Privacy Policy

1. Information We Collect

We collect information in the following ways:

a) Information you provide directly

• Account details: name, email address, phone number, and business name when you register or book a demo.
• Business data: orders, customer details, payment records, product or service information, and team member details that you enter into the platform.
• Communications: messages you send us via email or contact forms, including demo booking requests and support queries.
• Early-access form: if you submit our Google Form for early access, we collect the information you provide there (name, email, business type).

b) Information collected automatically

• Usage data: pages visited, features used, session duration, and in-app actions — used to understand how users interact with H4B and to improve the product.
• Device & browser information: IP address, browser type, operating system, and device type — collected for security and analytics purposes.
• Cookies & local storage: we use cookies to maintain your session and remember your preferences. You can control cookies through your browser settings, though disabling them may affect platform functionality.

c) Information from third parties

• Cal.com: when you book a demo, Cal.com shares your name, email, and scheduled time with us.
• Razorpay: we receive transaction confirmation and billing details (amount, date, masked card/UPI identifier) from Razorpay when you make a payment.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your H4B account and provide the Service.
• Conduct the onboarding demo and personalise your setup experience.
• Process payments and manage your subscription via Razorpay.
• Send transactional emails — such as account confirmations, payment receipts, and service updates.
• Respond to your support requests, questions, and feedback.
• Monitor platform usage to identify bugs, improve performance, and develop new features.
• Detect and prevent fraud, abuse, or security incidents.
• Comply with applicable Indian laws and regulations.

We do not use your data for advertising or sell it to marketing platforms of any kind.

3. Your Business Data

All business data you enter into H4B — including orders, customer information, payment records, and team data — belongs to you. We process this data solely to provide the Service. We do not access, analyse, or use your business data for any purpose other than operating the platform on your behalf, unless required to do so by law or with your explicit consent.

Your customers' data (names, contact details, order history) that you add to H4B is your responsibility. You must ensure you have the appropriate consent from your customers to store and process their information within the platform.

4. Payment Processing

All subscription payments are processed securely by Razorpay, a PCI DSS-compliant payment gateway. H4B does not store your card numbers, UPI IDs, bank account details, or any other sensitive payment credentials on our servers. For information on how Razorpay handles your payment data, please refer to Razorpay's Privacy Policy.

5. Data Sharing & Third-Party Services

We do not sell, rent, or trade your personal information. We share data only with the following trusted service providers, strictly to operate the H4B platform:

• Supabase — database and authentication infrastructure. Your data is stored on Supabase-managed servers with encryption at rest and in transit.
• Cloudflare — hosting, CDN, and DDoS protection for the H4B web application.
• Razorpay — payment processing for subscription billing.
• Cal.com — demo booking and calendar scheduling.
• Google — early-access form submissions are collected via Google Forms and stored in Google Workspace.

We may also disclose your information if required to do so by law, court order, or government authority, or if we believe disclosure is necessary to protect the rights, property, or safety of H4B, our users, or the public.

6. Data Storage & Security

Your data is stored on Supabase-managed infrastructure with the following protections in place:

• Encryption in transit (TLS/HTTPS) for all data exchanged between your browser and our servers.
• Encryption at rest for all data stored in our database.
• Daily automated backups to protect against data loss.
• Role-based access controls within the platform so team members only see what they are permitted to.

While we implement industry-standard security measures, no system is completely impenetrable. We encourage you to use a strong, unique password and to notify us immediately if you suspect any unauthorised access to your account.

7. Data Retention

We retain your account and business data for as long as your subscription is active. If you cancel your subscription or your account is terminated, we will retain your data for up to 30 days to allow you to export it. After this period, your data will be permanently deleted from our systems, except where we are required by law to retain it for a longer period (e.g. financial records under Indian tax law).

To request an export of your data before deletion, please contact us at hello@handforbrand.com.

8. Cookies & Tracking

H4B uses cookies and similar technologies to keep you logged in, remember your preferences, and understand how the platform is used. We use:

• Session cookies: temporary cookies that expire when you close your browser, used for authentication.
• Preference cookies: remember settings such as language and display preferences.
• Analytics: we may use privacy-friendly analytics to understand aggregate usage patterns. We do not use Google Analytics or any advertising-based tracking on the H4B platform.

You can disable cookies in your browser settings, but this may prevent certain features of H4B from working correctly.

9. Children's Privacy

H4B is intended for use by adults running businesses. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that a minor has provided us with personal information, we will take steps to delete it promptly. If you believe a child has submitted data to us, please contact us at hello@handforbrand.com.

10. Your Rights

You have the following rights regarding your personal information:

• Access: request a copy of the personal data we hold about you.
• Correction: ask us to correct any inaccurate or incomplete information.
• Deletion: request that we delete your personal data, subject to legal retention requirements.
• Portability: request an export of your business data in a common format.
• Withdrawal of consent: where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please email us at hello@handforbrand.com. We will respond within 7 business days.

11. Links to Other Websites

The H4B website or platform may contain links to external websites (such as Razorpay or Cal.com). We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time as our practices evolve or as required by law. When we make significant changes, we will update the "Last updated" date at the top of this page and notify you by email if the changes materially affect how we handle your data. Your continued use of H4B after such changes constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:

HandForBrand (H4B)
Bhagalpur, Bihar, India
Email: hello@handforbrand.com

We aim to respond to all privacy-related enquiries within 2 business days.