india macro.api

Privacy Policy

Last updated: 1 June 2026.

This Privacy Policy explains how Async Labs ("we", "us", "our") collects, uses, and protects information when you use the India Macro API service (the "Service"). We are committed to handling your data responsibly and only collecting what is necessary to operate the Service.

1. Information We Collect

Category	Examples	Why we collect it
Account info	Email address, password (hashed), full name, company name	To authenticate you, deliver the Service, and contact you about your account
API usage	Endpoints called, timestamps, API key prefix, response status	To enforce rate limits, prevent abuse, and provide usage analytics in your dashboard
Billing info	Razorpay customer ID, subscription tier, invoice history	To process payments and maintain a record of your subscription
Technical info	IP address (transient, in request logs), user agent	To detect abuse, debug issues, and improve the Service

We do not collect: financial data beyond what Razorpay returns to us (we never see your card number), location data, or any data beyond what is listed above.

2. How We Use Your Information

• Operate the Service — authentication, rate limiting, webhook delivery, dashboard analytics;
• Communicate — email verification, password reset, billing receipts, important Service updates;
• Comply with the law — respond to lawful requests by Indian authorities;
• Improve the Service — aggregated, anonymized usage stats inform what to build next.

We do not sell your data, share it with advertisers, or use it for marketing personalization.

3. Third-Party Services

To deliver the Service, we rely on these processors. Each has its own privacy policy:

• Supabase (PostgreSQL database hosting, EU region) — stores account and usage data;
• Digital Ocean (compute infrastructure, India region) — runs the API server;
• Razorpay (payment processing, India) — handles billing if you upgrade to a paid plan;
• Resend or equivalent (transactional email) — sends verification and password reset emails;
• Let's Encrypt (HTTPS certificates) — secures connections to the Service.

4. Data Retention

• Account data — kept for as long as your account exists, plus 30 days after deletion for backup recovery;
• Usage logs — kept for 365 days for analytics and abuse detection, then permanently deleted;
• Billing records — kept for 7 years to comply with Indian tax law (GST/Income Tax retention requirements).

5. Your Rights

You have the right to:

• Access the data we hold about you — your dashboard shows most of it; for anything else, email us;
• Correct inaccurate data — most fields are editable in the dashboard;
• Delete your account — this removes all personal data subject to legal retention exceptions above;
• Export a copy of your data in JSON form — email us;
• Withdraw consent for any optional data processing.

6. Security

We protect your data with:

• HTTPS for all client-server traffic (TLS 1.2+);
• Password hashing using bcrypt;
• API keys stored only as SHA-256 hashes — we cannot recover a lost plaintext key;
• Rate limiting and account lockout against brute-force attacks;
• Database encryption at rest via Supabase.

If a data breach occurs that affects your data, we will notify you by email within 72 hours of confirming the breach.

7. Cookies & Tracking

The Service uses only essential cookies/localStorage to keep you signed in. We do not use third-party analytics, advertising, or marketing tracking on our website or in the API.

8. Children's Data

The Service is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has signed up, email us and we will delete the account.

9. International Users

The Service is operated from India. By using it from outside India, you consent to your data being processed in India.

10. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be emailed to you and posted on this page at least 7 days before they take effect.

11. Contact & Data Protection Officer

For any privacy questions, data access requests, or to exercise any rights under this Policy, contact:

Ameesh Katariya
Founder, Async Labs
Email: ameeshkatariya@gmail.com