Privacy Policy

Information We Collect

We collect information you provide directly when you create an account, submit an artwork, make a purchase, or interact with the Platform.

We also collect certain information automatically when you use the Platform, such as your device type, browser, IP address, and pages visited.

• Account details: name, email address, mobile number, and profile picture.
• Artist information: bio, experience level, artwork listings, and bank details for payouts.
• Transaction data: order history, billing address, and payment references.
• Community data: member form submissions, exhibitions, publications, and felicitations.
• Usage data: pages visited, session duration, and interaction events.
• Communications: messages sent through the Platform and support enquiries.

How We Use Your Information

We use the information we collect to provide, maintain, and improve the Platform and its features.

• To create and manage your account and personalise your experience.
• To display your artworks, profile, and community membership to other users.
• To process orders and facilitate transactions between buyers and artists.
• To send you important service notifications, account alerts, and updates.
• To send promotional communications if you have opted in (you can opt out at any time).
• To detect, investigate, and prevent fraudulent or prohibited activity.
• To comply with legal obligations under applicable Indian law.
• To analyse usage patterns and improve Platform performance.

How We Share Your Information

We do not sell your personal data to third parties. We share your information only in the following limited circumstances:

• With buyers: your name, artwork details, and contact information are shared when a purchase is made.
• With service providers: trusted third-party providers (such as Cloudinary for media storage and email delivery services) who process data on our behalf under strict confidentiality obligations.
• With legal authorities: when required by law, court order, or government authority in India.
• In a business transfer: if Rangu Online is acquired or merges with another entity, your data may be transferred as part of that transaction.

Cookies & Tracking

Rangu Online uses cookies and similar tracking technologies to maintain your session, remember your preferences, and understand how the Platform is used.

We use httpOnly cookies to store your authentication session securely. These cookies cannot be accessed by client-side scripts, protecting you from cross-site scripting attacks.

You can control cookie preferences through your browser settings. Disabling cookies may affect your ability to log in and use certain features.

Data Security

We take data security seriously. All passwords are hashed using bcrypt before storage and are never stored in plain text. All data in transit is encrypted using TLS/HTTPS.

We implement rate limiting, input validation, and access controls across the Platform to protect against unauthorised access, data breaches, and abuse.

While we take reasonable measures to protect your data, no system is completely secure. We encourage you to use a strong password and not share your account credentials.

Your Rights

You have the following rights with respect to your personal data held by Rangu Online:

• Access: request a copy of the personal data we hold about you.
• Correction: request that we correct any inaccurate or incomplete data.
• Deletion: request that we delete your account and associated personal data (subject to legal retention obligations).
• Portability: request your data in a structured, machine-readable format.
• Objection: object to certain processing activities, including direct marketing.
• Withdraw consent: withdraw any consent you have given at any time.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. If you close your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it by law (for example, transaction records for tax purposes).

Artwork listings associated with completed sales may be retained in anonymised form for record-keeping purposes.

Children's Privacy

Rangu Online is not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18 years of age.

If you believe a minor has provided us with personal data, please contact us immediately and we will take steps to delete the information.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify registered users of material changes via email or a prominent notice on the Platform.

The "Last updated" date at the top of this page indicates when this policy was last revised. Continued use of the Platform after changes are posted constitutes your acceptance of the updated policy.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact our team at admin@ranguonline.com.

We aim to respond to all privacy-related enquiries within 5 business days.