Privacy Policy
Last updated March 10, 2024. We are committed to protecting your privacy and handling your data transparently.
1. Overview
Cnippet ("we", "our", or "us") operates Cnippet Blocks (cnippet.dev). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our service. By using the Service, you consent to the data practices described in this policy. If you do not agree, please discontinue use of the Service. We may update this policy periodically — continued use after changes constitutes acceptance of the revised policy.
2. Information We Collect
We collect information you provide directly: • Account information: name, email address, and password when you register • Payment information: billing details processed securely through Razorpay (we do not store full card numbers) • Communications: messages you send us via email or support channels • Profile preferences: settings and subscription plan information We also collect information automatically: • Log data: IP address, browser type, pages visited, time spent, and referring URLs • Device data: hardware model, operating system, and unique device identifiers • Cookies and similar technologies: session identifiers, preferences, and analytics data • Usage data: features you use, components you access, and interaction patterns
3. How We Use Your Information
We use the information we collect to: • Provide, maintain, and improve the Service • Process transactions and send related information (receipts, invoices) • Send administrative messages, security alerts, and support responses • Respond to your comments and questions • Analyze usage trends to improve user experience • Detect and prevent fraudulent transactions and abuse • Comply with legal obligations We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling that produces significant legal effects.
5. Third-Party Services
We share information with third-party service providers who assist in operating the Service: • Razorpay: payment processing — collects billing and payment data subject to their privacy policy • Vercel: hosting and analytics — processes usage data for performance insights • Authentication providers (if applicable): OAuth login data subject to the respective provider's privacy policy These providers are contractually obligated to protect your data and may not use it for their own commercial purposes. We are not responsible for the privacy practices of third-party websites linked from our Service.
6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Service. Specifically: • Account data: retained until you delete your account or request deletion • Payment records: retained for 7 years as required by Indian tax and accounting regulations (GST compliance) • Log data: retained for up to 90 days for security and debugging purposes • Analytics data: retained in aggregated, anonymized form indefinitely Upon account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law.
7. Data Security
We implement industry-standard security measures to protect your information: • Passwords are hashed using bcrypt and never stored in plaintext • All data transmission is encrypted via TLS/HTTPS • Payment data is handled exclusively by Razorpay's PCI-DSS-compliant infrastructure • Access to production data is restricted to authorized personnel only • We conduct periodic security reviews of our systems No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach that affects your rights, we will notify you as required by applicable law.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal data: • Access: request a copy of the personal data we hold about you • Correction: request correction of inaccurate or incomplete data • Deletion: request deletion of your personal data (subject to legal retention requirements) • Portability: receive your data in a structured, machine-readable format • Objection: object to processing of your data for certain purposes • Withdrawal of consent: where processing is based on consent, you may withdraw it at any time To exercise any of these rights, contact us at support@cnippet.dev. We will respond within 30 days. We may need to verify your identity before processing your request.
9. Children's Privacy
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a minor, please contact us immediately at support@cnippet.dev and we will take steps to delete that information promptly.
10. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: Email: support@cnippet.dev Website: cnippet.dev For data-related requests, include "Privacy Request" in your subject line and your account email so we can verify your identity. This Privacy Policy was last updated on March 20, 2025.