Privacy Policy
How WebCosmos Market collects, uses, and protects your personal information.
1. Information We Collect
1.1 Information you provide directly
- Account data: full name, email, phone number, password credentials.
- Seller-onboarding data: PAN, GSTIN, bank account, Razorpay Route KYC artifacts.
- Purchase details: billing address, invoices, support messages.
1.2 Information collected automatically
- Device and browser identifiers, IP address, and session analytics.
- Usage telemetry: page views, clicks, template downloads, and cart state.
- Cookie identifiers and local storage tokens (see Cookie Policy).
2. Use of Collected Data
We process your data to deliver and secure the marketplace.
- Provision of marketplace services, seller dashboards, and purchase history.
- Payment authorization, fraud monitoring, and settlement reporting.
- Customer support, dispute management, and grievance resolution.
- Regulatory compliance with Indian IT Act 2000, GST law, and RBI directions.
- Product research, personalization, and analytics to improve UX.
3. Data Sharing & Processors
We never sell your personal information. Data is shared only with trusted processors:
- Razorpay Software Private Limited for payment processing, dispute management, and settlements. Razorpay acts as a PCI DSS Level 1 payment aggregator.
- Analytics providers (such as privacy-friendly product analytics) to understand feature adoption and performance.
- Cloud vendors that host our infrastructure within compliant data centers.
Law enforcement data requests are honored only when accompanied by valid legal process.
4. Data Security & PCI DSS Compliance
WebCosmos Market implements layered security controls to protect personal and financial data:
- End-to-end TLS encryption, HSTS, and key rotation policies.
- Razorpay-hosted payment forms that keep card data off our servers.
- Quarterly PCI DSS posture reviews and vulnerability scans.
- Role-based access control, MFA, and continuous monitoring.
- Encrypted off-site backups stored within India.
5. Your Rights under the Indian IT Act & GDPR
You may exercise the following rights at any time:
- Access and portability of the personal data stored with us.
- Correction of inaccurate or incomplete profile information.
- Deletion or restriction of processing, subject to statutory record keeping.
- Objection to marketing communications and profiling.
European Union users may additionally invoke GDPR Article 15–21 rights. Requests are answered within one month, or sooner where required by Indian IT rules.
6. Contact & Grievance Support
You may raise privacy questions or complaints with our designated Grievance Officer, Mr. Rafael Ravman.
- Email: Rafael@WebCosmos.in
- Phone (India): +91 78457 75447
- Address: No. 71, Appar Street, Thiruvalleswarar Nagar, Thirumangalam, Anna Nagar (Chennai), Egmore Nungambakkam, Chennai – 600040, Tamil Nadu, India
Response time: within 7 working days of receipt of a complete request.
7. Updates to this Policy
We may update this policy to reflect regulatory changes, Razorpay banking mandates, or improvements to the marketplace. Significant updates will be notified via email and banners on the dashboard. Continued use of the platform after updates constitutes acceptance of the revised policy.