Privacy Policy

Last updated: August 2026

This Privacy Policy explains how CodeCraft Technology ("CodeCraft", "we", "us", or "our") collects, uses, and protects information in connection with this website (codecrafttechnology.in) and our products InventryBook (inventrybook.com) and SchoolHealth (schoolhealth.in) (together, the "Services"). We are committed to handling your information responsibly and in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023 (DPDP Act).

1. Introduction

By using our Services, you agree to the collection and use of information in accordance with this Policy. This Policy should be read together with our Terms & Conditions.

2. Information we collect

We collect only the information we need to provide and improve the Services:

• Account information — such as your name, email address, and business or school details you provide when you register or subscribe.
• Usage data — information about how you interact with the Services, such as pages viewed, features used, device and browser type, and log data, collected to keep the Services secure and reliable.
• Customer Data — the records you enter into the Services to run your shop or institution (for example, billing entries, inventory, student or staff records). This data belongs to you; we process it on your behalf to deliver the Services.
• Payment information — when you subscribe, payment details are collected and processed by our payment partner. We do not store full card or bank credentials on our own systems.

3. How we use information

We use the information we collect to:

• Provide, operate, and maintain the Services and your account.
• Process subscriptions and payments through our payment partner.
• Respond to your enquiries and provide customer support.
• Improve, secure, and troubleshoot the Services.
• Send important service-related communications, such as account and billing notices.
• Comply with legal obligations and enforce our Terms.

We do not sell your personal information.

4. Cookies

Our websites and Services use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Services are used so we can improve them. You can control cookies through your browser settings; disabling certain cookies may affect the functionality of the Services.

5. Third parties

We share information with a limited set of trusted third-party service providers only as needed to operate the Services:

• Payment processing — subscription payments are handled by our payment partner, Razorpay, which processes your payment information under its own privacy and security practices.
• Hosting and infrastructure — the Services are hosted with reputable cloud providers that store data securely on our behalf.

These providers are permitted to use your information only to perform services for us and are required to protect it. We may also disclose information where required by law or to protect our rights and the safety of others.

6. Data security

We apply industry-standard technical and organisational measures to protect information against unauthorised access, alteration, disclosure, or destruction, including encryption in transit, access controls, and regular backups. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Data retention

We retain personal information and Customer Data for as long as your account is active or as needed to provide the Services, and thereafter only as required to comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer required, we take steps to delete or anonymise it.

8. Your rights

Subject to applicable law, including the DPDP Act, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information, where applicable.
• Withdraw consent, where our processing is based on consent.

To exercise any of these rights, please email us at contact@codecrafttechnology.in and we will respond in accordance with applicable law.

9. Children's data

Our Services are intended for use by businesses and institutions, not for direct use by children. In the case of SchoolHealth, schools and institutions may enter student information — including information relating to minors — into the platform. In these cases, the school or institution is the party responsible for that data (the data fiduciary/controller), and CodeCraft Technology acts as a processor, handling student data on the school's behalf and under its instructions. We do not use student data for any purpose other than providing the Services to the institution.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Services after changes take effect constitutes acceptance of the updated Policy.

11. Contact

If you have questions or requests regarding this Privacy Policy or your personal information, please contact us by email at contact@codecrafttechnology.in.