Privacy Policy

1. Overview

Chhaya is a privacy-first document protection tool built on a simple principle: your files belong to you. This policy explains exactly what information we collect, what we do not collect, and how we handle the limited data that passes through our systems.

By using Chhaya or visiting getchhaya.com, you agree to the practices described in this Privacy Policy.

2. File Processing — Entirely Local

Chhaya processes all documents entirely on your device. Your files are never uploaded to Chhaya servers, third-party cloud services, or any remote system at any point.

• Files are opened, processed, and saved locally on your computer only.
• Chhaya cannot access, view, or receive the contents of your documents at any time.
• No file data, metadata, or document contents are transmitted over the internet — ever.
• After initial license activation, Chhaya operates fully offline.

3. Activation Data — Stored Locally on Your Device

When you activate Chhaya, you enter your name, email address, mobile number, and license key into the application. This information is stored in an encrypted file on your own device only.

• Activation data is never transmitted to Chhaya's servers.
• Activation data is encrypted using AES-256 and bound to your specific device hardware.
• Chhaya does not have access to your activation details at any point after activation.
• This data is deleted automatically when you uninstall Chhaya.

4. Payment Processing & Purchase Data

Payments for Chhaya are processed exclusively by Dodo Payments, our payment provider. Chhaya does not collect, store, or process your payment card details, bank account information, UPI details, or billing data.

When a purchase is completed, Dodo Payments notifies us of the successful transaction. We receive limited information from this notification: your name, email address, and a payment confirmation reference. This is used solely to maintain purchase records and provide support if needed.

Please review Dodo Payments' Privacy Policy for information on how your payment data is handled during the checkout process.

5. Waitlist & Email Communications

If you voluntarily submit your email address to join our mobile app waitlist on getchhaya.com, your email address is stored securely on our server and may be used to:

• Notify you when the Android or iOS version of Chhaya becomes available.
• Inform you of significant new versions or feature updates to existing Chhaya products.
• Inform you of new products launched by Chhaya that may be relevant to you.

We will not sell or rent your email address to any third party. You may unsubscribe at any time by emailing support@getchhaya.com.

6. Your Rights Under Applicable Data Protection Laws

Depending on your location, you may have certain rights regarding your personal data under applicable laws including India's Digital Personal Data Protection Act 2023, the EU General Data Protection Regulation (GDPR), the UK GDPR, and similar legislation.

These rights may include the right to access, correct, or request deletion of personal data we hold about you. Since Chhaya holds only limited data (waitlist email and purchase confirmation details), you may exercise these rights by contacting us at support@getchhaya.com. We will respond within a reasonable timeframe.

7. Data Retention

We retain purchase confirmation data (name, email, payment reference) for as long as necessary to provide support and maintain purchase records. Waitlist emails are retained until you request removal or the mobile app launches. We do not retain any file or document data — none is ever received.

8. Website Analytics & Behaviour Tracking

We use the following analytics tools on getchhaya.com to understand how visitors use our website and improve user experience:

• Google Analytics 4 (GA4) — collects anonymised data including page visits, traffic sources, country, device type, and session duration. This data is processed by Google and governed by Google's Privacy Policy. No personally identifiable information is collected.
• Microsoft Clarity — records anonymised session recordings, heatmaps, and click patterns to help us understand user behaviour on our website. Microsoft Clarity may record mouse movements, clicks, and scroll behaviour. No personally identifiable information is collected. This data is governed by Microsoft's Privacy Policy.

Both tools use cookies and similar tracking technologies. By using getchhaya.com, you consent to the use of these analytics tools. You may opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

9. Cookies

The Chhaya website uses cookies for analytics and session tracking purposes. These include cookies set by Google Analytics and Microsoft Clarity to measure website performance and user behaviour. These cookies do not collect personally identifiable information and are not used for advertising or profiling purposes.

You can control or disable cookies through your browser settings. Note that disabling cookies may affect the functionality of some website features.

10. Children's Privacy

Chhaya is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided personal data to us, please contact us immediately at support@getchhaya.com.

11. Third-Party Services

Chhaya uses the following third-party services, each governed by their own privacy policies:

• Dodo Payments — payment processing. Their privacy policy governs how your payment data is handled during checkout.
• Google Analytics 4 — website analytics. Governed by Google's Privacy Policy.
• Microsoft Clarity — heatmaps and session recordings. Governed by Microsoft's Privacy Policy.
• Google Fonts — font delivery on this website. Standard web font service with no user tracking beyond basic CDN logs.

We are not responsible for the privacy practices of third-party services.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of Chhaya after changes are posted constitutes your acceptance of the revised policy. For significant changes, we will make reasonable efforts to notify users via email where we hold your contact details.