Privacy Policy

1. Who we are

Cutiepage is operated by Pinak Sarkar ("we", "us"). You can reach us at bringcashhere@gmail.com. This Privacy Policy explains how we handle information you share when you use the Cutiepage website, editor, and checkout.

2. What we collect

• Account information. Email address and an optional display name handled via Supabase Auth. We never see your password — Supabase hashes and manages it.
• Project content. The text, images, audio, and theme you put into the editor so we can save your draft and publish your page.
• Payment metadata. For paid templates, Razorpay processes the payment. We receive a payment ID, order ID, amount, and status. We do not see or store your card number, CVV, UPI PIN, or bank credentials.
• Operational logs. Request logs, error traces, and rate-limit counters needed to keep the service running and to stop abuse.

3. How we use it

• To provide the service: authenticate you, save your drafts, publish snapshots, deliver your live link and QR code.
• To process payments through Razorpay and honour refund requests.
• To prevent fraud, enforce rate limits, and protect the service.
• To send transactional emails (payment confirmations, publish notifications). We do not send marketing emails unless you explicitly join a waitlist.

4. Who we share with

We share information only with the vendors that make Cutiepage work:

We do not sell your data. We do not run cross-site ad trackers. We do not share your information with data brokers.

• Supabase — database and authentication.
• Razorpay — payment processing (their own privacy policy governs card/UPI data).
• Cloudinary — hosting for your uploaded images, audio, and generated QR codes.
• Vercel — hosting and edge delivery.
• Upstash — Redis store for rate limiting.

5. Public pages

When you publish a page at wholesome.link/your-slug, the content on that page is public by design. Only content you put into the editor and choose to publish becomes public. Your email, payment details, and account metadata are never shown on your live page.

6. Cookies

We use only strictly necessary cookies to keep you signed in and to verify API requests. We do not use advertising cookies, and we do not load third-party analytics with cross-site trackers.

7. Your rights

You can, at any time:

Send the request from the email address associated with your account and we will act on it within seven working days.

• Export a copy of your account data by emailing us.
• Ask us to delete your account, projects, and publications.
• Unpublish a live page (we will retire the slug so it cannot be reused).

8. Data retention

We keep your account, projects, and publications for as long as your account is active. Payment records are retained for at least eight years to comply with Indian tax law. If you delete your account, we retain only the minimum payment records required by law and permanently delete everything else.

9. Changes to this policy

If we make material changes, we will update the "last updated" date above and — if you have an account — email you at least seven days before the change takes effect.