At Nimbu Ninjas, safeguarding your personal data and maintaining absolute transparency regarding how your information is handled is our highest priority.

This Privacy Policy explains what personal data we collect, why we collect it, how it is secured, and your legal rights regarding your data when using our software store, client dashboard, and authentication services.

We collect information in the following categories:

• Account & Profile Information: When you register, we collect your name, email address, and encrypted authentication tokens.
• Authentication & OAuth Data: When signing in with Google or GitHub, we receive basic public profile information (such as your verified email address and provider avatar) solely to authenticate and provision your session.
• Order & Transaction History: Records of your software license purchases, order timestamps, and invoice numbers. We do not store raw credit card numbers.
• Technical & Session Telemetry: IP address, device specifications, browser type, and cookie tokens to protect against malicious bot attacks and brute-force attempts.

Your information is used strictly for legitimate business and fulfillment purposes:

• Service Delivery: Generating and delivering your genuine digital license keys and downloadable software assets.
• Authentication & Account Management: Keeping your session active, enabling persistent login via “Remember Me,” and password recovery verification.
• Security & Abuse Prevention: Detecting fraudulent orders, unauthorized access attempts, and protecting platform integrity.
• Transactional Communications: Sending order receipts, delivery confirmations, and critical security notices. We never send unsolicited spam.

We use essential and functional cookies to ensure a smooth user experience:

• Essential Session Cookies: Required to maintain secure authentication tokens and Supabase session state.
• Preference Cookies: Store your “Remember Me” preferences and UI settings across sessions.
• Bot Protection: Cloudflare Turnstile tokens to safeguard forms against automated spam without intrusive captchas.

We implement industry-standard cryptographic safeguards to protect your personal data:

• All web traffic is transmitted via HTTPS with TLS 1.3 encryption.
• Passwords are hashed using modern cryptographic salts (Argon2 / bcrypt) — raw passwords are never visible to anyone, including our staff.
• Databases utilize strict Row Level Security (RLS) policies ensuring users can only read and manage their own authenticated data.

Depending on your jurisdiction, you have the following enforceable rights:

• Right to Access: You can request a full copy of your personal data stored on our platform.
• Right to Rectification: You can update or correct your profile information at any time from your account settings.
• Right to Erasure (“Right to be Forgotten”): You may request complete deletion of your account and associated personal data by emailing our privacy team.
• Right to Data Portability: Obtain your purchase records and account history in a structured, machine-readable format.

To exercise your privacy rights, request data deletion, or ask questions regarding our privacy practices, contact our Data Protection Officer: