Privacy Policy

1. Who We Are

TINKORE - PAPER ARTS is operated by Pansoft Technologies ("we", "us", or "our"), headquartered in India. We operate the digital e-commerce storefront at kidspaperkit.in, providing downloadable PDF activity kits and educational worksheets.

2. Information We Collect

We only collect information strictly necessary to process orders, fulfill digital downloads, and provide customer support:

• Purchaser Information: Full name and email address provided during guest checkout or free sample download.
• Transactional Metadata: Order date/time, purchased product snapshots, order totals, and payment status.
• Payment Processing: Online payments are processed directly by our PCI-DSS certified gateway (Razorpay Software Private Limited). We do not store or process your credit/debit card numbers, UPI PINs, or bank account credentials on our servers.
• Technical Logs: IP address, browser type, and download token redemption timestamps strictly used for error monitoring, rate-limiting, and fraud prevention.

3. How We Use Your Information

We use your information exclusively for the following legitimate purposes:

• To email your secure, time-limited digital download links and payment receipts.
• To enable customer support staff to resend or reactivate download links if you misplace your files.
• To process refunds in accordance with our Refund Policy.
• If you explicitly opt-in: to send occasional email updates regarding new printable craft kits (you can unsubscribe anytime with 1 click).

4. Data Sharing & Third Parties

We never sell, rent, or trade your personal information. We only share data with essential infrastructure service providers:

• Payment Gateway: Razorpay (to process Indian UPI, card, and netbanking transactions).
• Transactional Email: SMTP delivery providers to send instant purchase receipts and PDF download links.
• Cloud Infrastructure: Secure servers located within compliant datacenters with automated SSL/TLS encryption.

5. Data Retention & Your Rights

In accordance with India's Digital Personal Data Protection Act (DPDPA 2023) and international best practices:

• Right of Access & Correction: You may request a copy of your transaction history or update your email address by contacting support.
• Right to Erasure: You may request complete deletion of your customer records after your download access period expires.
• Retention Period: We retain order receipts for the statutory period required by Indian tax and invoicing regulations (GST).

6. Grievance Officer & Contact

If you have any questions, privacy concerns, or data requests, please contact our designated Grievance Officer: