Privacy Policy

Last updated: 13 May 2026

Coderlust ("Coderlust", "we", "us", "our") operates a portfolio of AI-powered SaaS products for Indian businesses, accessible at coderlust.com and its subdomains. This Privacy Policy explains what personal information we collect, how we use it, and the choices you have. We comply with the Information Technology Act, 2000 (and the Rules thereunder), the Digital Personal Data Protection Act, 2023, and other applicable Indian laws.

1. Information we collect

We collect the following categories of information:

• Account information — name, email address, phone number, password (hashed), profile photo, business name, GSTIN (optional).
• Payment information — payments are processed by our payment partner Razorpay. We do not store full card numbers, CVVs, or UPI credentials. We retain payment status, transaction ID, last 4 digits of card, and billing address for invoicing and statutory record-keeping.
• Content you upload — product catalogs, photos, customer queries, menu images, and other inputs you provide to our AI products in order to generate output.
• Usage data — pages visited, features used, generation counts, timestamps, device type, browser, IP address, approximate location (city-level).
• Cookies and similar technologies — used to keep you signed in, remember preferences, and measure product usage.

2. How we use information

• To provide and operate the products you sign up for.
• To process payments, send invoices, and handle billing disputes.
• To improve our products, debug issues, and develop new features (aggregated and de-identified wherever possible).
• To send transactional emails (welcome, billing, security, support replies).
• To comply with legal obligations, enforce our Terms, and respond to lawful requests.

3. AI processing

Inputs you submit to our AI products (descriptions, photos, customer queries, menu images, catalog data) are sent to our AI infrastructure partner, Anthropic, to generate output. Anthropic does not retain inputs for model training. We do not use your data to train any AI model. You retain ownership of your inputs and outputs.

4. Third parties we share data with

We share limited data with the following sub-processors, each under contract:

• Google (Firebase) — authentication, database, hosting infrastructure.
• Anthropic — AI inference for generation features.
• Razorpay — payment processing and subscriptions.
• Resend — transactional email delivery.
• Vercel — web hosting and CDN.
• Cloudflare — DNS, CDN, DDoS protection.
• WATI — WhatsApp Business API delivery (only for products that use WhatsApp).
• PostHog — product analytics.

We do not sell your personal data to advertisers or any third party.

5. Data storage and location

Customer data is stored in Google Cloud's asia-south1(Mumbai) region. Backups may be replicated across Google Cloud's Indian regions for resilience. Logs and analytics may transit through systems in other regions; in such cases data is encrypted in transit and at rest.

6. Retention

We retain account data for as long as your account is active and for up to 90 days after deletion to allow for recovery and to satisfy legal, accounting, and audit obligations. Usage logs are retained for up to 12 months. You may request earlier deletion at any time.

7. Your rights

Under applicable Indian law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete information.
• Delete your account and request erasure of associated data.
• Withdraw consent for optional processing.
• Receive a copy of your data in a portable format.
• Lodge a grievance with our Grievance Officer (see Contact).

To exercise any of these rights, email support@coderlust.com.

8. Security

We protect your data using industry-standard measures including HTTPS in transit, encryption at rest, hashed passwords, role-based access control, and Firestore security rules that isolate every user's data. No system is perfectly secure; if you believe your account has been compromised, email support@coderlust.com immediately.

9. Children

Coderlust is not intended for users under the age of 18. We do not knowingly collect personal data from minors.

10. Changes to this policy

We may update this Privacy Policy as our products evolve. Material changes will be announced via email or in-app notification at least 14 days before they take effect.

11. Grievance officer

In accordance with Rule 5(9) of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and the consumer grievance redressal requirements of the Consumer Protection (E-Commerce) Rules, 2020:

• Name: Prachit (Founder)
• Email: support@coderlust.com
• Address: 589 B/3, Netaji Road, Bordi, Dist-Palghar, Maharashtra 401701, India
• Response window: within 7 working days of receipt