Privacy Policy & Data Protection

1. Data Minimization Principle

VoltPulse operates under strict data minimization. We only collect the minimal personal information necessary to deliver physical hardware products, comply with statutory tax regulations (GST), and manage manufacturer warranty claims. We do not sell, rent, or monetize your personal details.

2. Payment Security & Zero COD Architecture

We do NOT store customer credit card numbers, debit card details, CVVs, or NetBanking passwords on our servers.

• Online Gateway Transactions: Handled through PCI-DSS Level 1 certified gateways (Razorpay / Paytm) over TLS 1.3 encryption with server-side HMAC-SHA256 signature verification.
• Manual UPI / QR / Bank Receipts: Proof screenshots and UTR numbers are placed in protected directories outside the public web root (/private/uploads/payments). They cannot be accessed via direct URLs and require role-based cryptographic admin authentication.
• Zero Cash-on-Delivery Policy: Eliminates courier spoofing, fake dispatch calls, and physical cash risk.

3. Cryptographic Storage & Telegram Channel Isolation

Product media stored in our private Telegram channel storage is mapped internally via randomized IDs. Telegram bot credentials and channel identifiers are maintained exclusively on the server side and are never exposed in customer network requests or frontend responses.

4. Security Audit Logging & Immutability

Administrative actions (including order status transitions, manual payment approvals, role assignments, and catalog updates) are logged immutably with actor IDs, IP addresses, user agent strings, and state diffs. Confidential keys and credentials are automatically redacted prior to audit persistence.

5. Data Subject Rights & Deletion

Customers retain full legal rights to request export of their order records or permanent account closure, subject to mandatory 7-year statutory financial invoice retention laws. For privacy inquiries, email privacy@voltpulse.internal.