Privacy Policy

Last updated: May 29, 2026

This Privacy Policy explains how Indpotato Private Limited ("we", "us", "our"), which operates the Potatopedia platform at www.potatopedia.com, collects, uses, discloses and protects your information when you use our website and services. We are committed to handling your personal data responsibly and in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 and rules thereunder.

1. Who we are

The website www.potatopedia.com and the Potatopedia service are owned and operated by Indpotato Private Limited, a company incorporated in India (CIN: U82990PN2024PTC234228). For the purposes of the DPDP Act, we act as the Data Fiduciary in respect of personal data processed through the platform.

2. Information we collect

We collect the following categories of information:

• Information you provide. When you contact us, submit feedback, subscribe to a paid plan, or create an account (where applicable), we may collect your name, email address, phone number and related details.
• Questions and queries. The questions you submit to our AI-powered answer service and the content of your interactions with the platform.
• Payment information. If you make a payment, the transaction is processed by our payment partner (Razorpay). We do not collect or store your full card number, CVV, UPI PIN, net-banking credentials or bank account details on our servers. See Section 5.
• Usage and device data. Aggregated, largely anonymous analytics such as pages visited, approximate region, browser type and referral source, collected via Google Analytics and Plausible Analytics.
• Cookies and similar technologies. See Section 6.

3. How we use your information

We use the information we collect to:

• provide, operate, maintain and improve the Potatopedia platform and generate answers to your queries;
• process subscriptions, payments, invoices and refunds;
• respond to your enquiries, feedback and support requests;
• understand usage patterns and improve content, features and accuracy;
• detect, prevent and address fraud, abuse, security issues and technical problems; and
• comply with applicable legal and regulatory obligations.

4. AI processing and service providers

Potatopedia is an AI-powered knowledge platform. To generate answers, the questions you submit may be processed by third-party large-language-model and embedding providers acting as our processors. We share only what is necessary to provide the service and instruct such providers to use the data solely for that purpose. We do not sell your personal data to anyone.

5. Payments and Razorpay

Online payments on Potatopedia are handled by Razorpay Software Private Limited, a payment aggregator authorised by the Reserve Bank of India. When you pay, your payment-instrument details are collected and processed directly by Razorpay on its PCI-DSS compliant infrastructure and are governed by Razorpay's own privacy policy and terms. We receive only limited transaction information (such as a payment reference, status and amount) needed to confirm and reconcile your order. You can review Razorpay's policies at razorpay.com/privacy.

6. Cookies and analytics

We use cookies and similar technologies to keep the site working, to remember your preferences and to understand how the platform is used. We use Google Analytics and Plausible Analytics to measure traffic in aggregate (Plausible is cookie-free; Google Analytics may set cookies). You can control cookies through your browser settings; disabling some cookies may affect site functionality.

7. How we share information

We may share your information only:

• with service providers and processors (e.g. hosting, payment, analytics, AI providers) who support our operations under appropriate confidentiality obligations;
• where required to comply with law, legal process, or a lawful request by a public authority;
• to protect the rights, property or safety of Indpotato Private Limited, our users or others, including fraud prevention; and
• in connection with a merger, acquisition or sale of assets, subject to this Policy.

8. Data retention

We retain personal data only for as long as necessary for the purposes described in this Policy, to comply with our legal, accounting or reporting obligations, or to resolve disputes. When data is no longer required, we delete or anonymise it.

9. Data security

We implement reasonable technical and organisational security practices designed to protect personal data against unauthorised access, alteration, disclosure or destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your rights

Subject to applicable law, including the DPDP Act, you have the right to access, correct, update and erase your personal data, to withdraw consent, and to nominate another individual to exercise your rights in the event of death or incapacity. To exercise any of these rights, or to raise a grievance, contact our Grievance Officer using the details in Section 14.

11. Children

Our services are not directed to children under the age of 18, and we do not knowingly collect personal data from children without verifiable parental or guardian consent. If you believe a child has provided us personal data, please contact us so we can take appropriate action.

12. International users

Potatopedia is operated from India. If you access the platform from outside India, you understand that your information may be processed in India, where data-protection laws may differ from those in your jurisdiction.

13. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date above. Your continued use of the platform after changes take effect constitutes acceptance of the revised Policy.

14. Grievance Officer and contact

For any questions, requests or complaints regarding this Policy or your personal data, please contact our Grievance Officer:

We aim to acknowledge grievances within a reasonable time and to resolve them in accordance with applicable law.