Privacy Policy

DigiPush (“DigiPush”, “we”, “us” or “our”) provides a multi-tenant web push notification platform. DigiPush is a product of DigiRocket (legal name: Ronak Giri). This Privacy Policy explains what information we collect when you use the DigiPush service (the “Service”), how we use and protect that information, and the choices you have.

By creating an account or using the Service, you agree to the collection and use of information as described in this policy. This policy is a companion to our Terms & Conditions.

We collect information that you provide to us directly and information generated while you use the Service. The categories below describe the types of information we may collect where applicable:

• Account information. Name, email address and password (stored in hashed form) when you register. You may also be asked for other contact information you choose to provide.
• Application and workspace information. The name and configuration of the workspaces, applications and websites you register in your account.
• Domain information. The domains you associate with your applications, including verification tokens used to prove that you control those domains.
• Push notification subscriber data. Where you use our SDK to collect subscribers, we store subscription information for the browsers and devices that opt in to receive notifications from your applications.
• Usage, device and technical information. Details such as your IP address, browser type and version, device type, operating system, language, timezone and pages you interact with while using the Service.
• Cookies and session information. Session cookies and related identifiers needed to keep you signed in and to secure your account.
• Payment and subscription information. The plan you select and the billing interval. Payment card details are not collected or stored by DigiPush; payments are processed by our payment provider (see Section 5).

We use the information we collect to operate and improve the Service, including to:

• Create and manage your account and workspace.
• Provide the features you request, such as applications, domains, subscriber collection, segments, campaigns, scheduling, analytics and API access.
• Deliver push notifications to subscribers who have opted in.
• Process subscriptions, billing and renewals through our payment provider.
• Verify that you control the domains you connect.
• Secure the Service, prevent abuse and enforce our Terms & Conditions.
• Respond to support requests and communicate with you about your account.
• Understand how the Service is used so we can maintain and improve it.

We do not sell your personal information.

We process information to perform the contract you enter into when you use the Service, to pursue our legitimate interests in operating and securing the Service, to comply with legal obligations where applicable, and where you have given consent where required.

To the extent that data protection laws such as the GDPR or India’s Digital Personal Data Protection Act apply to you, this policy is intended to support your rights under those laws. DigiPush does not claim any formal certification unless and until one is actually obtained.

Payments for paid plans are processed by our payment provider (currently Razorpay) on secure, PCI-compliant infrastructure.

DigiPush does not collect, store or process payment card details. Card numbers, expiry dates, CVV and other payment credentials are entered directly with the payment provider. We receive limited information from the provider (such as payment status, payment and subscription identifiers, amount and currency) in order to activate and manage your subscription and records.

Your payment information is subject to the payment provider’s own privacy and security practices in addition to this policy.

We use session cookies and similar technologies that are essential for authentication, security and the operation of the Service. We may also store small amounts of data in your browser’s local storage (for example, your theme preference) so the Service works as intended.

You can disable cookies in your browser settings, but some parts of the Service may not function correctly without them.

We use trusted third-party providers to operate the Service, including hosting and infrastructure providers, our payment provider, and email/notification delivery services where applicable. These providers receive only the information needed to perform their functions and are expected to protect it.

Where we use analytics to understand how the Service is used, any such processing is performed on aggregated or non-identifying data wherever possible.

We apply reasonable technical and organisational measures to protect information we hold, including encrypted connections, hashed passwords, scoped API keys, tenant isolation, and restricted access to production systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

We retain information for as long as your account remains active or as needed to provide the Service, comply with legal obligations, resolve disputes and enforce our agreements. When you close your account or delete data, we remove or anonymise it in line with our retention practices.

Depending on where you live, you may have rights regarding your personal information, including the right to access, correct, or delete your information, and the right to object to or restrict certain processing, where applicable.

To exercise any of these rights, contact us using the details below. We may ask you to verify your identity before processing a request.

You can request deletion of your account and related data at any time by contacting support. We will process valid deletion requests and remove or anonymise your data in line with our retention practices, except where we are required to keep information for legal or accounting reasons.

Deleting an account closes the workspace and the applications, subscribers and campaigns it contains. This action may be irreversible.

The Service is not directed at children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will take steps to remove it where required.

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the “Last updated” date. Where changes are significant, we may notify you through the Service or by email where appropriate.

If you have questions about this Privacy Policy or your information, contact us:

• Email: helloronakgiriraj@gmail.com
• Phone: +91 62010 32114

This Privacy Policy is published on behalf of Ronak Giri (DigiRocket), the entity providing the DigiPush service, at https://push.digirocket.online. A registered office address is pending configuration and will be added here once available.