Legal

Privacy Policy

Effective Date: 29 March 2026
Last Updated: 29 March 2026

This Privacy Policy describes how Orosfort Private Limited (“we”, “us”, “our”, “Drafto”) collects, uses, stores, shares, and protects your personal information when you visit drafto.store (“the Website”) or purchase any product from us. This policy is published in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Consumer Protection (E-Commerce) Rules, 2020.

By using this Website, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Website.

1. Who We Are

Legal Entity: Orosfort Private Limited
Brand: Drafto
Website: https://drafto.store
Registered Address: Chennai, Tamil Nadu, India
Email: contact@drafto.store

2. Information We Collect

2.1 Information you provide directly

When you place an order, contact us, or interact with the Website, we may collect:

Name — to address you and personalise order confirmation emails
Email address — to deliver your product, send order confirmation, and respond to support queries
Billing details — collected and processed by Cashfree Payments; we do not store card numbers, UPI IDs, or bank account details on our servers
Order and transaction information — Order ID, product purchased, amount paid, date of purchase, and Cashfree transaction reference number
Support communications — emails or messages you send us regarding orders, refunds, or grievances

2.2 Information collected automatically

When you browse the Website, we or our analytics tools may automatically collect:

IP address and approximate location (city/region level)
Browser type and version
Device type (desktop, mobile, tablet)
Operating system
Pages visited, time spent on pages, and referring URL
Date and time of access

This information is collected in aggregated, anonymised form and is used solely to understand how visitors use the Website and to improve performance.

2.3 Cookies and tracking technologies

The Website may use cookies for the following purposes:

Essential cookies: Required for the Website and checkout to function correctly (e.g. maintaining your cart session).
Analytics cookies: Used to understand traffic and usage patterns (e.g. Google Analytics). Data collected is anonymised and aggregated.
Payment cookies: Set by Cashfree during the checkout process to enable secure payment flow.

You can control or disable cookies through your browser settings. Disabling essential cookies may affect checkout functionality. We do not use cookies for advertising or behavioural tracking.

3. How We Use Your Information

3.1 Order fulfilment

Your name, email address, and order details are used to process your purchase, generate your order confirmation, and deliver the download link or Google Sheets access link to your inbox.

3.2 Customer support

Your contact information and order details are used to respond to support requests, refund queries, and grievances.

3.3 Transaction records

We maintain order and transaction records for accounting, auditing, and legal compliance purposes as required under Indian law.

3.4 Website improvement

Anonymised usage data helps us understand which pages and products are most useful, improve navigation, and fix technical issues.

3.5 Legal compliance

We may use or disclose your information when required to do so by applicable law, court order, or a government or regulatory authority.

3.6 Fraud prevention

Transaction and usage data may be used to detect and prevent fraudulent orders or chargebacks.

We do not use your personal information for unsolicited marketing, automated profiling, or any purpose not listed above without your explicit consent.

4. Payment Data and Cashfree Payments

All payment transactions on drafto.store are processed by Cashfree Payments Services Private Limited, a company regulated by the Reserve Bank of India (RBI) as a Payment Aggregator.

When you make a payment:

You are redirected to or interact with Cashfree’s secure payment interface.
Your card details, UPI credentials, net banking credentials, and wallet information are submitted directly to Cashfree and are never transmitted to or stored on our servers.
Cashfree is PCI-DSS compliant and operates under RBI guidelines.
Payment data is governed by Cashfree’s Privacy Policy.

We only receive a transaction confirmation (success/failure), the Cashfree Order ID, and the transaction reference number — no sensitive payment credentials.

5. Sharing of Your Information

We do not sell, rent, trade, or otherwise share your personal information with third parties for commercial purposes. We share your data only in the following limited and necessary circumstances:

5.1 Payment processing

Cashfree Payments Services Private Limited — to process and confirm your payment. Your email may be shared with Cashfree to generate a payment confirmation receipt.

5.2 Product delivery

Google LLC — when you receive a Google Sheets template, we share a copy link that allows you to access the file via Google Drive. Google’s access to your data is governed by Google’s Privacy Policy.

5.3 Email delivery

We use a transactional email service to send order confirmations and download links. Your email address is shared with this service solely for the purpose of delivering your order emails.

5.4 Legal obligations

We may disclose your information to law enforcement agencies, courts, regulatory bodies, or government authorities when required by law, valid legal process, or to protect our legal rights.

5.5 Business transfer

In the event of a merger, acquisition, or sale of Orosfort Private Limited, your personal data may be transferred to the acquiring entity, subject to the same level of privacy protection described in this policy. We will notify you of any such transfer.

6. Data Retention

We retain your personal data only for as long as necessary for the purposes described in this policy:

Order and transaction records: Retained for 7 years in accordance with Indian accounting and tax laws.
Support communications: Retained for 2 years from the date of last interaction.
Website analytics data: Retained in anonymised form for up to 26 months.
Inactive accounts or data with no legal retention requirement: Deleted or anonymised upon request or after 3 years of inactivity.

You may request early deletion of your personal data by emailing contact@drafto.store. Deletion requests will be fulfilled within 30 days, subject to our legal retention obligations.

7. Your Rights

Under applicable Indian law and as a matter of our policy, you have the following rights regarding your personal data:

Right to access: You may request a copy of the personal data we hold about you.
Right to correction: You may request correction of inaccurate or incomplete data.
Right to deletion: You may request deletion of your personal data, subject to legal retention obligations.
Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.
Right to grievance redressal: You may raise a complaint with our Grievance Officer (see Section 11).

To exercise any of these rights, email contact@drafto.store with your name, email address, and a description of your request. We will respond within 48 hours and resolve within 30 days.

8. Data Security

We implement reasonable technical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction. These measures include:

HTTPS encryption on all pages of the Website
Access controls limiting who can view order and customer data internally
No storage of payment credentials on our servers
Use of RBI-regulated, PCI-DSS compliant payment infrastructure via Cashfree

Despite these measures, no method of data transmission or storage over the internet is 100% secure. In the unlikely event of a data breach that affects your personal information, we will notify you promptly as required by applicable law.

9. Children’s Privacy

Drafto Store is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected data from a minor, please contact us at contact@drafto.store and we will delete it promptly.

10. Third-Party Links

The Website may contain links to third-party websites, including Cashfree Payments and Google. We are not responsible for the privacy practices or content of those websites. We encourage you to review their respective privacy policies before providing any personal information.

11. Grievance Officer

In accordance with the Information Technology Act, 2000 and the Consumer Protection (E-Commerce) Rules, 2020, we have appointed a Grievance Officer to address privacy-related concerns:

Grievance Officer: Agilan, Orosfort Private Limited
Email: contact@drafto.store
Address: Chennai, Tamil Nadu, India
Response time: Within 48 hours of receipt
Resolution time: Within 30 days of complaint

If you are dissatisfied with our resolution, you may escalate your complaint to the National Consumer Helpline at 1800-11-4000 or approach the appropriate consumer forum under the Consumer Protection Act, 2019.

12. Amendments to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the “Last Updated” date at the top of this page. Continued use of the Website after changes are posted constitutes your acceptance of the revised policy.

13. Contact Us

For any questions, concerns, or requests related to this Privacy Policy or your personal data:
Email: contact@drafto.store
Business Hours: Monday – Saturday, 10:00 AM – 6:00 PM IST