Legal / privacy

Your data.
Clearly handled.

What MOLVRIX collects, why it is needed, and the choices available to you.

Last updated: August 3, 2026

MOLVRIX ("we", "us", "our") is committed to protecting your privacy. This policy explains what data we collect, why we collect it, who we share it with, and what rights you have over your information.

1. Information We Collect

We collect only what is necessary to provide our service:

  • Account data: Name and email address when you sign up or purchase.
  • Purchase records: Order ID, items purchased, and amount paid. We do not store card numbers or bank details - those go directly to our payment processors.
  • Communications: Messages you send us via the contact form.
  • Technical data: Your approximate country is detected via IP address at checkout for currency selection. Our payment endpoints temporarily log IP addresses for rate limiting and abuse prevention.
  • Local storage: Cart contents, analytics consent preference, and affiliate referral codes are stored in your browser. Cart and referral details are sent only when needed to complete a purchase or attribute an eligible order.

2. How We Use Your Information

  • To process and fulfil your purchases and grant download access.
  • To send order confirmations and product receipts.
  • To send our newsletter - only if you explicitly subscribed. You can unsubscribe at any time via the link in any email.
  • To respond to support requests you send us.
  • To track affiliate referrals and calculate commissions (using an anonymised referral code you arrive with, if any).

We do not use your data for advertising, profiling, or selling to third parties.

3. Payments

Domestic and international payments are processed by Razorpay. Checkout orders are created in INR; an international card issuer may display or apply its own currency conversion. We never see or store your card number, CVV, or bank account details.

4. Third-Party Services We Use

We use a small set of trusted services to run MOLVRIX:

  • Supabase - authentication, database, and serverless functions. Your account data and order records are stored here. Privacy Policy ->
  • Razorpay - payment processing (INR). Privacy Policy ->
  • Resend - transactional email (order receipts, contact replies). Privacy Policy ->
  • Google Fonts - font delivery. Google may log your IP. Privacy Policy ->
  • Country.is - used to detect your country for pricing (India vs international). Website ->
  • Google Analytics - optional aggregate usage measurement, loaded only after you allow analytics. Advertising and personalised-ad signals are disabled. Privacy Policy ->
  • Microsoft Clarity - optional interaction and usability measurement, loaded only after you allow analytics. Privacy Statement ->

We do not use Meta Pixel, Hotjar, or advertising trackers. Google Analytics and Microsoft Clarity are disabled by default, are not loaded on account, checkout, seller, admin, download, or other protected pages, and load on public pages only after explicit consent.

5. Cookies & Local Storage

Essential browser storage supports login, cart, and security features. Optional analytics storage is used only after you choose "Allow analytics." The browser data we use includes:

  • Authentication session (Supabase) - required for login to work.
  • Cart contents - stored locally in your browser, never sent to a server until checkout.
  • Analytics consent choice - records whether you allowed or denied optional analytics.
  • Newsletter preference - remembers if you subscribed so we don't show the prompt again.
  • Affiliate referral code - if you arrived via an affiliate link, this is stored temporarily and sent only when you complete a purchase.

6. Data Retention

We retain your account and order data for as long as your account is active, or as required by law (typically 7 years for financial records). Contact form messages are retained for up to 12 months. You may request deletion at any time (see Your Rights below).

7. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your account and associated data.
  • Withdraw consent for newsletter emails (unsubscribe link in every email).
  • Data portability - receive a copy of your data in a machine-readable format.

To exercise any of these rights, email support@molvrix.com. We will respond within 30 days.

8. Security

All data is transmitted over HTTPS. Payment processing uses PCI-DSS compliant processors. Our backend runs on Supabase with row-level security policies enforced at the database level. We do not store passwords - authentication is handled by Supabase Auth.

9. Children's Privacy

MOLVRIX is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. We will notify registered users of material changes by email. The date at the top of this page reflects the most recent update.

11. Contact

Questions or requests regarding your privacy? Email us at support@molvrix.com - we aim to respond within 2 business days.