Privacy & Data Protection

Clear, transparent disclosures detailing the minimal customer information collected, how order tracking data is stored, and our strict non-disclosure commitments.

Internal Review DraftEffective Date: October 2026 (2026-v1-draft)

Business Information Gate Active — Pending Owner Statutory Disclosures

In compliance with the Consumer Protection (E-Commerce) Rules 2020, public commercial publication is restricted until registered legal entity name, geographic principal office address, and Grievance Redressal Officer details are supplied by the business owner.

StatusMp4 Data Privacy Protocol

Back to Cart

1. Principles of Data Minimization

At Digiproducts by StatusMp4, we collect only the minimal data strictly required to create your order, process and verify your payment, and deliver digital access credentials. We do not maintain marketing trackers, sell customer profiles, or disclose transaction details to advertisers.

2. Information We Collect

Order & Fulfillment Data

Email address (for order receipt and backup communication).
WhatsApp phone number OR Telegram username/ID (for credential delivery).
Purchased product items, plan tier, and selection timestamp.

Payment Verification Data

Payment method type selected (e.g., UPI Direct, Binance Pay, Bank NEFT).
Transaction reference / UTR submitted by the customer.
Payment proof screenshot image (stored temporarily in encrypted bucket for audit verification).
Client IP address and user-agent recorded for fraud prevention and rate limiting.

3. Payment Privacy & Sensitive Financial Data Protection

StatusMp4 never collects, processes, or stores customer credit card numbers, debit card CVVs, net-banking passwords, or UPI MPINs. When making a UPI Direct payment, you initiate the transfer directly within your preferred UPI mobile application (Google Pay, PhonePe, Paytm, BHIM, etc.). Only the settlement reference (UTR) is submitted to our store for manual cross-verification.

4. Order Tracking & Public Visibility Controls

Our public order tracking endpoints (/track-order) enforce strict data redaction:

Internal admin rejection notes and private reviewer logs are completely redacted.
Customer contact details (phone numbers and full email addresses) are masked.
Wholesale procurement source details, supplier pricing margins, and external vendor identities are never exposed in tracking views.

5. Data Retention & Security Controls

All payment session records, order tracking tokens, and communication logs are stored in PostgreSQL instances protected by 256-bit cryptographic encryption in transit and at rest. Delivered digital credentials (such as account passwords or license keys) are subject to automated credential retention policies: credentials expire from server storage after their warranty window closes.

6. Customer Privacy Inquiries & Data Deletion Desk

For data inquiries, access requests, or deletion of unlinked order records, contact our privacy desk:

Privacy Desk Email: [email protected]

Support Desk Telegram: @StatusMp4Support

Grievance / Data Protection Inquiries: Direct all data requests to the primary privacy desk pending formal statutory officer designation.