Privacy Policy
1. Who we are
This website (patshi.in, “Patshi”, “we”, “us”) is operated by Patshi, located at Mumbai, Maharashtra. For any privacy question or request, contact us at aarindamraina@patshi.in.
For the purposes of applicable data-protection law — including India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”), and, where it applies, the EU/UK General Data Protection Regulation (“GDPR”/“UK GDPR”) — Patshi is the data fiduciary / controller responsible for your personal data.
2. What data we collect
Patshi is currently a waitlist. We collect only what we need for that purpose.
Data you give us (waitlist forms)
- Shopper form: email address (required); product interests (optional).
- Brand form: brand name, website, product category, approximate number of products (SKU range), and email address.
- Consent record: the fact that you ticked the consent box, and the timestamp of that consent.
Data collected automatically when you submit
- Hashed IP address — we store a one-way SHA-256 hash of your IP address, never the raw IP. It is used only to limit spam and abuse.
- Browser user-agent string (e.g. browser and operating system).
- Referrer (the page you arrived from) and landing path (the page you submitted from).
- UTM parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content) if present in the link you followed.
- Timestamp of your submission.
Data stored in your browser (local storage)
The following are stored on your own device using your browser’s local storage. They are not tracking cookies and are not transmitted to third parties:
| Key | Purpose |
|---|---|
patshi_waitlist | A local copy of your submission so it is never lost. |
patshi_waitlist_unsynced | Retry queue for submissions that failed to send, retried automatically. |
patshi_theme | Your light/dark appearance preference. |
patshi_motion | Your reduced-motion (animations on/off) preference. |
patshi_cookie_consent_v1 | Your cookie/analytics consent choice, if any non-essential provider is ever enabled. |
We do not knowingly collect data from children under the age of consent in your jurisdiction. Do not use Patshi if you are below that age.
3. Why we use your data (purposes)
- To operate the waitlist and to contact you about Patshi early access and related updates.
- To prevent spam, fraud, and abuse (hashed IP and rate-limiting).
- To keep an internal audit record of submissions.
- To understand, in aggregate, which campaigns bring people to the waitlist (UTM data).
4. Legal bases for processing
Where the GDPR / UK GDPR applies, we rely on:
- Consent — for adding you to the waitlist and contacting you about Patshi, and for any future analytics or marketing cookies (which are off by default).
- Legitimate interests — for spam prevention, security, and maintaining an audit log, balanced against your rights.
Where the DPDP Act applies, we process your personal data on the basis of the consent you provide when you submit a form, for the specified purposes above.
5. Who we share data with
We do not sell your personal data. We share it only with service providers that help us run the waitlist:
| Provider | Role | Notes |
|---|---|---|
| Turso (libSQL) | Database hosting for submissions | Stores the form data and hashed IP described above. |
| Vercel | Website & application hosting | Serves the site and processes requests; may log request metadata. |
Each provider processes data on our behalf under their own terms. We recommend reviewing and, where required, signing data-processing agreements with each provider.
6. International transfers
Our providers may store or process data outside your country (for example, in the region where the database or hosting is located). Where such transfers are subject to the GDPR/UK GDPR or the DPDP Act, we rely on the provider’s safeguards (such as standard contractual clauses or equivalent mechanisms). Confirm the exact hosting regions and safeguards with each provider — see aarindamraina@patshi.in.
7. How long we keep your data (retention)
We keep waitlist submissions for up to 36 months from the date of submission, or until you ask us to delete them, whichever is sooner. After that we delete or anonymise the data unless we are legally required to keep it longer. Local-storage entries remain on your own device until you clear them.
8. Your rights & how to exercise them
Depending on where you live, you may have the right to access, correct, delete, or port your data, to withdraw consent, or to object to certain processing.
- To request deletion or a copy of your data, email aarindamraina@patshi.in from the address you signed up with. We will verify and action your request within the time required by applicable law.
- To clear the data stored in your own browser, see our Cookie & Tracking Policy.
- If you believe we have mishandled your data, you may complain to your local data-protection authority (for example, in India, the Data Protection Board once operational; in the EU/UK, your national authority).
9. Security
We apply reasonable technical and organisational measures: IP addresses are stored only as one-way SHA-256 hashes, transport is over HTTPS, admin access is password-protected and limited, and access to the database is restricted. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
10. Changes to this policy
We may update this policy from time to time. We will change the “Last updated” date above and, where required, notify you.
11. Contact
Patshi
Mumbai, Maharashtra
Email: aarindamraina@patshi.in