Our systems create technical logs and order records while you use the service.

We use account details to create and secure accounts, verify email ownership, authenticate users and provide requested settings. We use briefs, files and messages to assess, assign, perform, review and support a project. Order and payment records allow us to show the amount due, reconcile a payment, issue an invoice, resolve a duplicate debit, manage a refund and account for the transaction.

We use support and dispute records to answer questions and make a fair decision on contested work. Security information helps us detect unauthorised access, misuse and technical failure. We may use information to comply with tax, accounting, consumer-protection, payment-provider and other legal duties. We do not sell account or project data to advertisers.

Where a particular use requires consent, we ask for an appropriate affirmative choice and explain how to withdraw it. Withdrawing optional consent does not undo a completed order or remove records we must retain for another lawful reason. Account registration includes a Terms acceptance checkbox; agreeing to Terms is distinct from granting optional marketing or analytics consent.

Email, a sign-in method and information needed to understand and deliver a chosen order are generally necessary for the service. A phone number, profile biography and some preference fields are optional unless a particular project or legal process makes one necessary. If you do not provide an essential brief, access or payment authorisation, we may be unable to start or complete the requested service; we will explain the reason.

Do not upload special-category or highly confidential material merely because the form allows files. Tell us before a project requires health, financial, government-ID or large third-party personal datasets so that scope, access and safeguards can be assessed.

Assigned professionals and project managers may see the brief, relevant files, workspace messages, milestones and delivery feedback needed for their role. Staff handling support, operations, disputes, fraud prevention or finance may access relevant records under their duties. A client’s chosen visibility settings can limit some contact detail sharing; they do not make a project brief invisible to the person doing the work.

Razorpay processes checkout and payment activity. The site uses NextAuth for sessions, Google when its sign-in option is used, and Supabase for project file storage. The backend and website are deployed on hosting providers identified in the project configuration, and transactional mail is sent by the configured email provider. We do not name an unverified live vendor or region as a guarantee. Providers may have their own notices when you interact directly with them.

Information may be disclosed to a competent authority where law requires it, or to protect a legal claim or investigate fraud. A business reorganisation may transfer relevant records subject to applicable safeguards and notice. We do not publish private identity documents or project files as part of the website’s legal disclosures.

Razorpay Checkout presents payment methods and collects card or UPI credentials in its payment interface. Pixirain’s frontend sends the provider’s order, payment and signature references to a server endpoint. The backend stores order and transaction information and uses provider callbacks or webhooks to update payment state. Saved methods are represented by provider tokens and limited display details, not by a raw card number.

We do not claim that using Razorpay removes our own duties to secure the website, reconcile payment outcomes or respond to a complaint. Do not email us a full card number, CVV, UPI PIN or one-time password. If you accidentally include sensitive payment credentials in a message, contact us so we can restrict and remove that content where possible.

Essential session and anti-forgery cookies support sign-in. The cart and certain preferences may be kept in browser storage. Razorpay or Google can use their own cookies when you choose those actions. The current website source does not load an advertising pixel or optional product-analytics provider. See the Cookie and Browser Storage Policy for categories and controls. If optional tracking is added later, its disclosure and choice mechanism should be updated before activation.

We keep information while an account or project is active and for the period reasonably needed to provide support, resolve payment or delivery disputes, prevent abuse and meet legal recordkeeping obligations. Invoices, tax and transaction records may need to outlast an account. Project materials may also be needed by another participant or to establish what was delivered. Exact retention periods should be confirmed against the live backend, hosting backups and applicable law rather than assumed from a website date.

You can request account closure or deletion through available account controls or hello@pixirain.com. We may first need to complete an open project, refund or dispute and verify that the request is yours. We will explain data removed, de-identified or retained. Backups generally expire on a rotation rather than being edited record by record. More detail appears in Data Deletion.

We use access controls, authentication, server-side checks and payment signature verification in the application. Files are accessed through the project workflow rather than as a public document directory. We also limit some high-risk requests and record security events. No online service can guarantee that every incident is impossible. If you think your account has been misused, change your password and contact us promptly.

We assess suspected incidents and notify affected people and authorities where applicable law requires it. This policy does not claim PCI certification, Indian-only hosting, end-to-end encryption or an external security audit. Production settings and provider arrangements need separate verification.

The website, backend, storage, email and payment systems may be operated by different providers. Their live regions and any cross-border processing depend on deployment and vendor settings. We do not state that all personal data remains in India without verified infrastructure evidence. Where a transfer is restricted by applicable law, we will apply that requirement to the relevant processing and vendor arrangement.

You may ask what personal information we hold about you, request correction of an inaccurate account detail, obtain available account information, object to or withdraw an optional permission, request deletion where applicable, or raise a complaint. Some account controls allow you to update profile information or export data directly. We may need to verify identity and may refuse or limit a request where law requires retention or another person’s rights would be affected; we will explain the reason.

India’s Digital Personal Data Protection Act, 2023 has staged commencement. The core processing and individual-rights provisions are scheduled to commence after the transition in the official notification; this policy does not falsely state that every DPDP right was already in force on this revision date. We will align the service with provisions as they become effective. Existing rights under other applicable law remain available.

Pixirain’s customer accounts and paid project ordering are intended for adults. We do not knowingly invite children to register. If we learn that a child has provided personal data contrary to this service design, contact hello@pixirain.com and we will assess deletion or other action required by law.

Write to hello@pixirain.com with the account email and enough detail to locate your request. A privacy complaint can also be sent to hello@pixirain.com. Do not include identity-document scans unless we specifically ask through a secure process. We aim to acknowledge a customer complaint within 48 hours and work toward resolution within one month where the Consumer Protection (E-Commerce) Rules apply. A complex statutory data request may follow a different legally required process.

The date above is the revision date of this public notice. We may revise it as services, vendors or law change. Material changes will be communicated through a reasonable channel, such as the account email or a prominent website notice. A new policy cannot turn a previously optional activity into a silently accepted one where fresh consent is required.

Pixirain is operated by PIXIRAIN TECHNOLOGIES PRIVATE LIMITED, incorporated in India on 15 September 2026. Its Corporate Identity Number is U62099DC2026PTC475007.

Registered office: PNO NEW-19-A OLD-19 KH NO, 39/8 G/F TEACHER COLONY, Samai Pur, Delhi, North West Delhi- 110042, Delhi. This is the address recorded on the certificate of incorporation; it is not a promise that walk-in customer support is available there.

For an order, payment, account or service concern, use the contact page or write to hello@pixirain.com. Privacy requests can be sent to hello@pixirain.com. Complaints can also be sent to hello@pixirain.com.