Privacy Policy

1. Data we collect

Name, username, email, mobile number, address, order details, payment references aur support communication collect ho sakte hain. Browsing/usage analytics anonymised form mein store hote hain.

Agar aap "Sign in with Google" use karte hain, to Google se hum sirf email aur profile (naam) receive karte hain — aur ek stable Google user ID jisse next time aapko pehchana ja sake. Contacts, Drive, photos ya koi aur Google data hum access nahi karte. Details Section 7 me hain.

2. Payments

Payment details secure gateway (Razorpay) ke through process hote hain. Sensitive card / UPI credentials Aman Graphics servers par store nahi kiye jaate.

3. Data sharing

Order fulfilment, payment verification, legal compliance ya support needs ke alawa personal data third parties ko sell nahi kiya jaata. Sub-processors (email, hosting, CDN, analytics, advertising) sirf operational purpose ke liye access rakhte hain — list neeche section 6 mein hai.

4. Cookies

Hum teen tarah ki cookies use karte hain:

• Strictly necessary — session, authentication, CSRF token, cart, theme preference. Inhe disable nahi kiya ja sakta — site work nahi karegi.
• Analytics — Google Analytics (_ga, _ga_*) — anonymised page views, traffic sources, device type. IP addresses Google ke through anonymised hote hain.
• Advertising — Google AdSense (__gads, __gpi, NID) — ad personalization aur frequency capping. Aap browser settings ya Google Ad Settings se opt out kar sakte hain.
• Security — Cloudflare (__cf_bm, cf_clearance) — bot management aur DDoS protection ke liye.

Most browsers cookies ko block / clear karne ka option dete hain. Lekin strictly necessary cookies disable karne se login / checkout work nahi karega.

5. Analytics (Google Analytics)

Hum Google Analytics 4 (GA4) use karte hain to samajhne ke liye ki users site kaise navigate karte hain — kaunse pages popular hain, search queries kya hain, technical issues kaha aate hain. IP anonymisation enabled hai (Google IP ka last octet truncate karke store karta hai).

Data Google share karta hai: page URL, referrer, device/browser type, anonymised IP, approximate location (city-level), interaction events. Aap GA opt-out ke liye Google Analytics Opt-out Browser Add-on install kar sakte hain.

6. Advertising (Google AdSense)

Aman Graphics par third-party ads Google AdSense ke through serve hote hain. AdSense aapki browsing history (cookies + browser data) use karke relevant ads dikhata hai.

• Google DoubleClick / DART cookie set kar sakta hai sites par based on internet usage.
• Aap personalised ads opt-out kar sakte hain — adssettings.google.com.
• EU / EEA / UK ke users ko GDPR consent banner dikhega — choices waha set kar sakte hain.
• Aman Graphics sirf ad slots provide karta hai — ad content aur targeting Google control karta hai. Misleading / inappropriate ads support ko report karein, hum Google ke saath uthayenge.

7. Sign in with Google (OAuth)

Login / register screen pe "Continue with Google" button optional hai — aap chahein to email + password se bhi account bana sakte hain.

Google sign-in choose karne par hum Google se sirf yeh receive karte hain:

• Email address — your Google account email, used as your Aman Graphics login.
• Full name — pre-fills first_name + last_name fields.
• Stable Google user ID (Google ka sub claim) — sirf next time aapko pehchanne ke liye. Iske bina aap har baar Google sign-in pe naya account ban jaata.

Hum Google se yeh data NAHI maangte: contacts, calendar, Drive files, photos, location, browsing history, ya koi aur Google product data. Sirf openid profile email scopes request hote hain.

Tokens: Google ka access token ek-baar use hone ke baad hum store nahi karte — sirf provider name (google) aur user ID DB me link rakhte hain.

Aap Google ke is permission ko kabhi bhi revoke kar sakte hain — myaccount.google.com/permissions par "Aman Graphics" find karke remove karein. (Aapka Aman Graphics account aur uska data bana rahega — sirf Google sign-in shortcut band ho jaayega, normal email/password login se access milega.)

8. Third-party services we use

Following sub-processors operational reasons ke liye data process karte hain. Inki apni privacy policies bhi apply hoti hain:

• Cloudflare — CDN, DDoS protection, WAF, Tunnel. IP addresses aur request metadata transit me dekhta hai. Cloudflare privacy policy.
• Razorpay — payment processing. Card / UPI details directly Razorpay handle karta hai. Razorpay privacy policy.
• Google Sign-In (OAuth) — optional social login. Sirf email + name + Google user ID receive hote hain (Section 7). Google privacy policy.
• Google Analytics — usage analytics. Google privacy policy.
• Google AdSense — advertising. Google ads policy.
• Google Search Console — sirf search indexing / crawl health monitoring. User data Search Console ko share nahi hota.
• Postfix + Cloudflare Email Routing — transactional emails (account verification, password reset, order receipts).

9. International data transfers

Cloudflare aur Google globally distributed hain — aapka data India ke bahar (US, EU, etc.) bhi process ho sakta hai inki standard contractual clauses ke under. Hum directly aapka data outside India transfer nahi karte.

10. Your rights

• Apna account data download karne ka request
• Account permanently delete karna (30-day recovery window)
• Email marketing se unsubscribe — har newsletter ke footer mein Unsubscribe link hota hai, ya support se contact karein
• Incorrect data correct karna
• Analytics / advertising cookies opt-out (browser settings ya provider opt-out links above)

11. Account requests

Profile / account related changes ke liye logged-in account tools ya support contact karein. Hum sabhi requests 7 working days ke andar respond karte hain.

12. Children

Aman Graphics 18+ ke liye hai. Minor accounts hum knowingly create nahi karte.

13. Updates to this policy

Hum yeh policy time-to-time update kar sakte hain (new services, regulatory changes). Material updates ka email notification active users ko bhejte hain. Last updated date upar "Privacy · Updated" line me dikhti hai.