Privacy Policy
At SortedPanda.com ("we", "our", or "us"), we believe packing for college hostel move-ins, group trips, and vacations should be stress-free, collaborative, and completely transparent. We are committed to protecting your personal information and your right to privacy.
This Privacy Policy explains what information we collect, how we use it, how we secure it, and your legal rights regarding your personal data when you visit our website or use our cloud-synced packing workspace service at https://sortedpanda.com.
1. Information We Collect
We collect information necessary to provision your account, deliver real-time packing synchronization across devices, and manage subscription passes:
-
Authentication & Profile Data: When you log in via Google Sign-In or create an account, we collect your email address, display name, and profile picture URL (managed via Google Firebase Authentication).
-
User-Generated Packing Data: We store the packing routine titles, trip destinations, custom item names, quantities, and completion statuses created within your workspaces.
-
Collaborator Emails: When you invite family members or roommates to collaborate on a workspace, we store their email addresses to grant access permissions.
When entering third-party email addresses (e.g., inviting family or roommates), you confirm that you have explicit permission from those individuals to share their email addresses with SortedPanda.com for workspace collaboration.
2. How We Use Your Information
We process your data strictly to deliver our core product services:
- Provisioning and maintaining real-time Firestore cloud synchronization across your authorized devices.
- Displaying live "Packed by [Member]" badges to keep families synchronized.
- Enforcing subscription tier limits (Solo, Family, Lifetime) and feature access control.
- Sending service-related notifications and account security updates.
3. Payment Processing & Financial Security
SortedPanda.com does NOT collect, store, or process credit card numbers, debit card details, net banking credentials, or UPI PINs.
All transactions are securely handled by our PCI-DSS Level 1 compliant third-party payment partner, Razorpay Software Private Limited. When you purchase a Packing Pass, your sensitive financial information is encrypted and transmitted directly to Razorpay. We only receive and store the resulting razorpay_payment_id, order status, and subscription tier.
4. Third-Party Infrastructure
We rely on trusted enterprise infrastructure providers to host and secure our platform:
Google Firebase / Firestore
Encrypted NoSQL cloud database hosting real-time workspace state and user profile records.
Razorpay Payment Gateway
PCI-DSS compliant payment processing for UPI, cards, and net banking orders in India.
5. Data Security Measures
We enforce strict security controls to protect your data against unauthorized access, loss, or disclosure:
- Firestore Security Rules & Admin Backend: Workspace reads and updates are restricted exclusively to authorized email addresses stored in the workspace record.
- HTTPS SSL Encryption: All client-to-server traffic is encrypted using TLS 1.3 encryption.
- Server-Side Admin API Verification: Collaborator invitations and workspace deletions are processed via secure server-side PHP endpoints using Firebase Service Account keys.
6. Your Rights (DPDP Act & GDPR Alignment)
Under India's Digital Personal Data Protection (DPDP) Act 2023 and international privacy frameworks like GDPR, you possess full control over your personal data:
Right to Access & Rectify
You can view and modify your packing routines, item lists, and collaborator settings at any time directly within your dashboard.
Right to Eradication & Deletion
You can delete individual workspaces or remove collaborator emails directly in the app. To request full account deletion, contact our Data Privacy Officer.
7. Contact Us
If you have questions, feedback, or data deletion requests regarding this Privacy Policy, please reach out to us at: