Privacy Policy

Who This Privacy Policy Applies To

This Privacy Policy governs the collection, use, storage, and protection of personal information for all individuals who interact with the Evanto platform, regardless of their role or registration status.

Brand Declaration & Autonomy

Information We Collect

1. For All Users (Including Anonymous Visitors)

• Brwosing, Accessing, Visiting, Idirectly, Directly accessing to our website in anyway means that user/visitor is knowlingly visited to to our website and we will collecte the following necessary data only, while maintaining a privacy without harm/violation any privacy and self identity of the user. When user visit our website, we automatically collect:IP address,Device type (mobile, desktop, tablet),Browser and operating system information, Pages visited and time spent, Geographic location (country)This data is collected for website analytics, security, and improving user experience. By using our website, you consent to this automatic collection. Storing The Visitors Information does NOT Means Any Harm OR Violations in Rules & Regulations.
• Automatically Collected Information for Security Purposes: IP address,Device Information,Access Timestamps, operating system, User Agent String, Time Spent on Pages
• Usage Patterns: Navigation behavior,Pages Viewed, Search Queries, Interaction with Content
• Legal Basis for Collection: We process this information based on our legitimate interest in protecting our platform, preventing fraud, detecting malicious activity, and ensuring the security of all users and transactions. This processing is necessary to maintain platform integrity and comply with cybersecurity best practices under India's CERT-IN guidelines.

2. For Registered Users ( Clients)

• Account Information: Name, email address, username, password (encrypted), profile picture
• Profile Data: Bio, skills, portfolio links, social media profiles, location (optional)
• Financial Information: Transaction history
• Product Information: Uploaded products, descriptions, pricing, files, documentation
• Communication Data: Support tickets, messages, reviews, ratings, comments

3. For Developers

• Business Information: Company details, tax identification, GST numbers, business addresses
• Sales Data: Revenue, earnings, withdrawal requests, commission rates
• Profile Data: Bio, skills, portfolio links, social media profiles, location (optional)
• Product Analytics: Download counts, view statistics, customer feedback
• Product Information: Uploaded products, descriptions, pricing, files, documentation
• Communication Data: Support tickets, messages, reviews, ratings, comments

How We Use Your Information

We use collected information for the following purposes:

1. Platform Operations: Account creation, authentication, product management, transaction processing
2. Service Delivery: Facilitating purchases, downloads, customer support, dispute resolution
3. Financial Operations: Payment processing, commission calculations, withdrawal processing, tax compliance
4. Communication: Order confirmations, account notifications, promotional emails (with consent), security alerts
5. Security & Fraud Prevention: Detecting suspicious activity, preventing unauthorized access, maintaining platform integrity
6. Analytics & Improvement: Understanding user behavior, improving features, optimizing performance
7. Legal Compliance: Meeting regulatory requirements, responding to legal requests, enforcing terms of service
8. Marketing: Personalized recommendations, targeted advertising (with appropriate consent)

Data Sharing & Disclosure

We share your information only in the following circumstances:

1. With Your Consent

When you explicitly authorize us to share your information with third parties.

2. Service Providers

• Payment gateways (Razorpay, PayPal, Stripe, etc.)
• Email service providers
• Cloud hosting services (Hostinger, etc.)
• Analytics platforms (Google Analytics)
• Customer support tools

3. Legal Requirements

When required by law, court order, government request, or to protect our legal rights and prevent fraud or security threats.

4. Business Transactions

In the event of merger, acquisition, or sale of assets, your information may be transferred as part of the transaction (with prior notice).

5. Public Information

Developer profiles, product listings, reviews, and ratings are publicly visible to all visitors.

Data Security & Protection

We implement industry-standard security measures to protect your data:

• Encryption: SSL/TLS encryption for data transmission, encrypted password storage
• Access Controls: Role-based permissions, secure authentication, two-factor authentication (where applicable)
• Regular Audits: Security assessments, vulnerability scanning, penetration testing
• Data Backups: Regular automated backups, disaster recovery procedures
• Secure Infrastructure: Firewalls, intrusion detection, DDoS protection

Note: While we employ robust security measures, no online platform can guarantee 100% security. Users are responsible for maintaining the confidentiality of their login credentials.

