Privacy Policy

1. Overview & Scope

This Privacy Policy explains how CodeReplica ("Company", "we", "us", or "our"), operating the Web Dev Kit platform (https://webdevkit.codereplica.com) and browser extension, collects, uses, protects, and discloses your information when you visit our website, register an account, make payments, or use our developer extension.

We are committed to maintaining the highest standards of data protection and user privacy in compliance with applicable data protection laws, the Google Chrome Web Store User Data Policy, and Indian Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules.

2. Strict Zero-Log Architecture (Local Execution)

The Web Dev Kit browser extension operates 100% locally on your computer. We never monitor, log, capture, or transmit:

• Browsing History & URLs: We do not track or store the web pages or domains you visit.
• DOM & Page Source Code: Inspected HTML, CSS rules, and JavaScript structures remain solely in your local browser memory.
• Form Inputs, Passwords & Keystrokes: We never capture form inputs, credit card details, or authentication credentials on sites you browse.
• Visual Screenshots: All element screenshots and full-page canvas captures are rendered locally and saved directly to your local file system without ever being uploaded to remote servers.

3. Information We Collect

We collect only necessary information required to maintain your user account, validate software licenses, process payments, and provide customer support:

• Account Credentials: Name, registered email address, and securely hashed passwords (or OAuth profile IDs from Google/GitHub upon voluntary social login).
• Billing & Transaction Details: Order identifier, transaction reference ID, payment status, amount paid, currency (INR / USD), and timestamp. Note: All credit card numbers, net banking credentials, and UPI MPINs are handled directly by PCI-DSS certified payment gateways (Razorpay, Stripe). We never store or access your sensitive payment credentials.
• Device Slot Quota Identifiers: A pseudorandom alphanumeric string (device_hash) stored in extension storage to enforce your 5-device license limit. We do not access hardware serial numbers, MAC addresses, or personal file systems.
• Anonymous Usage Telemetry (Optional): High-level counts of features used (e.g. typography tool opened, screenshot captured) to diagnose stability issues. This telemetry never contains personal details or website URLs.

4. 1-Click Telemetry Opt-Out

You have full control over anonymous telemetry. You can turn off diagnostic metrics at any time directly in the extension:

5. Cookies & Local Browser Storage

We use essential session cookies and local browser storage to keep you authenticated on the web dashboard, remember your dark/light theme preferences, and store your encrypted Pro license token inside the extension. We do not use third-party cross-site tracking cookies.

6. Third-Party Service Providers

We may share minimal required data with trusted third-party service providers solely for core application operation:

• Razorpay: Secure payment processing for Indian and international customers (UPI, Cards, Net Banking). View Razorpay Privacy Policy.
• Stripe: Global credit/debit card processing.
• Transactional Mail Providers: For sending account verification links, password resets, and purchase invoices.

We never sell, rent, or trade your personal information to marketing or advertising networks.

7. Data Security & Retention

We implement robust technical and organizational measures, including HTTPS encryption in transit, bcrypt password hashing, and restricted database access controls. We retain account data for as long as your account remains active or as needed to comply with our legal and tax accounting obligations.

8. Your Rights & 1-Click Account Deletion

You have the right to access, update, export, or permanently delete your account and personal data. You can delete your account at any time directly from the Profile Settings tab of your user dashboard, which will permanently purge your credentials, active tokens, and device bindings from our database.

9. Grievance Officer & Contact Details

In accordance with the Information Technology Act 2000 and rules made thereunder, the contact details of the Grievance Officer for privacy and data-related concerns are provided below: