Privacy Policy

2. Information We Collect

To manage customer accounts, deliver digital subscriptions, and enforce quota security, we collect:

• Account Credentials: Full name, account email address, phone number (where provided), and scrypt-hashed passwords.
• Telemetry & Usage Data: Token consumption totals (input, output, and aggregate tokens), request latency (ms), model identifiers, and API status codes.
• Order & Payment Identifiers: Internal Order IDs, payment transaction references, payment status, purchase amounts, and subscription validity timestamps.
• Security & Technical Identifiers: IP addresses and browser User-Agent strings recorded strictly for rate limiting, audit logging, and anti-abuse protection.
• Google Analytics Data: Aggregated interaction events and traffic analytics (via property ID `G-GBRR7YHWVM`).

3. Sensitive Data We Do NOT Store

Lightning Deals does NOT collect or store sensitive financial credentials. Specifically:

• We do NOT store full credit card or debit card numbers.
• We do NOT store CVV codes or card expiration dates.
• We do NOT store net banking passwords or UPI PINs.
• All payment processing is handled externally by encrypted, certified payment gateways.

4. How We Use Your Information

Collected information is used exclusively for:

• Provisioning API key credentials and calculating 5-hour rolling token quotas.
• Authenticating customer logins and processing paid subscription activations.
• Providing customer support and ticket assistance.
• Detecting payment fraud, automated bot abuse, or rate-limit manipulation.
• Analyzing aggregate website performance and optimizing gateway responsiveness.

5. Google Analytics Disclosure

Our website utilizes Google Analytics (`G-GBRR7YHWVM`) to analyze general visitor traffic, browser types, interaction events, and page views. Google Analytics processes anonymized data to help us understand website performance. You can learn more about how Google uses data by visiting Google's Privacy & Terms.

6. Cookies & Local Storage

We use essential HTTP-only cookies and browser session storage (`sessionStorage`) to maintain secure login sessions (`ld_token`, `ld_admin_token`) and manage checkout states. Users can manage or block cookies through browser settings, though blocking essential cookies may affect portal login functionality.

7. Data Sharing & Infrastructure Service Providers

We do NOT sell or rent personal information to third parties or data brokers. Information is shared only with trusted infrastructure providers required to operate our service:

• Payment Processors: Certified Banking & Payment Gateway Processors (for processing checkout orders).
• Cloud Hosting & Database: Encrypted Supabase PostgreSQL database infrastructure and Render cloud hosting.
• Transactional Email: Resend API (for verification and password resets).
• Analytics Providers: Google Analytics.

8. Data Security & Retention

We implement industry-standard security measures including TLS 1.3 encryption for data in transit, AES-256-GCM AEAD encryption for master secrets, and timing-safe password verification. Data is retained for as long as necessary to maintain active accounts, fulfill subscription commitments, maintain financial transaction records, and comply with legal requirements under Indian law.

9. Customer Rights & Data Requests

Under applicable Indian data protection laws, customers have the right to request access to their personal information, correction of inaccurate records, or account deletion. Account deletion requests can be submitted via the Customer Support Portal or by emailing our privacy team.

10. Children's Privacy

Our services are directed to developers and businesses. Lightning Deals does not knowingly collect or solicit personal information from individuals under 18 years of age.