Back to Home

Privacy Policy

How WordsnPetals collects, uses, and protects your personal information

1. Information We Collect

When you use WordsnPetals, we may collect the following types of information:

• Account Information: Name, email address, and profile details when you sign up or log in via Google OAuth or email/password.
• Commission Details: Artwork size, style, face type, and reference photos you upload when placing an order.
• Payment Information: Order amounts and payment status. We do not store card details — payments are processed securely through Razorpay.
• Delivery Information: Shipping address and contact details you provide for order delivery.
• Usage Data: Basic information about how you interact with the site (page visits, session data) to improve our service.

2. How We Use Your Information

We use the information we collect to:

• Process and fulfill your commission orders
• Communicate order updates, confirmations, and support
• Authenticate your account and maintain security
• Process payments and manage refund requests
• Improve our website and services based on usage patterns
• Send transactional emails related to your orders

3. Google Sign-In & OAuth

We offer Google Sign-In as a convenient login option. When you sign in with Google, we receive basic profile information (name, email address, and profile picture) as permitted by your Google account settings. We use this only to create and manage your WordsnPetals account.

We do not access your Google contacts, Gmail, Drive, or any other Google services beyond the basic profile information you explicitly authorize.

4. Reference Images & Artwork Data

Reference photos you upload for your commission are stored securely and used solely to create your artwork. These images are not shared with third parties, used for advertising, or used to train AI models.

Images may be retained for a reasonable period after order completion for quality assurance and dispute resolution purposes, after which they are deleted.

5. Data Storage & Security

Your data is stored using Supabase, a secure cloud database platform. We implement industry-standard security measures including:

• Encrypted data transmission (HTTPS/TLS)
• Secure authentication with row-level security policies
• Password hashing and secure session management
• Access control ensuring only you can view your orders

Payments are handled by Razorpay, which is PCI-DSS compliant. We never see or store your card numbers, UPI pins, or banking credentials.

6. Cookies & Local Storage

We use minimal browser storage to improve your experience:

• Session cookies: To keep you logged in during your visit
• Local storage: To remember your session and pending order information temporarily
• No advertising cookies: We do not use third-party advertising or tracking cookies

7. Third-Party Services

We use the following trusted third-party services to operate our platform:

• Supabase — Database and authentication
• Razorpay — Payment processing
• Google OAuth — Optional login method
• Cloudflare Pages — Website hosting

Each of these services has their own privacy policies and security standards. We only share the minimum data necessary for each service to function.

8. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Update your name, email, or other profile information at any time from your account
• Deletion: Request deletion of your account and associated personal data
• Portability: Request your order history and account data in a readable format
• Withdrawal of consent: Disconnect Google Sign-In or delete your account at any time

To exercise any of these rights, contact us at yashranjanpaul@gmail.com.

9. Data Retention

We retain your account and order data for as long as your account is active or as needed to provide our services. If you request account deletion, we will remove your personal data within 30 days, except where retention is required for legal or financial compliance.

10. Children's Privacy

WordsnPetals is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will update the date at the bottom of this page. Continued use of our services after changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:

Email: yashranjanpaul@gmail.com

We aim to respond to all privacy-related inquiries within 48 hours.