Privacy Policy
Last updated: 23 July 2026
FragranVerse (“FragranVerse”, “we”, “us”, “our”) operates the website fragranverse.com (the “Platform”). This Privacy Policy explains how we collect, use, share, and protect your personal data, and your rights under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and other applicable Indian law. By using the Platform, you consent to the practices described here.
FragranVerse is operated by Adil Haque, a sole proprietor based in Mumbai, Maharashtra, India.
1. Data we collect
a) You provide directly
- Account data when you sign in with Google: name, email address, and profile image (via Google OAuth). We do not receive your Google password.
- Content you create: perfume ratings, collection entries, reviews, community submissions, and any text you enter.
- Communications: messages you send us (support, grievances, feedback).
b) Collected automatically
- Usage & device data: pages viewed, searches, approximate location (from IP), browser/device type, referring URL, and interaction events, collected via cookies and analytics.
- Log data: IP address, timestamps, and error diagnostics (via our hosting and error-monitoring providers).
We do not knowingly collect data from children under 18. We do not intentionally collect sensitive personal data (financial, health, biometric).
2. Why we use your data
| Purpose | Examples |
|---|---|
| Provide the service | Save your collection, compute Shelf Score, show your dashboard |
| Authenticate you | Sign-in and account security |
| Improve the Platform | Understand usage, fix errors, develop features |
| Communicate | Respond to grievances/support; service or (with consent) update emails |
| Safety & legal | Prevent abuse/fraud, moderate content, comply with law |
We process your data on the lawful bases of your consent and, where applicable, legitimate uses permitted under the DPDP Act.
3. Cookies & tracking
We use essential cookies (to run the site and keep you signed in) and, with your consent, analytics cookies. You can manage preferences via your browser settings. See our Cookie Policy for full details.
4. How we share data
We do not sell your personal data. We share it only with:
- Service providers (data processors) who help us operate, under contract and confidentiality: Supabase (hosted in Mumbai), Vercel (hosting & CDN), Google (OAuth sign-in), Resend (transactional email), Sentry (error monitoring), and an analytics provider.
- Legal & safety: when required by law, court order, or to protect rights and safety.
- Business transfer: if FragranVerse is merged or acquired, data may transfer under equivalent protections.
International users. The Platform is operated from India. If you access it from outside India, you consent to your data being processed in India and by the providers described above, under Indian law. Where local data-protection law (such as the UAE PDPL or the EU GDPR) grants you additional rights, we honour those rights on request.
5. Data retention
We keep personal data only as long as needed for the purposes above or as required by law. Account data is retained while your account is active; you may request deletion at any time. Aggregate/anonymised data may be retained.
6. Security
We apply reasonable technical and organisational safeguards encryption in transit (HTTPS), access controls, database row-level security, and monitoring. No system is perfectly secure; we will notify you and the Data Protection Board of India of a personal-data breach as required by the DPDP Act.
7. Your rights (DPDP Act)
As a Data Principal, you may:
- Access request a summary of the personal data we process about you.
- Correction & updating correct inaccurate or incomplete data.
- Erasure request deletion of your data (subject to legal retention needs).
- Withdraw consent as easily as you gave it (this may limit features).
- Grievance redressal raise a complaint and, if unresolved, approach the Data Protection Board of India.
- Nominate nominate another individual to exercise your rights in case of death or incapacity.
To exercise any right, email legal@fragranverse.com. We will respond within the timelines required by law.
8. Grievance redressal
For any data-protection question, request, or complaint, email legal@fragranverse.com. We aim to acknowledge within 48 hours and resolve within 15 days. If your grievance is unresolved, you may approach the Data Protection Board of India.
9. Changes
We may update this Policy. Material changes will be posted here with a new “Last updated” date and, where appropriate, notified to you.