Privacy Policy

This policy explains what personal data Melto Designs, Pune, Maharashtra, India (“Melto Designs”, “we”) collects when you use meltodesigns online store and custom-print service, why we collect it, and the rights you have over it under India’s Digital Personal Data Protection Act, 2023 (DPDP Act). Under that law, we act as the Data Fiduciary for the data described here, and you are the Data Principal.

What we collect, and why

• Account details — your name, email address, and a password (stored only as a secure hash by our authentication provider), or your Google account email if you sign in with Google. Used to operate your account and order history.
• Addresses and phone number — the delivery addresses you save at checkout, including contact phone. Used to ship orders and for delivery-related contact.
• Orders and payment metadata — what you bought, amounts, and payment reference IDs from our payment processor. We never receive or store card numbers, UPI PINs, or banking credentials — payment entry happens entirely on Razorpay’s systems.
• Uploaded 3D model files — files you upload for a custom-print quote (STL, 3MF, STEP, OBJ). Stored in a private bucket, used only to quote and produce your print, never shared publicly or used to make items for anyone else.
• Loyalty points and testimonials — your points ledger, and any testimonial you choose to submit.
• Technical data — IP addresses in server logs and rate-limiting counters, kept to keep the site secure and abuse-free. Cookies are covered separately in the Cookie Policy.

We collect this data because it is needed to provide the service you ask for — selling and shipping physical goods and custom prints. We do not sell personal data, and we do not run third-party advertising or tracking on this site. To see which pages lead to orders, we count visits ourselves (product viewed, added to cart, checkout started, paid) without cookies: a visit is identified by a code derived from your IP address and browser that changes every day and cannot be turned back into either.

Emails we send

• Order and account emails (confirmations, shipping and delivery updates, quotes, password resets) — part of the service you asked for.
• Reminders — at most one note about items left in your cart, and one review request after a delivery. Every reminder has an unsubscribe link, and you can switch them off under My account → Details.
• Newsletter — only if you tick “New drops and offers” in your account. We record when you agreed, and you can withdraw at any time from the link in every newsletter.

Who we share data with

We share personal data only with the processors needed to run the store, each receiving only what their role requires:

• Razorpay — payment processing. Card and banking details are entered on and handled by Razorpay directly.
• Supabase — our database, authentication, and product photos, hosted in the Mumbai (ap-south-1) region.
• Cloudflare — hosts the website (requests pass through its global network), stores the 3D files you upload for custom prints and our database backups (R2), and forwards email sent to our @meltodesign.com addresses.
• Resend — sends our emails (order updates, reminders, and the newsletter if you opted in).
• Courier partners (via Shiprocket) — receive your name, address, and phone number to deliver your order.

Beyond these, we disclose personal data only if required by law or a lawful order of an Indian authority.

How long we keep it

• Account data — for as long as your account exists.
• Order and invoice records — retained after delivery for the periods Indian tax and accounting law requires, even if you delete your account.
• Uploaded model files — kept while your quote or order is active so we can support reprints; deleted on your request once no active order depends on them.

Your rights under the DPDP Act

• Access — ask for a summary of the personal data we hold about you and how it has been processed.
• Correction and erasure — have inaccurate data corrected, incomplete data completed, and data that is no longer needed erased (subject to the legal retention periods above).
• Withdraw consent — where processing rests on your consent, withdraw it at any time; we then stop that processing.
• Grievance redressal — raise a complaint with us using the contact below and receive a response.
• Nomination — nominate another person to exercise these rights for you if you die or are incapacitated.

To exercise any of these, email care@meltodesign.com from the address on your account. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

Children

Our store is not directed at children. We do not knowingly process the personal data of anyone under 18 without the verifiable consent of a parent or guardian, as the DPDP Act requires.

Grievance contact

Grievance Officer, Melto Designs — care@meltodesign.com. We acknowledge complaints within 48 hours and aim to resolve them within one month, in line with the Consumer Protection (E-Commerce) Rules, 2020.

Changes to this policy

If we change how we handle personal data — for example, adding an analytics tool — we will update this page and its “last updated” date before the change takes effect.