Privacy Policy

To provide and operate Device Dinancy Suite ("the Service") we collect:

• Account details: email address, mobile number, full name.
• Order data: products purchased, delivery address, invoice and EMI records.
• Device & browser information: IP address, device model, OS, browser type and crash diagnostics.
• Optional uploads: profile photo, ID documents required for refurbished/EMI compliance.

We use your data only to:

• Authenticate your account through email OTP and prevent fraud.
• Process orders, payments, EMI applications, returns and warranty.
• Send transactional updates (order, shipping, refund, OTP).
• Improve performance, reliability and security of the Service.

We use 6-digit one-time passcodes sent to your registered email for sign-in. OTPs expire in 10 minutes and are never stored in plain text. Multiple failed attempts trigger automatic rate limiting.

Data is stored on encrypted managed infrastructure (TLS in transit, AES-256 at rest). Access is restricted by row-level security and least-privilege roles. We do not sell your personal data.

We share the minimum required data with trusted processors:

• Payment gateways (Razorpay, Bajaj, Snapmint, LazyPay) for transactions and EMI.
• Cloud hosting & database providers for storage and compute.
• Email delivery provider for OTP and transactional mail.
• Analytics for aggregated, non-identifying usage metrics.

You can at any time:

• Access the data we hold about you.
• Correct inaccurate information from your Account page.
• Request deletion of your account and personal data — see Account Deletion.

Account and profile data is retained while your account is active. Order, invoice and tax records are retained up to 8 years to comply with GST and consumer-protection law. On account deletion, personal identifiers are removed within 30 days; legally required transactional records are anonymised.

Questions or data requests: support@dinancy.com.