This policy explains what personal data the CodingwithRK Marketplace at https://marketplace.codingwithrk.com collects, why, who we share it with and your rights. CodingwithRK is operated by CodingwithRK, an individual based in Visakhapatnam, Andhra Pradesh, India, who is responsible for your data.
We collect only what we need to sell, deliver and support our products. We don't sell your data, show ads or use tracking or analytics cookies.
1. What we collect
Account details
- Your name, email address and password. Passwords are stored as a one-way hash, never in readable form.
- If you sign in with GitHub: your GitHub ID, username and profile picture.
- Your preferred currency, and your two-factor authentication or passkey settings if you turn them on.
Purchases and licenses
- Orders: the products, amounts, currency, billing country and Razorpay order and payment IDs.
- The licenses you own, your license keys and your private Composer password.
- For apps with license keys: a device ID and device name sent by the app when you activate it, and when it last checked in.
Using the products
- Downloads and Composer installs: which version you downloaded, when, and your IP address. This helps us prevent abuse of license keys and credentials.
Support and feedback
- Messages you send through the support chat, the page you sent them from, and our replies.
- Star ratings and comments you leave on products you own. Only we can see them.
Technical data
- When something breaks, we record the error, the page or request, and your account ID (if signed in), so we can fix it. Errors are deleted after 30 days.
- Standard web server logs (IP address, browser, pages requested), kept briefly for security.
2. Why we use it
| Purpose | Legal basis |
|---|---|
| Creating your account and signing you in | Contract |
| Taking payments and delivering what you buy | Contract |
| Issuing and checking license keys and Composer credentials | Contract |
| Sending receipts, account emails and support replies | Contract |
| Answering support messages and improving products | Legitimate interest and consent |
| Preventing fraud and license abuse; keeping systems secure | Legitimate interest |
| Keeping tax and accounting records | Legal obligation |
We don't send marketing emails.
3. Who we share it with
We use a few trusted service providers to run the Marketplace. They only process your data on our behalf:
- Razorpay: payments. Razorpay handles your card, UPI or bank details under its own privacy policy; we never receive them.
- DigitalOcean: hosting, database and file storage.
- Resend: sending emails such as receipts and support replies.
- GitHub: only if you choose to sign in with GitHub.
We may also share data if the law requires it, or to protect our rights against fraud or abuse. Some providers may store data outside India. When they do, we rely on their safeguards and legal transfer terms.
4. Cookies
We only use cookies the site needs to work:
| Cookie | Purpose | Lasts |
|---|---|---|
| Session cookie | Keeps you signed in and remembers your cart and currency | 2 hours after your last visit |
XSRF-TOKEN |
Protects forms against cross-site attacks | 2 hours after your last visit |
remember_web_… |
Only if you tick "Remember me" when signing in | Up to 400 days, or until you sign out |
cookie_consent |
Remembers that you've seen the cookie notice | 1 year |
When you pay, Razorpay's checkout window may set its own cookies to process the payment securely. There are no analytics, advertising or social media cookies. You can block or delete cookies in your browser, but signing in and checkout won't work without them.
5. How long we keep it
- Account and license data: for as long as your account is open, so you keep access to what you bought.
- Orders and payment records: for as long as Indian tax and accounting law requires (generally 8 years), even if you close your account.
- Error records: 30 days.
- Support messages and feedback: until you ask us to delete them, or we no longer need them.
6. Your rights
Under India's Digital Personal Data Protection Act, 2023 (and similar laws where you live), you can ask us to:
- tell you what personal data we hold about you and give you a copy;
- correct or update it;
- delete your account and data, except records we must keep by law (such as paid orders, which are kept without your name or email). You can do this yourself in Dashboard → Settings → Delete Account;
- withdraw consent where we rely on it.
Email connect@codingwithrk.com from your account's email address. We'll reply within 30 days. You can also nominate someone to exercise these rights on your behalf.
If you're not happy with our answer, you can complain to the Data Protection Board of India.
7. Security
All traffic uses HTTPS. Passwords are hashed, the database is encrypted in transit and access-restricted, and product files are private and handed out only through short-lived signed links. No system is perfectly secure: keep your password and license keys private, and turn on two-factor authentication.
8. Children
The Marketplace is not meant for children. If you're under 18, use it only with a parent's or guardian's permission. We don't knowingly collect data from children without it.
9. Changes
We'll update this policy when our practices change. The date at the top shows the latest version. If a change is significant, we'll tell you by email or on the site.
10. Contact and grievances
For privacy questions, requests or complaints, contact our grievance officer at connect@codingwithrk.com. CodingwithRK, CodingwithRK, an individual based in Visakhapatnam, Andhra Pradesh, India.