Privacy policy

This explains what data SKAVON actually collects, why, and what you can do about it.

What we collect

• Account information - your email address and a hashed password (SKAVON never stores your password in plain text).
• Domain registrant information - if you register a domain, the contact details (name, address, email, phone) required by the registry, submitted to our upstream registrar to complete registration.
• Payment references - Razorpay order and payment identifiers, and the amount/currency of each transaction. SKAVON does not receive or store your card, UPI, or bank account details - Razorpay handles those directly.
• Monitoring data - for websites you add to SKAVON Care, the results of periodic checks (availability, SSL certificate details, DNS records, security headers) that SKAVON runs against the URLs you provide.
• Session and security data - a session token stored in an httpOnly cookie, and, for login/signup attempts, the IP address and browser user-agent string, used only to rate-limit abusive login/signup attempts.
• Support communications - anything you send us via email or the contact form.

What we do not collect (yet)

SKAVON does not currently run any analytics or advertising tracking on this site. If that changes, this policy and the Cookie policy will be updated first, not after.

Why we collect it

To create and secure your account, to complete domain registrations with the registry (this data is legally required for that, not optional), to process payments, to run the monitoring you've asked for, and to respond to support requests.

Retention

Account and order data is kept for as long as your account is active and as needed for legitimate business records (e.g. transaction history) afterward. Monitoring check history is retained to power trend/history views in your dashboard and is not kept indefinitely beyond what's needed for that.

Third-party processors

• Razorpay - payment processing. See Razorpay's privacy policy.
• Our accredited domain registration backend - the infrastructure SKAVON uses to register and manage domains. Registrant contact information you provide is submitted to them (and, in turn, to the relevant domain registry) as required to complete registration.

Security

Passwords are hashed (never stored in plain text). Sensitive provider credentials are encrypted at rest. Payment webhook and callback signatures are cryptographically verified before any order is marked paid.

Your rights

You can request a copy of the data SKAVON holds about you, ask us to correct it, or ask us to delete your account and associated data (subject to what SKAVON is required to retain for active domain registrations or legal/financial record-keeping) by emailing privacy@skavon.in.

Compliance certifications

SKAVON does not currently hold formal compliance certifications (e.g. ISO 27001, SOC 2). We won't claim one we don't have.

Contact

Questions about this policy: privacy@skavon.in.