Privacy

Your enrolment PDF, your photo and every detail you type are processed inside your browser and stay on your device. We do not receive them, so we cannot store them, lose them or hand them over. What we do hold is a record of your payment, and nothing else.

The PDF is opened and read by code running in this browser tab. The card is drawn on a canvas in this browser tab. The download files are built in this browser tab. No file and no field is ever sent to our server. You can confirm this: open your browser's network tab and use the whole tool — the only requests to us are the three payment ones below.

What you type is saved in this browser's local storage so that a refresh or a back-press does not lose it. That copy sits on your device. Clearing the site data removes it.

For each payment we store: the Razorpay order id, the payment id, the amount, which path you used (uploaded PDF or typed), the payment status, a one-way hash of the mobile number you paid with (so download recovery can find the order), and the timestamps.

We do not store your name, your date of birth, your address, your land records, your photo, your Aadhaar number, or any part of your enrolment PDF. There is no field for them in our database.

The Aadhaar field takes the full twelve digits, and the card prints them in full. The number is optional: leave the field empty and the card simply does not carry that line.

Whatever you type stays on your device. It is held in the page while you work, saved to this browser's local storage as part of the draft so a refresh does not cost you the field, and drawn into the card file you download. It is never sent to our server, and our database has no field to put it in. The QR code on the card carries only the last four digits, so a scan does not hand over the whole number.

Clearing the site data removes the draft, and with it the number, from this browser.

Razorpay processes the payment and receives whatever you give their payment window, governed by their own privacy policy. Our hosting providers see standard web server logs such as IP address and timestamps, which are used for rate limiting and abuse prevention.

We do not use advertising trackers or third-party analytics.

Payment records are kept for 18 months, which covers tax, refund and chargeback requirements, and are then deleted. Download tokens expire 15 minutes after they are issued. Download recovery works for 24 hours after payment.

Under the Digital Personal Data Protection Act 2023 you may ask what we hold about you, ask for it to be corrected, and ask for it to be erased. Because the only thing we hold is a payment record tied to a payment id, quoting that id is the fastest route.

[Grievance officer — not yet set]
[Operator name — not yet set]
[Registered address — not yet set]
[Grievance email — not yet set]
[Grievance phone — not yet set]

We reply to grievances within 30 days, as the Act requires.