Legal

Cookie
Policy

Effective date: [Effective date]

Draft — under legal review
This page is a working draft and has not yet been reviewed by a lawyer. Details shown highlighted in [brackets] are still to be filled in by the company.

Summary in simple words

  • We use a few small files (cookies / local storage) to keep you signed in and secure.
  • Analytics and marketing cookies are used only if you say yes in the cookie banner.
  • You can change your choice any time from "Cookie settings" in the footer.

1. What are cookies

Cookies and similar technologies (local storage, session storage) are small pieces of data stored on your device by a website.

2. What we use

CategoryPurposeExamples [FILL: engineering to confirm exact names]DurationConsent needed
Strictly necessarySign-in session and refresh token, security (CSRF on admin pages), load balancing, remembering your cookie choiceauth token (access ~30 min, refresh up to 14 days), csrftoken/sessionid (admin pages only), vanved_cookie_consentsession to 14 days; consent record 12 monthsNo
PreferencesLanguage, theme, last-used filters[FILL]up to 12 monthsYes
AnalyticsUnderstand which pages are used so we can improve[FILL: analytics tool, if any][FILL]Yes
MarketingMeasure campaigns, retargeting[FILL: if any; otherwise state "We do not use marketing cookies"][FILL]Yes

Tenant websites. Websites built with our site builder may add their own cookies (e.g. chat widget, forms, payment checkout from Razorpay/Cashfree, embedded maps/videos). Each Tenant is responsible for its own cookie notice for its visitors. The helpdesk chat widget stores a visitor token in the browser to continue a conversation.

3. Third-party cookies

Payment gateways (Razorpay, Cashfree) and Google sign-in may set cookies on their own pages under their policies.

4. Your choices

Use the cookie banner (Accept all / Reject non-essential / Customise), the "Cookie settings" footer link, or your browser settings. Blocking necessary cookies will stop sign-in from working. A withdrawal of consent is as easy as giving it, in line with the DPDP Act.

5. Do Not Track

We do not currently respond to browser Do Not Track signals.

6. Contact

[FILL: Grievance email] / [FILL: Support email].