1. Who We Are

CK Online Center ("we", "us", "our") operates the CMA Generator service. We are committed to protecting your privacy and handling your personal information responsibly under the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 of India.

2. Information We Collect

2.1 Information You Provide

• Account Info: Name, email, phone number, password (encrypted via Firebase Authentication)
• Business Info: Company name, address, GSTIN (if provided), industry — used solely to populate your reports
• Financial Info for Reports: Sales, expenses, capital, loan amounts — used to compute projections (NOT shared)
• Payment Info: Processed entirely by Razorpay. We never see or store your card numbers, CVV, or banking credentials.

2.2 Information Collected Automatically

• Browser type, device info, IP address (for security and analytics)
• Usage data: pages visited, features used, errors encountered
• Cookies for authentication and session management

3. How We Use Your Information

• To create your account and provide our services
• To generate CMA reports and Project Reports based on your inputs
• To process payments and grant access to paid features
• To send transactional emails (receipts, password resets, plan expiry notices)
• To improve our service through aggregated, anonymized usage analytics
• To detect and prevent fraud, abuse, or unauthorized access
• To comply with legal obligations under Indian law

4. Data Sharing

We do NOT sell your personal data. We share data only with:

• Firebase / Google Cloud — for authentication, database hosting, and infrastructure (their privacy policies apply)
• Razorpay — for payment processing (their privacy policy at razorpay.com/privacy)
• Law enforcement — only when legally required by Indian authorities

All third parties we work with are contractually bound to protect your data.

5. Data Security

We implement industry-standard security measures:

• HTTPS/TLS encryption for all data in transit
• Firebase Security Rules ensuring only you (and admins) can access your data
• Password encryption via Firebase Authentication (we never see plain passwords)
• Restricted access — only authorized personnel can access user data, only when necessary for support

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but commit to using best practices.

6. Data Retention

• Account data: Retained as long as your account is active. Deleted within 30 days of account deletion request.
• Reports & inputs: Stored in your account for re-download. You may delete them anytime.
• Payment records: Retained for 7 years per Indian tax law requirements.
• Analytics: Anonymized data may be retained indefinitely.

7. Your Rights

Under Indian privacy laws, you have the right to:

• Access your personal data we hold about you
• Correct inaccurate or outdated information
• Delete your account and associated data ("right to erasure")
• Object to certain processing activities
• Withdraw consent at any time
• Lodge a complaint with the relevant data protection authority

To exercise any of these rights, email us at ckonline61@gmail.com.

8. Cookies & Tracking

We use minimal cookies, primarily for:

• Maintaining your login session (Firebase Auth)
• Remembering your preferences
• Anonymous analytics (if Google Analytics enabled)

You can disable cookies in your browser, but some features may not work properly.

9. Children's Privacy

Our service is not directed to children under 18. We do not knowingly collect data from minors. If you believe we have collected such data, please contact us immediately.

10. International Data Transfers

Your data is stored on servers operated by Google Firebase (asia-south1 region — Mumbai, India). Backups may be replicated across other Google Cloud regions for redundancy.

11. Third-Party Links

Our site may contain links to third-party websites (e.g., Razorpay, government schemes). We are not responsible for their privacy practices. Read their policies separately.

12. Changes to This Policy

We may update this policy occasionally. Material changes will be notified via email or prominent notice on the site. Continued use after changes constitutes acceptance.

13. Contact Us About Privacy

For privacy-related questions or to exercise your rights:

• 📧 Email: ckonline61@gmail.com
• 📞 Phone: See Contact page

We aim to respond to all privacy requests within 30 days.