Privacy Policy

Your intentions are personal. This Privacy Policy explains what information Common Light Collective (operated by ProHeal Tech) collects, why, and how we protect it. It is written with India’s Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 in mind.

1. Information we collect

• Your intention: the text you write, who it is for, and the category you choose.
• Contact details: your email address and, optionally, your name.
• Your preferences: whether you wish to remain anonymous and whether you permit your intention to be shared.
• Payment information: the amount and the order and payment references from Razorpay. Your card, UPI or bank details are collected directly by Razorpay; we never see or store them.
• Technical information: basic server logs (such as IP address and browser type) kept by our hosting provider for security and reliability.
• Usage information: how you use the website, collected through Google Analytics unless you opt out. See Cookies and analytics.

2. How we use it

• To include your intention in a collective ritual.
• To process your contribution and confirm your payment.
• To contact you about your intention or payment, if needed.
• To prevent fraud and keep the website secure.
• To understand how the website is used so we can improve it (you can opt out at any time).
• To meet legal, tax and accounting obligations.

We do not sell your personal data, and we do not use your intention for advertising.

3. Who can see your information

• Ritual practitioners: the people conducting a ritual may read or hold your intention. If you chose to remain anonymous, they will not see your name or email.
• Service providers: Razorpay (payments), Netlify (website hosting and data storage) and Google (website analytics, unless you opt out) process data on our behalf under their own security and privacy commitments. Data may be stored on servers outside India.
• Public sharing: only if you explicitly gave permission. You can withdraw it at any time.
• Legal requirements: where required by law or a valid order of a government authority or court.

4. How long we keep it

We keep your intention and contact details for as long as needed to hold your intention and respond to any questions, and in any case no longer than 24 months after your submission, unless you ask us to delete it sooner. Payment records are kept for the period required by Indian tax and accounting law.

5. Your rights

You may ask us to:

• access the personal data we hold about you;
• correct or update it;
• delete your intention and personal data (subject to records we must keep by law);
• withdraw consent you gave, such as permission to share your intention.

To make a request, email khuranasidharth007@gmail.com. We will respond within 30 days.

6. Cookies and analytics

We use Google Analytics 4 to understand how visitors use the website — for example, which pages are visited, where visitors come from, the type of device used, and how many people complete each step of submitting an intention. This helps us improve the Collective.

• Google Analytics is enabled by default. A notice on your first visit explains this, and you can opt out there or at any time afterwards. Once you opt out, no further analytics data is collected and our analytics cookies are removed.
• When enabled, Google Analytics sets cookies (named _ga and _ga_*) and processes information such as your approximate location, browser and pages viewed. Google may process this data outside India.
• We never send your intention, name or email address to Google Analytics. Google Signals and advertising personalisation are turned off.
• You can change your choice at any time using the Cookie settings link at the bottom of every page.

We do not use advertising cookies. Razorpay may set cookies needed to process a payment securely when the payment window is open.

7. Security

We use encrypted connections (HTTPS), restrict access to submitted intentions, and rely on established providers for payments and storage. No system is perfectly secure, but we take reasonable steps to protect your information.

8. Children

The Collective is not intended for anyone under 18 without the involvement of a parent or guardian. If you believe a child has submitted personal data without consent, please contact us and we will delete it.

9. Grievance Officer

If you have a concern about how your personal data is handled, please contact our Grievance Officer:

10. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.