Privacy Policy

At KP-tech solutions ("we", "us", "our", or "Company"), operating the digital commerce platform Ruveka AI, we explain below how we handle information about users, creators and buyers.

This notice explains what information KP-tech solutions processes when you use Ruveka AI, publish a digital product, or buy one. It describes the service providers used for payments, email and file storage. It is an operational privacy notice and does not claim certification or legal compliance status.

1. Information We Collect

We strictly practice data minimization and collect only the information required to provide our digital product services:

User Category	Personal Data Collected	Specific Purpose of Processing
Creators / Sellers	Name, email address, Google authentication ID, product details and uploaded digital files.	Account access, product publishing, digital delivery, support, security and creator dashboard features.
Buyers / Customers	Email address, mobile phone number, order/payment references and support communications.	Payment confirmation, digital delivery, customer support and fraud prevention.
AI tool users	Prompts and messages submitted to the AI assistant.	Generate the requested response and protect the service from abuse.
Browser storage	Creator drafts, preview data, AI chat history and short-lived page state saved in your browser.	Restore work on the same device. Clearing site data removes these local copies and may sign you out.

2. Payment Information & Cashfree Checkout

3. How we use information

We use information to provide the service you request, record checkout choices, deliver purchased files, support users, prevent abuse and meet applicable record-keeping obligations. Checkout consent is stored with the order so the recorded wording and policy versions can be reviewed later.

• Payment details are handled by Cashfree's hosted checkout. Ruveka keeps order references and the contact details required for fulfilment.
• For upload abuse prevention, the server stores keyed account and network identifiers, upload counts and byte totals for short-lived rate-limit windows.
• Uploaded product files are temporarily processed by our Google Cloud malware scanner. Files that pass are stored privately; rejected or unscannable staging files are deleted.
• Prompts sent to the AI assistant are processed by Cloudflare Workers AI to generate a response. Do not include payment credentials or other sensitive information in a prompt.

4. Children's privacy

A child means an individual who has not completed 18 years of age under the Digital Personal Data Protection Act, 2023. Ruveka accounts and purchases are intended for adults aged 18 or older, and checkout asks buyers to confirm they are 18+. Do not submit a child’s personal information to the service. If you believe a child has provided personal information, contact us so we can review it and take appropriate action, including deletion where permitted or required.

5. Third-Party Data Processors (Sub-processors)

Ruveka uses the following services to operate the product:

• Firebase Authentication: Exclusively for user identity and secure sign-in verification.
• Cloudflare: For edge hosting (Pages), document database (D1), private product file storage (R2), and serverless Edge Functions.
• Cashfree Payments: For hosted checkout, payment processing and payment status notifications.
• Brevo: For transactional payment receipts. Brevo receives the buyer email address and the receipt/order-link content needed to send that message. The digital file is not attached to the email.
• Cloudflare Workers AI: To process prompts submitted to the AI assistant and return generated responses.

These providers process information under their own service terms and privacy notices. Payment-card numbers, CVVs and UPI PINs are not stored by Ruveka.

6. Digital Personal Data Protection Act, 2023 and Data Principal rights

This notice describes Ruveka’s handling of digital personal data in the context of India’s Digital Personal Data Protection Act, 2023 (DPDP Act). It is an operational description of our practices and does not claim certification or legal compliance status. You can read the official DPDP Act text and the MeitY rules and policy page.

Subject to applicable law and necessary transaction, security or legal retention, you may contact us to exercise these Data Principal rights:

• Right to Access information: ask for a summary of personal data we process and information about its processing and sharing, subject to the Act’s limits.
• Right to Correction: ask us to correct inaccurate data, complete incomplete data or update it.
• Erasure: ask us to erase personal data where the Act and other applicable law allow. We may retain records required for a transaction, security or legal purpose.
• Consent withdrawal: where consent is the basis for processing, ask us to withdraw it. This does not undo processing already carried out and may affect the service or fulfillment we can provide.
• Grievance Redressal: register a grievance about our handling of personal data or a request to exercise these rights. We will review it and respond under the process and timelines that apply by law.

To make a request or grievance, email contact.vidyascore@gmail.com and include the account email or order reference needed to locate the record. We may ask for reasonable information to verify your identity. If a grievance remains unresolved after using this process, you may use the remedies available under applicable law.

We do not use a checkout phone number as WhatsApp marketing consent. Any future WhatsApp messages would require a separate opt-in.

7. Data Retention & Deletion

We retain account, order and consent records while needed to operate the service, provide support, prevent fraud and meet applicable record-keeping obligations. We do not promise an automatic deletion schedule for all transaction data. Short-lived upload rate-limit records are eligible for automatic cleanup after their configured window; cleanup timing can vary. Scanner working copies are deleted after scanning; rejected staging uploads are removed.

• Published product files remain in private storage while the creator keeps the product available, unless the file is removed for safety or policy reasons.
• Rejected or unscannable product files are not published and are removed from staging storage.

8. Privacy contact

For privacy questions or requests, contact KP-tech solutions at the address below.