Privacy policy

How we collect, use and protect your information, and the choices you have.

This Privacy Policy was last updated on 7 November 2026.

The highlighted text gives a plain English summary of each section. It's only a summary and doesn't capture every term, so please read the main text as well.

What this policy covers

BITCODER ("we" or "us") operates the CandorVites store (the "Store"). This Privacy Policy explains how we collect, use, disclose and protect personal information when you visit the Store, buy from it, sign in to it or contact us, and the choices you have about that information. We decide why and how your personal information is used. If you don't want your information handled as this policy describes, please don't use the Store.

Summary: This policy explains what we collect about you, what we do with it, and the choices you have.

1. Information we collect

(a) Information you give us

Email address: when you check out, sign in or create an account.
State: when you choose it at checkout.
Name and profile photo: only if you provide them or sign in with Google. They appear on your account page and aren't visible to other customers.
Password: only if you create one. It's stored as a secure hash, and we can't read it.
Messages: when you contact us, including anything you choose to include.

We don't ask for your postal address.

Summary: We collect only what you give us at checkout, in your account or when you write to us.

(b) Information we receive from Google

If you sign in with Google, Google provides your email address, its verification status, your name and photo, any organization domain, and an account identifier that we use to authenticate you and connect your orders to your account. If your account has no name or photo, we copy them once, and you can change or remove them at any time. We never receive your Google password.

Summary: If you choose Google sign-in, Google shares your basic profile with us, but never your password.

(c) Information created when you use the Store

Order information: the product, license, amount, date and order status.
Payment information: the result of your payment and a payment reference. Our payment provider collects your card, UPI or bank details on its own page, under its own privacy policy, and we don't receive those details.
Sign-in information: one-time sign-in codes and sign-in sessions.

Summary: We keep a record of your orders and sign-ins. We never see your card or bank details.

(d) Log file information

When your browser requests a page, our server automatically records technical information such as your IP address, the page you asked for and the time of the request.

Summary: Your browser sends us some technical details whenever you load a page, and our server logs them.

(e) Usage information

If you accept analytics cookies, Google Analytics collects information on public pages about the pages you view, your general location, your device and your browser. It isn't used on account or order pages.

Summary: We measure how public pages are used only if you say yes to analytics cookies.

(f) Location information

We infer your approximate country from your IP address, using a database on our own server. We don't send your IP address to an outside service for this purpose, or store it for this purpose. We don't work out your precise location.

Summary: We use your IP address to work out your country, and nothing more precise.

2. How we use your information

We use your information to:

deliver your order, and email your order link and invoice;
work out GST and the place of supply on your invoice;
issue refunds and keep business and tax records;
sign you in, so you can see your orders and manage your account;
answer your messages and fix problems;
understand how public pages are used, if you accept analytics cookies;
show designs suited to your country first;
keep the Store secure and working, and investigate misuse and faults; and
comply with the law.

Summary: We use your information to run the Store, deliver what you buy and meet our legal duties.

3. Sharing your information

We share information only where we need to in order to run the Store:

Our payment provider, for payments and refunds.
Resend, which sends our emails for us.
Google, for sign-in. Google provides the sign-in button, so your browser connects to Google when you open our sign-in page, whether or not you use the button.
Google Analytics, which processes usage information for us, only if you accept analytics cookies.
Authorities, accountants and lawyers, where the law requires it or where we need advice.

We don't sell your information.

Summary: Only the companies that help us run the Store see your information. We never sell it.

4. Cookies and advertising

Sign-in: a necessary cookie keeps you signed in. It expires after a set time or when you sign out.
Google sign-in: a temporary security cookie protects this process for up to 10 minutes. Google's button may also set its own cookies.
Payments: our payment provider's checkout may set its own cookies when you pay.
Analytics: Google Analytics cookies are used only with your consent. You can change your choice at any time through Cookie settings at the bottom of the page.

We don't show ads on the Store.

Summary: Some cookies are needed for the Store to work. Analytics cookies are your choice, and we show no ads.

5. How we store and transfer your information

The Store runs on a server we operate. The providers named in section 3 may process information in other countries, under their own terms and safeguards.

Summary: Your information sits on our server, and our providers may handle it outside your country.

6. Keeping your information safe

Our connections use https, and passwords, sign-in codes and order links are stored only as hashes. No system is perfectly safe. If a breach affects your information, we'll tell you and the authorities as the law requires.

Summary: We take care to protect your information, and we'll tell you if a breach affects it.

7. Your choices about your information

You can ask us to show you what we hold about you, correct it, delete what we aren't required to keep, or withdraw your consent. You can delete your account yourself after signing in. Orders and tax documents remain, because we must keep business records. India's Digital Personal Data Protection Act 2023 also lets you complain to us first and then to the Data Protection Board of India, and name another person to act for you if you die or can't act. Write to support@candorvites.com. We reply within 30 days.

Summary: You can see, correct or delete your information, except records the law makes us keep.

8. How long we keep your information

Order and invoice records: for the period the law requires for tax records.
Account information, including your name, photo, password and Google connection: until you delete your account.
Sign-in codes: a few minutes.
Analytics information: up to 14 months.
Support messages: 2 years after the last message.
Server logs: 1 year, to detect and investigate misuse and breaches.

Summary: We keep information only as long as we need it or the law requires.

9. Children

The Store is for adults. We don't knowingly sell to anyone under 18, and we don't collect their information on purpose. If you think a child gave us information, please write to us.

Summary: The Store isn't meant for anyone under 18.

10. Links to other websites and services

The Store links to services we don't control, such as our payment provider, Google and Canva. Their own privacy policies apply when you use them.

Summary: Other services have their own privacy policies.

11. Changes to this policy

We'll update this page and its date if we change how we use your information.

Summary: Check the date at the top to see when this policy last changed.

12. How to contact us

For any question or complaint about this policy, or about your data, write to support@candorvites.com.

Seller: BITCODER, Surat, Gujarat, India. GSTIN 24FUSPM4006D1ZP. Version of 7 November 2026.