Privacy Policy

Last updated: March 2026

Compliant with the Digital Personal Data Protection Act, 2023 (DPDP Act)

1. Data We Collect

  • Account data: Name, email, profile image, credentials
  • Content data: Articles, comments, bookmarks, reading history
  • Payment data: Processed by Razorpay (we do not store card details)
  • Usage data: Pages visited, reading time, interactions (via PostHog analytics)

2. How We Use Your Data

  • Provide and personalize the platform experience
  • Process subscriptions and payments
  • Send transactional emails (account, subscription, article notifications)
  • Improve platform performance and content recommendations

3. Your Rights (DPDP Act)

As a data principal under the DPDP Act 2023, you have the right to:

  • Access: Request a copy of your personal data
  • Correction: Request correction of inaccurate data
  • Erasure: Request deletion of your account and data
  • Withdraw consent: Opt out of non-essential data processing

Exercise these rights via your account settings or by emailing privacy@pharmainsight.com.

4. Data Sharing

We do not sell your data. We share data only with:

  • Razorpay: Payment processing
  • Supabase: Database hosting (Mumbai, India)
  • Vercel: Application hosting
  • Resend: Email delivery

5. Cookies

We use essential cookies for authentication and session management. Analytics cookies (PostHog) are opt-in only.

6. Data Retention

Account data is retained while your account is active. Upon deletion, personal data is removed within 30 days. Anonymized analytics data may be retained indefinitely.

7. Data Breach

In the event of a data breach, we will notify the Data Protection Board of India and affected users as required by the DPDP Act.

8. Contact

Data Protection Officer: privacy@pharmainsight.com