Your data

Privacy

How ArtisanKatha collects and uses your account data, including data received through Google sign-in, which services handle it, how we protect and retain it, and how to request deletion.

Last reviewed

What ArtisanKatha holds

ArtisanKatha holds the details of your customer account (your name, email address, mobile number, saved addresses and sign-in methods, and any photo, gender, date of birth, bio and craft interests you choose to add), the contents of your shopping bag and wishlist, and, once purchasing opens, your order and delivery details. If you sign in with Google, ArtisanKatha also receives from Google that account’s identifier, name, profile picture and verified email address, and uses the address to create your customer account or to link Google as a sign-in method to the customer account, or guest customer, that already uses it.

How we use Google account data

Google sign-in is optional. When you choose it, we request basic identity information: your Google account identifier, verified email address, name and profile-picture URL. We store this information with your sign-in method and use your verified email to identify your customer account. Your name can fill the name on a new account. This lets you sign in and use account features such as your shopping bag, wishlist and saved addresses.

We do not receive your Google password or request access to your Gmail messages, Google Drive files or contacts. Google account data is used to provide these account features, not sold or used for advertising.

  • Google sign-inGoogle LLC

    When you choose to sign in with Google, Google receives your request to sign in to ArtisanKatha with the Google account you pick.

    Google privacy policy

  • Cloudflare TurnstileCloudflare, Inc.

    On the sign-in, account-creation, password-recovery, customer account and checkout pages, Cloudflare Turnstile receives your IP address and signals from your browser, and nothing you type into a form, so it can tell people from automated traffic.

    Cloudflare privacy policy

  • RazorpayRazorpay Software Pvt. Ltd.

    Once purchasing opens and you pay online for a shopping bag, Razorpay receives the amount, the currency, the number of pieces and an order reference, your name, email address and mobile number from the checkout form, and the UPI, card or net-banking details you enter in Razorpay’s own payment window.

    Razorpay privacy policy

  • Amazon SESAmazon Web Services, Asia Pacific (Mumbai) region

    Amazon Simple Email Service sends ArtisanKatha’s transactional email and receives your email address and the content of each one sent to you, such as verification and password-recovery codes, the welcome email and, once purchasing opens, order emails.

    AWS privacy notice

Storage, sharing and protection

Customer accounts and Google sign-in details are stored in our application database on our Bluehost-hosted server. Cloudflare handles website traffic and stores our private recovery backups. These hosting services process account data so we can operate and recover the store. Amazon SES receives your email address and message content when we send account email, including when your address came from Google.

We use HTTPS to protect data sent between your browser and the store, restrict administrative access, and encrypt database and configuration backup files before sending them to private recovery storage. Account access requires an accepted sign-in method. Your browser stores a sign-in token to maintain your session; choosing Remember me keeps that session for up to thirty days, and signing out clears it from that browser.

Retention and deletion requests

We retain your customer account and its Google sign-in information while we maintain your account. You can request deletion of your account and related Google account data using the privacy email address below. We verify that the request comes from the account holder before handling it. Account deletion is handled by contacting us; there is currently no self-service deletion button.

Recovery copies may remain after data is removed from the active store. Our routine database backups normally expire after seven days, but copies retained to verify recovery can be kept longer. When handling your request, we explain any recovery copies or other records that will remain and why. We do not promise that every backup copy is erased immediately.

Changes to this notice

We update this page and its review date when our data practices change. If we change how we use Google account data, we will notify affected customers before using that data for a new purpose.

Questions about your data

Email [email protected] to request deletion of your account or Google account data, or with any question about your data or this page.