Privacy policy

Who is responsible for your information

Abir Sarkar, an individual and independent author operating Goholic, is the seller and data controller. Contact webdev.abir@gmail.com, call +91 9792777487, or write to Brahmapur, Bansdroni, Kolkata - 700070.

Information collected

For an order, Goholic collects the buyer email, internal order reference, product, price, currency, payment status and references returned by Razorpay, access and delivery state, download counters, timestamps, and security/diagnostic data needed to prevent abuse. Goholic does not collect or store full card numbers, CVVs, UPI PINs, OTPs, or payment-instrument credentials.

Why it is used

The information is used to create and verify orders, provide and restore downloads, prevent duplicate fulfilment and abuse, answer support and refund requests, reconcile payment events, maintain records, and meet applicable legal obligations.

Service providers

Razorpay processes payment information under its own privacy terms. Google Firebase provides hosting, server functions, database, authentication, abuse protection, and private file storage. Data may be processed by these providers under their terms and configured regions.

Cookies and local storage

The checkout flow uses browser session storage to keep a random order-access token in the same browser long enough to check payment and download the purchase. It is cleared when the browser session ends. No advertising cookies or analytics are planned at launch; this statement must be updated before either is added.

Security and retention

Access is restricted by server-side authorization, Firebase rules, secret storage, encrypted transport, and payment/webhook signature checks. No online system is risk-free. Records are kept only for as long as reasonably needed for delivery, support, accounting, fraud prevention, disputes, and applicable legal obligations, then deleted or anonymised where appropriate.

Your requests

Email webdev.abir@gmail.com to ask about access, correction, deletion, a complaint, or other rights that apply. Some transaction records may need to be retained for legal, accounting, fraud-prevention, or dispute purposes.