Privacy Policy — Data Protection & Privacy Rights

Our Privacy Commitment

Compliant with India's Digital Personal Data Protection (DPDP) Act 2023 & Global Privacy Principles.

At Lushai Dev, located in Lunglei, Mizoram, India, we believe transparency and user privacy are foundational engineering principles. This Privacy Policy outlines the types of information we collect, how it is used, and how we safeguard your personal and developer data across our websites, cloud subdomains, and developer APIs.

Zero-Knowledge Developer Tool Architecture

When using our free online tools (Universal Code Syntax Checker, Bcrypt Password Hasher, SQL Formatter, JSON Validator, and API Key Generator), your code, passwords, queries, and keys are processed entirely in memory or inside your web browser. We NEVER store, log, transmit, or retain your passwords or source code.

1. Information We Collect

We only collect minimal data necessary to fulfill technical services:

Contact Inquiries: When you submit a message via /contact, we collect your name, email address, message subject, and inquiry text to respond to your request.
API & Account Identifiers: Subdomain registrations store account emails and generated API access tokens.
Server Security & Diagnostics: Standard web server logs collect IP addresses, browser User-Agent strings, request timestamps, and request methods to detect and block malicious automated bot attacks.

2. How We Use Your Data

Your information is used strictly for legitimate technical purposes:

To provide, operate, and maintain high-speed developer REST API endpoints.
To authenticate API requests and enforce fair-use rate limits.
To dispatch automated transaction receipts and administrative notifications.
To protect our infrastructure against cyber attacks, spam bots, and unauthorized penetration attempts.

3. Data Security & Encryption Standards

We enforce rigorous security protocols across our entire software stack:

SSL / TLS 1.3: All communications between your client device and our servers are encrypted in transit.
Cryptographic Tokenization: Passwords and credentials use salted Bcrypt and Argon2 algorithms.
Multi-Layer Bot Protection: Invisible honeypots, cryptographic timestamp verification tokens, and strict HTTP header validation.
Server Hardening: All environmental secrets, configuration files, and databases are strictly shielded by Apache access rules.

4. Third-Party Services & Disclosures

We do not sell, trade, or rent personal information to marketing brokers. We only interface with trusted infrastructure service providers:

National Payments Corporation of India (NPCI) & UPI VPA Networks: For direct banking settlement routing on PhonePey.
WAPI & SMTP Gateways: For dispatching verified transaction alerts and administrative communications.
Cloud Infrastructure: High-performance Hostinger servers and database engines.

5. Your Rights Under DPDP Act 2023

Under Indian data protection laws and international standards, you hold the right to:

Access: Request a summary of personal information we maintain regarding your account.
Correction: Request rectification of any inaccurate or outdated information.
Erasure: Request permanent deletion of your contact inquiries or API credentials.
Grievance Redressal: File an inquiry or grievance directly with our Data Protection Officer.

6. Data Protection Officer & Grievance Contact

For privacy inquiries, data deletion requests, or DPDP Act compliance questions, contact our designated privacy officer:

Data Protection Officer: Privacy & Compliance Team
Official Email: support@lushai.dev
Physical Office: Lushai Dev, Lunglei, Mizoram, India — PIN 796701
Response SLA: Within 48 business hours.