This explains what data SKAVON actually collects, why, and what you can do about it.
What we collect
- Account information - your email address and a hashed password (SKAVON never stores your password in plain text).
- Domain registrant information - if you register a domain, the contact details (name, address, email, phone) required by the registry, submitted to our upstream registrar to complete registration.
- Payment references - Razorpay order and payment identifiers, and the amount/currency of each transaction. SKAVON does not receive or store your card, UPI, or bank account details - Razorpay handles those directly.
- Monitoring data - for websites you add to SKAVON Care, the results of periodic checks (availability, SSL certificate details, DNS records, security headers) that SKAVON runs against the URLs you provide.
- Session and security data - a session token stored in an httpOnly cookie, and, for login/signup attempts, the IP address and browser user-agent string, used only to rate-limit abusive login/signup attempts.
- Support communications - anything you send us via email or the contact form.
- Product usage data - which product steps a visit reaches (for example, a domain search or a completed purchase), tied to a random, first-party identifier with no personal information encoded in it, never a precise identity. See the Cookie policy for the exact cookie.
- Where you came from - only if you accept the cookie banner: the website or campaign link that brought you to SKAVON, stored with your account when you sign up so we can tell which channels are worth running. If you decline cookies this is not recorded.
- Reviews - if you choose to write one, the rating, text and display name you provide. Reviews are shown publicly only after we approve them, and are deleted if you delete your account.
- Free tool reports - if you ask for a report by email from one of our free tools, your email address, the domain you checked, the findings, and a record of your consent. We email you a confirmation link first and send nothing else until you click it. Every email carries an unsubscribe link.
- Business Page data - the content and pictures you put on your page (pictures are re-encoded on upload, which removes location data from phone photos), and a daily count of visits and button taps for your page. The counts include no IP address, cookie or other identifier. If you switch on the contact form, a message a visitor sends (their name, the phone number or email they give, and their message) is emailed to you and shown in your dashboard; we keep it for 90 days and then delete it. The page owner is responsible for how they use those details.
- Privacy kit records - if you use the privacy kit for your own business, the answers you give, and any requests or breaches you log (which can include the name and contact details of your own customers). We keep them only so you can use the tool, never read them for any other purpose, and they are deleted when you delete the entry or your account. You remain responsible for the personal data of your own customers.
- WhatsApp and monthly reports - if you turn on WhatsApp alerts for SKAVON Care, your mobile number, the consent wording you agreed to and when, and the delivery of each message. We confirm the number with a one-time code first and stop the moment you reply STOP or turn it off. The monthly Care report is built from the monitoring results we already hold and is emailed to you; a copy is kept so you can read it again. Messages are sent through Meta's WhatsApp Business Platform, which is a processor of that number and message.
- Automatic renewal - if you turn on automatic domain renewal, the identifiers of the recurring payment authorization with Razorpay and the amount you agreed to. We never receive your card or UPI details.
What we do not collect
SKAVON does not use any third-party analytics or advertising service. No tracking pixel, no ad cookie, and no data shared with or sold to a third party for marketing purposes.
Why we collect it
To create and secure your account, to complete domain registrations with the registry (this data is legally required for that, not optional), to process payments, to run the monitoring you've asked for, and to respond to support requests.
Retention
Account and order data is kept for as long as your account is active and as needed for legitimate business records (e.g. transaction history) afterward. Monitoring check history is retained to power trend/history views in your dashboard and is not kept indefinitely beyond what's needed for that. A free-tool report request that you never confirm is deleted after 30 days; once you unsubscribe, we keep only the address and the fact that you unsubscribed, so that we never email you again. Contact-form messages sent to a Business Page are deleted after 90 days.
Third-party processors
- Meta (WhatsApp Business Platform) - only if you turn on WhatsApp alerts: delivers the messages to your number. See WhatsApp's privacy policy.
- Razorpay - payment processing. See Razorpay's privacy policy.
- Our accredited domain registration backend - the infrastructure SKAVON uses to register and manage domains. Registrant contact information you provide is submitted to them (and, in turn, to the relevant domain registry) as required to complete registration.
Security
Passwords are hashed (never stored in plain text). Sensitive provider credentials are encrypted at rest. Payment webhook and callback signatures are cryptographically verified before any order is marked paid.
Your rights
You can request a copy of the data SKAVON holds about you, ask us to correct it, or ask us to delete your account and associated data (subject to what SKAVON is required to retain for active domain registrations or legal/financial record-keeping) by emailing privacy@skavon.in.
Compliance certifications
SKAVON does not currently hold formal compliance certifications (e.g. ISO 27001, SOC 2). We won't claim one we don't have.
Contact
Questions about this policy: privacy@skavon.in.