This policy explains what personal data Rorasoft LLP ("Rorasoft", "we") collects, why, and what you can do about it. It follows India's Digital Personal Data Protection Act, 2023 and the rules made under it.
Who we are
Rorasoft LLP is a limited liability partnership registered in India. For the data described here, we are the data fiduciary: we decide how and why it is processed.
What this policy covers
This website, rorasoft.com, and every Rorasoft product that links to this policy. Some products have their own privacy notice with more detail about the data that product handles. Where they differ, the product's notice applies to that product.
What we collect
- What you send us. Your name, email address and message when you use the contact form or email us. Your email address, and your name if you give it, when you join a waitlist or the launch list.
- Account and product data. When you use a product, the details needed to run your account and provide the service. Each product's notice lists these.
- Payment details. Payments are handled by our payment gateway. We receive confirmation of the payment and the details needed for invoices. We never see or store your full card or bank details.
- Technical data. Our hosting provider keeps short-lived server logs, such as IP address and browser type, to keep the site secure and working. This website does not use advertising trackers or cookies.
Why we use it
- To reply to your messages and support requests.
- To tell you when a product you signed up for opens, or when we launch something new.
- To provide the products you use, bill you for them and keep your account secure.
- To meet our obligations under Indian law, such as tax and accounting records.
We process data with your consent, which you can withdraw at any time, or where the law allows it without consent, for example to provide a service you asked for or to comply with the law. We don't sell personal data and we don't use it for advertising.
Who we share it with
Only with service providers that help us run Rorasoft, under contracts that require them to protect it: Google Workspace (email and form submissions), Cloudflare (website hosting and security), and our payment gateway. Some of these providers may process data outside India. We may also disclose data where Indian law requires it.
How long we keep it
- Messages to us: up to two years after our last reply.
- Waitlists and the launch list: until you unsubscribe or ask us to remove you.
- Product accounts: while your account is open, then as described in the product's notice.
- Invoices and payment records: as long as Indian tax and LLP law require, currently up to eight years.
Your rights
Under the DPDP Act you can ask us to:
- give you a summary of the personal data we hold about you and how we use it
- correct, complete or update it
- erase it, unless we must keep it by law
- stop using it where you gave consent (withdrawing consent)
- let someone you nominate exercise these rights if you die or become unable to
Email privacy@rorasoft.com from the address you used with us. We'll confirm your request and aim to complete it within 30 days.
Children
Our products are meant for adults. If you are under 18, a parent or legal guardian must agree on your behalf before you use a product that collects personal data. If you believe a child has given us data without that consent, write to us and we will delete it.
Security
We use encryption in transit, access controls, and reputable infrastructure providers to protect your data. If a breach affects your data, we will tell you and the Data Protection Board of India as the law requires.
Grievance officer
If you have a complaint about how we handle your data, contact our grievance officer, at privacy@rorasoft.com. If you're not satisfied with our response, you can complain to the Data Protection Board of India.
Changes to this policy
When we change this policy we'll update the date at the top. If a change affects how we use data you've already given us, we'll tell you by email first.