Your Privacy Rights

You have the following rights regarding your personal information:

1. Access: Request a copy of all personal data we hold about you
2. Correction: Update or correct inaccurate information in your account settings
3. Deletion: Request deletion of your account and associated data (subject to legal retention requirements)
4. Data Portability: Receive your data in a structured, machine-readable format
5. Opt-Out: Unsubscribe from marketing communications, disable cookies (may affect functionality)
6. Objection: Object to specific data processing activities (e.g., profiling, automated decisions)
7. Restrict Processing: Limit how we use your data in certain circumstances

To exercise these rights, contact us at info.banglarkatha@gmail.com

Security Monitoring and Fraud Prevention

We use information for security purposes only, without any external intention !

• Security Monitoring and Threat Detection To protect buyers, sellers, and our digital marketplace ecosystem, we implement automated security monitoring systems that: Analyze device fingerprints to detect suspicious patterns and unauthorized access attempts, Monitor for indicators of fraud, account takeovers, and payment manipulation, Identify malware distribution attempts and malicious file uploads, Detect automated bot activity and scraping attempts, Flag unusual behavioral patterns that may indicate security threats.Data Retention: Security logs containing IP addresses and device information are retained for 90 days for active threat investigation and 365 days in archived form for compliance and legal purposes. After this period, data is permanently deleted unless required for ongoing legal proceedings.

How We Use You Data and Information

We retain your information for as long as necessary to fulfill the purposes outlined in this policy:

• Purposes of Data Processing :We use the automatically collected information described above exclusively for the following purposes: Security & Fraud Prevention: Detecting and preventing unauthorized access, fraudulent transactions, and malicious activity,Platform Protection: Identifying and blocking security threats, malware, and automated attacks,Compliance: Meeting legal obligations under India's Information Technology Act, 2000, and cybersecurity regulations, Service Delivery: Ensuring platform availability and protecting against denial-of-service attacks,What We Don't Do: We do NOT use your IP address or device information for: Behavioral tracking or profiling, Targeted advertising or marketing, Selling to third-party data brokers, Analytics beyond security monitoring,Cross-site tracking or retargeting.
• Data Sharing and Disclosure : We do not sell, rent, or share your IP address or device information with third parties for marketing purposes. We may disclose this information only in the following limited circumstances:Law Enforcement: When required by Indian law, court order, or government investigation,Security Incidents: To cybersecurity authorities (CERT-IN) when investigating serious security breaches,Legal Protection: To protect our legal rights or defend against fraudulent activity,Service Providers: To our hosting provider (Hostinger) solely for infrastructure security purposes, under strict confidentiality agreements
• Your Rights and Choices : Under India's Digital Personal Data Protection Act, you have the following rights:Right to Access: Request a copy of your stored IP addresses and access logs,Right to Correction: Update your age verification status if incorrectly recorded,Right to Erasure: Request deletion of your security logs after account closure (subject to legal retention requirements),Right to Withdraw Consent: Close your account at any time, which will stop future data collection,Right to Grievance Redressal: File complaints with our Data Protection Officer or the Data Protection Board of India,How to Exercise Your Rights: Send an email to [your data protection email] with your request. We will respond within 7 days as required under DPDP Act.

Third-Party Services & Links

Our platform may contain links to external websites and integrate with third-party services. We are not responsible for the privacy practices of these external entities. Users should review the privacy policies of any third-party sites they visit.

Third-Party Services We Use:

• Payment gateways (Razorpay, PayPal, Stripe)
• Google Analytics
• Social media platforms (for social login and sharing)
• Email service providers

Children's Privacy

Evanto is not intended for users under the age of 18. We do not knowingly collect personal information from minors. If we discover that we have inadvertently collected data from a child, we will delete it immediately. Parents or guardians who believe their child has provided personal information should contact us at info.banglarkatha@gmail.com.

International Data Transfers

Evanto primarily operates in India, but we may transfer and process data in other countries where our service providers are located. By using our platform, you consent to the transfer of your information to countries that may have different data protection laws than your jurisdiction. We ensure appropriate safeguards are in place for such transfers.

Reporting Privacy Violations

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify users of material changes through:

• Email notifications to registered users
• Prominent notice on our website
• In-app notifications

Continued use of the platform after changes take effect constitutes acceptance of the updated policy. We encourage you to review this page periodically.