Privacy Policy

Last Updated: September 14, 2026 · Effective Immediately for Artifactly (an initiative of Kalpit Labs Private Limited)

At Artifactly (operated by Kalpit Labs Private Limited), we respect your personal privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit artifactly.kalpitlabs.com or purchase digital products from our marketplace.

1. Information We Collect

We collect information that you directly provide to us, as well as limited technical telemetry required to provide digital software downloads:

Account Information: Your name, email address, and encrypted credentials when you register or sign in.
Billing & Transaction Details: Order items, invoice IDs, transaction amounts, payment dates, and payment gateway reference IDs (e.g. Razorpay Order and Payment IDs).
Download Telemetry: Records of download grants, timestamps of download requests, and secure token usages to verify fulfillment and prevent unauthorized distribution.
Technical Data: IP address, browser type, device information, and session cookies strictly used to authenticate you and ensure platform security.

Zero Card Storage Guarantee: All monetary transactions are processed through certified, PCI-DSS compliant payment gateways (such as Razorpay). We never capture, store, or have access to your raw credit/debit card numbers, UPI PINs, or net banking passwords.

2. How We Use Your Information

Kalpit Labs Private Limited uses the collected data solely for legitimate operational purposes:

To create and manage your account and authenticate your sessions.
To authorize and generate secure time-limited download links for purchased project assets via Cloudflare R2.
To process payments, verify transactions, and issue invoices.
To provide customer support, installation assistance, and resolve technical issues.
To detect, investigate, and prevent fraudulent transactions or security violations.
To communicate critical product updates, security advisories, or order receipts.

3. Information Sharing & Third-Party Providers

We do not sell, rent, or trade your personal information to third parties. We share data only with verified infrastructure partners who enable our services:

Payment Gateways (Razorpay): To securely authorize and complete payments.
Cloud Storage (Cloudflare R2): To securely store and distribute project asset archives via signed URLs.
Transactional Email Services: To deliver order receipts and purchase confirmations.
Legal & Compliance Authorities: When required by Indian law, court order, or governmental regulations.

4. Cookies & Tracking Technologies

We use essential, secure HTTP-only cookies (such as forgelab_session) solely for user authentication and session continuity. We do not use third-party tracking pixels or behavioral advertising trackers to monetize your personal data.

5. Data Security & Retention

We implement industry-standard cryptographic practices (including scrypt password hashing, TLS encryption in transit, and short-lived pre-signed download tokens) to protect your account. We retain your transaction records and download grants for as long as your account remains active or as required by Indian tax and commercial accounting regulations.

6. Your Privacy Rights

You have the right to:

Access and review the personal data associated with your account.
Request correction of inaccurate information.
Request deletion of your account and personal data, subject to mandatory legal and financial record-keeping obligations.

7. Contact for Privacy Requests

To exercise your privacy rights or if you have questions regarding this Privacy Policy, please email our Data Privacy desk:

Kalpit Labs Private Limited
Attn: Privacy & Data Protection
Email: support@kalpitlabs.com
Website: https://artifactly.kalpitlabs.com