Privacy Policy
On this page
1. Introduction
Welcome to ChiefEngineer.in ("we", "our", "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website chiefengineer.in and use our services — including calculators, templates, standards references, and B2B engineering solutions.
By using our website, you agree to the practices described in this policy. If you do not agree, please discontinue use of the site.
2. Information we collect
2.1 Information you provide directly
- Account information: Name, email address, and password (hashed) when you register.
- Profile details: Phone, company, city, and LinkedIn URL if you choose to add them.
- Google Sign-In: If you sign in via Google, we receive your Google ID, name, email, and profile picture.
- Contact form / support messages: Name, email, phone, subject, and message content.
- Orders: Items purchased, amount, and transaction status (payment is processed by third-party gateways — we don't store card details).
2.2 Information collected automatically
- Usage data: Pages visited, timestamps, referring URLs, and time spent on pages.
- Device data: Browser type, operating system, screen size, and language.
- IP address: Logged for security, analytics, and abuse prevention.
- Session data: Cookies and session identifiers to keep you logged in.
3. How we use your information
We use collected information for the following purposes:
- To create and manage your account, and authenticate your login.
- To provide access to free and paid templates, calculators, and content.
- To process orders and deliver purchased digital products.
- To respond to contact form submissions, support tickets, and B2B enquiries.
- To improve the website, analyse traffic patterns, and fix issues.
- To send transactional emails (order confirmations, password resets).
- To detect and prevent fraud, abuse, and security threats.
- To comply with legal obligations.
4. Cookies & tracking
We use cookies and similar technologies for:
- Essential cookies: Session management, login state, CSRF protection.
- Analytics: Aggregate page-view tracking to understand site usage (e.g., page_views table).
- Google Sign-In: Google's GSI script may set cookies for authentication.
You can disable cookies in your browser settings, but some parts of the site (login, cart) may not function properly.
5. Third-party sharing
We do not sell, trade, or rent your personal information. We may share data with:
- Google: For authentication (Google Sign-In) and analytics if enabled.
- Payment processors: Razorpay or similar gateways for order payments (they handle card data securely).
- Email service providers: For transactional emails (verification, order receipts).
- Hosting providers: Our servers store data as part of normal site operations.
- Law enforcement: If required by law or to protect our rights.
6. Data security
We use industry-standard measures to protect your data:
- Passwords are hashed using bcrypt — we never store plain-text passwords.
- HTTPS/TLS encryption for all traffic.
- CSRF protection on all forms.
- Session security — regenerated on login, timeout protection.
- Access controls — only authorised admins can view user data.
No method of transmission or storage is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security.
7. Your rights
Depending on your location (e.g., GDPR in EU, DPDP Act in India), you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data (via My Profile page).
- Delete your account and associated data.
- Object to processing of your data.
- Export your data in a machine-readable format.
- Withdraw consent for cookies or marketing communications.
To exercise these rights, email us at [email protected]. We'll respond within 30 days.
8. Data retention
We keep your data only as long as necessary:
- Account data: Until you delete your account (or 3 years of inactivity).
- Orders: 7 years (tax/legal compliance).
- Contact messages: 2 years.
- Analytics (page views): 12 months, then purged.
- Server logs: 30–90 days.
9. Children's privacy
ChiefEngineer.in is not intended for children under 13. We do not knowingly collect personal information from children. If you believe we have collected data from a child, contact us immediately.
10. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect the latest revision. Continued use of the site after changes means you accept the updated policy.
11. Contact us
For privacy-related questions, contact:
- Email: [email protected]
- Website: Contact form