Privacy Policy

Last updated: September 2026

1. Information We Collect

Account Information

When you create a Digi Nepal account, we collect:

• Name — to identify you and personalize your experience
• Email address — for account access, order updates, and password recovery
• Password — stored securely using bcrypt hashing (we never store plain text passwords)

Order and Payment Information

When you place an order, we collect:

• Product selection and order details
• Payment method used (eSewa, Khalti, bank transfer, etc.)
• Transaction reference ID
• Phone number (optional, for order support)
• Payment receipt image
• Additional notes you provide

Automatically Collected Data

When you visit our site, we may automatically collect:

• IP address (for security and rate limiting)
• Browser type and version
• Session data (stored securely on the server)

2. How We Use Your Information

We use your information to:

• Create and manage your account
• Process and track your subscription orders
• Verify payment receipts and complete orders
• Send order status updates
• Provide customer support
• Protect against fraud and unauthorized access
• Improve our service

3. Data Security

We implement industry-standard security measures to protect your data:

• Password hashing — bcrypt with 12 rounds of salting
• Session security — HTTP-only, secure cookies with automatic expiry
• CSRF protection — synchronized tokens on all state-changing requests
• Two-step verification — optional TOTP-based MFA for your account
• Content Security Policy — strict CSP headers to prevent XSS
• Rate limiting — protection against brute force attacks

4. Data Sharing

We do not sell, rent, or share your personal information with third parties except:

• When required by applicable law or legal process
• To protect the rights and safety of Digi Nepal, our users, or the public
• With your explicit consent

5. Data Retention

We retain your account data for as long as your account is active. Order records and payment receipts are kept for a reasonable period for dispute resolution and accounting purposes. You can request deletion of your account by contacting our support team.

6. Cookies and Sessions

We use secure, HTTP-only session cookies to maintain your login state. We do not use tracking cookies, advertising pixels, or third-party analytics services. Your session automatically expires after a period of inactivity for security.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Withdraw consent for optional data processing

To exercise these rights, contact us at our contact page.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through our platform. Continued use of Digi Nepal after changes constitutes acceptance of the updated policy.

9. Contact

For privacy-related inquiries, please visit our contact page or reach out through WhatsApp.