Privacy Policy

Welcome to LoginPosts ("we", "our", or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit https://loginposts.com or use our API services. Please read this policy carefully.

1. Information We Collect

1.1 Personal Information

When you register or interact with our platform, we may collect:

• Full name and email address
• Password (stored encrypted using bcrypt)
• Billing and payment information (processed by Razorpay — we do not store card details)
• Company name (optional)

1.2 Usage Data

We automatically collect information when you use our services:

• IP address and browser information
• API request logs (endpoint, timestamp, response code)
• Pages visited and time spent on our platform
• Device type and operating system

1.3 Cookies

We use cookies for session management, analytics, and improving your experience. See our Cookie Policy for full details.

2. How We Use Your Information

We use the collected information to:

• Provide, operate, and improve our API services
• Process transactions and send billing notifications
• Respond to support queries
• Send service updates, security alerts, and account notifications
• Monitor and enforce our Terms of Service
• Comply with applicable legal obligations
• Analyse usage patterns to improve performance

3. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contract performance: To deliver the API services you subscribed to
• Legitimate interests: For platform security, fraud prevention, and service improvement
• Legal compliance: To fulfil obligations under Indian and applicable international law
• Consent: For marketing communications (you may withdraw at any time)

4. Data Sharing

We do not sell your personal data. We may share it only with:

• Payment processors: Razorpay, for transaction processing
• Email services: For transactional and notification emails
• Analytics providers: For anonymised usage statistics
• Law enforcement: When required by law or court order

5. Data Retention

We retain your personal data for as long as your account is active, plus an additional period as required by law. API request logs are retained for 90 days. You may request deletion at any time (see Your Rights below).

6. Your Rights

Under applicable law (DPDP Act 2023, GDPR), you have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request erasure of your personal data ("right to be forgotten")
• Data portability: Receive your data in a structured, machine-readable format
• Withdraw consent: Opt out of marketing communications at any time
• Lodge a complaint: With the relevant data protection authority

To exercise any of these rights, contact us at privacy@loginposts.com.

7. Data Security

We implement industry-standard security measures including:

• HTTPS / TLS encryption for all data in transit
• Encrypted passwords (bcrypt)
• API key authentication with rate limiting
• Regular security audits and vulnerability assessments
• Access controls and least-privilege principles

8. International Data Transfers

Our servers are located in India. If you access our services from outside India, your data may be transferred to and processed in India. We ensure appropriate safeguards are in place.

9. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on our platform. The "Last Updated" date at the top reflects the most recent revision.

11. Contact Us

For privacy-related queries or to exercise your rights, contact:

• Email: privacy@loginposts.com
• Address: LoginPosts, India