Legal Document

Privacy Policy

Your privacy is our priority. This policy explains how we collect, use, and protect your personal information when you use HandyBrowsers.

Last updated: July 1, 2025 • Effective: July 1, 2025

1Information We Collect

HandyBrowsers is registered at A 90 UGF, Chander Vihar Nilothi Extension, West Delhi, Delhi - 110041, India. This policy is written to comply with India's Digital Personal Data Protection Act, 2023 (DPDP Act). [REVIEW: confirm GDPR applicability and required clauses if serving EU/UK users]

We collect information you provide directly to us and information generated by your use of our services:

Account Information

Name, email address, and payment information when you create an account or purchase a subscription.

Usage Data

App version, device ID, activation key, browser session counts, bandwidth usage, and sync timestamps for operating the service.

Technical Data

IP address, browser type, operating system, and request logs for security and troubleshooting purposes.

Communications

Messages, support tickets, and feedback you send to us through our contact channels.

2How We Use Your Data

Our legal basis for processing is your consent (given at signup and via cookie preferences), performance of our contract with you (delivering the Service you subscribed to), and our legitimate interest in securing and improving the Service.

  • Provide, maintain, and improve HandyBrowsers services
  • Process transactions and send related information, including purchase confirmations and invoices
  • Validate activation keys and enforce subscription limits
  • Monitor bandwidth usage and calculate plan quotas
  • Send technical notices, security alerts, and support messages
  • Respond to your comments, questions, and customer service requests
  • Monitor and analyze trends, usage, and activities to improve the service
  • Detect, investigate, and prevent fraudulent transactions and other illegal activities
  • Comply with legal obligations

3Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your data only in the following circumstances:

Service Providers: Including our payment processor (to process subscription payments), analytics providers (to understand product usage), and proxy/bandwidth providers (to operate profile networking features) — each bound by confidentiality obligations and only given the data needed to perform their function. [REVIEW: name specific payment processor and analytics vendor once finalized]
Legal Requirements: When required by law, subpoena, or other legal process, or when we believe disclosure is necessary to protect rights, property, or safety.
Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets.

4Cookies and Tracking

Our website uses cookies and similar tracking technologies to enhance your experience. We use:

EssentialAuthentication tokens and session management cookies required for the service to function.
AnalyticsAnonymous usage statistics to understand how users interact with our service and improve it.
PreferencesSettings and preferences you configure on our platform.

You can control cookie settings through your browser. Note that disabling essential cookies may impact service functionality.

5Data Retention

We retain your information for as long as your account is active or as needed to provide services:

Account Data

Until account deletion + 30 days

Browser Session Data

90 days after last sync

Bandwidth Logs

12 months

Support Tickets

3 years

Billing Records

7 years (legal requirement)

Server Logs

30 days rolling window

6Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

👁️Access

Request a copy of your personal data

✏️Rectification

Correct inaccurate or incomplete data

🗑️Erasure

Request deletion of your personal data

⏸️Restriction

Restrict how we process your data

📦Portability

Receive your data in a portable format

Objection

Object to processing of your data

To exercise any of these rights, contact us at privacy@handybrowsers.com. We will respond within 30 days.

Cross-Border Data Transfers: Our servers and service providers may be located outside your country of residence. Where we transfer personal data internationally, we rely on the service provider agreements and safeguards required under the DPDP Act. [REVIEW: confirm data-transfer mechanism and hosting locations with counsel]

7Security

We implement industry-standard security measures to protect your information:

  • TLS/HTTPS encryption for all data in transit
  • AES-256 encryption for sensitive data at rest
  • Regular security audits and penetration testing
  • Access controls and principle of least privilege
  • MongoDB Atlas encrypted cloud storage with automated backups
  • Rate limiting and DDoS protection via Nginx

No method of transmission over the internet is 100% secure. If you discover a security vulnerability, please report it to security@handybrowsers.com.

8Children's Privacy

HandyBrowsers is not directed to children under the age of 18. We do not knowingly collect personal information from children. If we discover we have collected personal information from a child, we will promptly delete it. If you believe we may have collected information from a child, contact us at privacy@handybrowsers.com.

9Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page with a new “Last Updated” date and, where appropriate, sending you an email notification. Your continued use of HandyBrowsers after the effective date of any changes constitutes acceptance of the updated policy.

10Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact our Privacy team:

Email: privacy@handybrowsers.com

Support: Contact Page

Registered entity: HandyBrowsers, A 90 UGF, Chander Vihar Nilothi Extension, West Delhi, Delhi - 110041, India

[REVIEW: designate a named Grievance Officer under the DPDP Act and publish their name/contact here]