Privacy Policy

This Privacy Policy explains how StarlinkVPS handles personal data when you visit starlinkvps.shop, create an account, or use our Services. We process personal data in accordance with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

1. Information we collect

• Account & billing information: name, email address, phone number, billing address, company name (if any).
• Verification information: where needed to prevent fraud, a copy of government-issued ID or other KYC details.
• Payment information: payments are processed by Razorpay and Cashfree. We receive only transaction details such as payment ID, amount, status and payment method type. We never receive or store your full card number, CVV, UPI PIN or net-banking credentials.
• Technical information: IP address, browser type, device information, login timestamps and usage logs.
• Support communications: the content of tickets, emails, chats and calls with us.
• Service data: files and data you store on our servers. We do not access this content except as needed to provide support at your request, maintain the Service, investigate abuse, or comply with law.

2. How we use your information

• To create and manage your account and provide, maintain and support the Services.
• To process payments, generate invoices and send renewal reminders.
• To send service-related notices (provisioning details, maintenance, security alerts, policy changes).
• To detect and prevent fraud, abuse, spam and security incidents.
• To comply with legal obligations, including requests from authorised government agencies under applicable law.
• To send promotional emails, only with your consent. You can unsubscribe at any time.

3. Legal basis

We process personal data on the basis of your consent and for legitimate uses permitted under the DPDP Act, 2023, including performance of the contract you entered into with us and compliance with law.

4. Sharing of information

We do not sell or rent your personal data. We share it only with:

• Payment gateways — Razorpay Software Pvt. Ltd. and Cashfree Payments India Pvt. Ltd., to process your payments under their own privacy policies.
• Infrastructure providers — data centres, network and email delivery providers that help us operate the Services.
• Authorities — law enforcement or government agencies when required by law, court order, or directions issued under the IT Act, 2000 (including CERT-In directions).
• Business transfers — a successor entity in case of a merger, acquisition or sale of assets, subject to this Policy.

5. Cookies

We use essential cookies to keep you logged in and secure your session, and may use analytics cookies to understand website usage. You can control cookies through your browser settings; disabling essential cookies may affect the client area.

6. Data retention

We retain account and billing records for as long as your account is active and thereafter as required for legal, tax and accounting purposes (generally up to 8 years). Server logs are retained as required by applicable CERT-In directions. Data stored on a terminated Service is deleted after termination and is not recoverable.

7. Data security

We use reasonable security practices including HTTPS/TLS encryption, hashed passwords, access controls, firewalls and regular updates. No method of transmission or storage is 100% secure, but we work to protect your data and will notify you and the relevant authorities of any personal data breach as required by law.

8. Your rights

Subject to applicable law, you have the right to:

• Access a summary of the personal data we hold about you;
• Request correction, completion or updating of inaccurate data;
• Request erasure of your data (subject to legal retention requirements);
• Withdraw consent at any time (this may affect our ability to provide the Services);
• Nominate another person to exercise your rights in case of death or incapacity;
• Raise a grievance with our Grievance Officer and, if unresolved, with the Data Protection Board of India.

To exercise these rights, email support@starlinkvps.shop.

9. Children

Our Services are not directed to persons under 18. We do not knowingly collect personal data from children.

10. International transfers

Some of our service providers may process data outside India. Where this happens, we ensure transfers are permitted under Indian law and protected by appropriate safeguards.

11. Grievance Officer

In accordance with the Information Technology Act, 2000 and rules made thereunder:

Grievance Officer, StarlinkVPS
Email: support@starlinkvps.shop (subject: "Grievance")
We acknowledge grievances within 48 hours and resolve them within 30 days.

12. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date above shows when it was last changed; material changes will be notified by email.

Contact

For any questions about this policy, contact us at support@starlinkvps.shop or open a ticket from the client area.