Privacy Notice

1. Who is responsible for your data

Woher, trading as Woher in India, is the data controller for personal data processed to operate woher.in, deliver our digital products, and respond to support requests. Contact help@woher.in for privacy questions or requests. Paddle separately processes checkout and payment data under its own Privacy Policy.

2. Data we use and why

• Support information: your name, email address, order reference, messages, and attachments you choose to send. We use these to answer questions, resolve delivery problems, and assist with refunds, based on contract performance and our legitimate interest in providing support.
• Purchase and access information: transaction identifiers, payment status, the purchased product, and a purchase-specific access token. We use these to verify payment and provide download access, based on contract performance and our legitimate interest in preventing unauthorised access. We may receive relevant order information from Paddle when resolving a purchase or support request.
• Technical information: IP address, browser and device information, request details, and error or security logs processed by our hosting and delivery providers. These support website operation, troubleshooting, and fraud or abuse prevention, based on legitimate interests.
• Legal records: relevant purchase or correspondence information where needed to meet legal obligations or establish, exercise, or defend legal claims.

We do not receive or store your full payment card details. Paddle handles checkout details directly. The public store does not require a customer account or collect login passwords. We do not use purchase information for marketing without an appropriate legal basis; where consent is required, you may withdraw it at any time.

3. Who receives data

We share only information needed for the relevant purpose with:

• Hosting and technical service providers, including Lovable Cloud and its infrastructure providers, for website operation, delivery, diagnostics, and security.
• Paddle, our Merchant of Record, for product sales, payment processing, tax compliance, invoicing, and refund support. Our current bundle is a one-time purchase, not a subscription.
• Google Drive for hosting and serving download files. When you open the download folder, Google processes your visit under its own privacy terms.
• Lovable’s managed email service receives your checkout email address and purchase reference to send your purchased download link and handle delivery, bounces, complaints, and unsubscribe requests. Email and support service providers also process correspondence when you contact us; professional legal or accounting advisers receive information where necessary.
• Authorities where disclosure is required by law, or appropriate parties where necessary to protect legal rights and prevent fraud.

We do not sell your personal data. Providers may process data outside India; applicable legal safeguards and provider protections apply to those transfers.

4. Retention

We keep purchase-related records only as long as needed for delivery, refunds, support, and applicable tax or accounting obligations. Support correspondence is retained while an issue is active and for as long as reasonably necessary to resolve related disputes. Technical logs are retained only as needed for operational and security purposes, subject to provider retention settings. When information is no longer needed, we delete or anonymise it, except where a legal obligation requires retention.

5. Your privacy rights

Subject to applicable Indian data protection law and other laws that apply to you, you may request information about your personal data, access, correction, completion or updating, and erasure where permitted. You may withdraw consent for consent-based processing, raise a grievance, and exercise other applicable rights, including nomination where available under Indian law. Some records may need to be retained to meet legal obligations.

Email help@woher.in to make a request. We may need to verify your identity without collecting unnecessary information and will respond within the applicable legal timeframe. You may also raise a complaint with the relevant data protection authority where that right is available. For data controlled by Paddle or Google, contact that provider directly; we can help identify the appropriate recipient.

6. Security

We use appropriate technical and organisational measures, including encrypted connections, restricted administrative access, and purchase verification before displaying download access. No online system can guarantee absolute security. Keep your purchase confirmation link private because it contains an access token, and avoid sending sensitive data in support messages.

7. Cookies and similar technologies

Our website and its service providers may use essential cookies or browser storage for checkout, security, and service operation. Paddle’s checkout may use its own essential technologies, as explained in its privacy notice.

Woher uses Meta Pixel (ID 1418545769724005) for advertising measurement of page visits. Meta receives page URLs, cookie identifiers, IP address, and browser/device information, and may associate visits with your Meta account under its Privacy Policy. We do not enable customer matching, send purchase events, or share checkout email addresses with Meta. Purchase confirmation, private pages, and pages containing query parameters are excluded from this tracking.

In consent-required or unknown regions, Meta tracking stays off until you accept advertising cookies. Elsewhere it is enabled unless you reject or signal an applicable browser opt-out, including Global Privacy Control or Do Not Track. Use Cookie settings at the bottom of any page to accept, reject, or withdraw acceptance. Withdrawal takes effect immediately, including other open tabs, and previously blocked visits are not replayed.

We store your advertising choice on this browser with a random visitor reference, timestamps, and the notice and choices you were shown. Previous acceptance evidence is preserved when you later withdraw. Clearing site storage removes these local records. Meta’s own retention rules govern data already received; withdrawal stops future reporting but does not erase earlier data.

You can also manage or delete cookies and site storage through your browser settings. Blocking essential technologies may prevent checkout or delivery from working. Google Drive applies its own cookie and privacy settings when you visit its service.

8. Updates and contact

We may update this notice when our practices or legal requirements change. The effective date above identifies the current version. For questions, privacy rights, or complaints, contact Woher at help@woher.in.