Legal

Privacy Policy

Last updated: 24 July 2026

This Privacy Policy explains how Oakbridge Publishing Pvt. Ltd. ("we", "us"), as the Data Fiduciary, collects, uses, shares and protects your personal data when you use https://oakbridge.in, in accordance with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable rules.

1. Personal data we collect

Information you give us:

Account: name, email address, mobile number, and a password (stored only in

hashed form).

Orders: billing/shipping name, phone, delivery address, and order details.
Other interactions: manuscript submissions (name, contact, affiliation,

synopsis, bio), desk-copy requests, waitlist sign-ups, product reviews (shown publicly with your name), "notify me when in stock" requests, contact-form messages, and messages you send to our AI assistant.

Information collected automatically:

We use your browser's local storage to keep you signed in and to remember your

cart. This is strictly necessary and always on.

Only if you accept our cookie banner, we use PostHog for analytics —

pages viewed, titles browsed, and where people get stuck while buying. Decline and the analytics script is never loaded. We do not use advertising cookies and we do not record your screen. See our Cookie Policy.

Our servers may keep standard security logs (e.g. IP address) to operate and

protect the Site.

Payments: card, UPI and bank details are collected and processed directly by our payment partner, Razorpay. We do not receive or store your full payment credentials — only a transaction reference to confirm the payment.

We do not knowingly process the personal data of children (persons under 18) without verifiable parental consent, and the Site is not directed at children.

2. Purposes for which we process your data

To create and manage your account and verify it via a one-time code (email or

SMS).

To process, deliver and invoice your orders and send transactional messages

(order confirmations, verification codes, delivery and status updates, password resets).

To provide customer support and respond to submissions, reviews and enquiries.
To operate the AI assistant (your message, and — if you are signed in — a

summary of your own orders, is used to answer your query).

With your consent, to send you updates about new titles and events. You can

withdraw consent at any time.

To detect and prevent fraud and to comply with legal, tax and accounting

obligations.

We process your data on the basis of your consent and, where applicable, for the performance of our contract with you and our legal obligations.

3. Who we share your data with

We share personal data only with processors and partners who help us run the business, under appropriate safeguards, and never sell it:

Razorpay — payment processing.
Resend — sending transactional and (where opted in) marketing emails.
Amazon Web Services (AWS S3) — secure file storage, including invoice PDFs.
Groq — the AI provider that powers our assistant; your assistant messages

and, for signed-in users, a summary of your own orders are processed to generate replies.

MSG91 — sending one-time verification codes by SMS (uses your mobile number).
Shipping / logistics partners — to deliver your orders.
MongoDB Atlas — our managed database, where account and order records are

stored.

Government authorities, regulators or courts, where required by law.

4. Data retention

We keep personal data only as long as necessary for the purposes above or as required by law (for example, tax and GST records are retained for the statutory period). When data is no longer needed, we delete or anonymise it. You may request erasure as described below.

5. Security

We use reasonable technical and organisational measures to protect your data, including password hashing, encrypted connections (HTTPS), access controls and a private storage bucket for files. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Your rights as a Data Principal

Under the DPDP Act, you have the right to:

Access — obtain a summary of the personal data we process about you and the

identities of the parties with whom it has been shared.

Correction & completion — have inaccurate or incomplete data corrected or

updated.

Erasure — request deletion of your personal data, unless we must retain it

for a legal purpose.

Withdraw consent — at any time, for processing based on consent (this does

not affect processing already carried out).

Grievance redressal — raise a complaint with us (see below).
Nominate — nominate another individual to exercise your rights in the event

of death or incapacity.

To exercise any of these rights, email info@oakbridge.in. We will respond within the timelines required by law.

7. Grievance Officer & complaints

Our Grievance Officer, who handles data-protection queries and complaints, is: Bhupendra Yadav, Oakbridge Publishing Pvt. Ltd., 934, Tower B3, Sohna–Gurgaon Rd, Sector 49, Spaze iTech Park, Gurugram, Haryana 122018, India. Email: info@oakbridge.in. Phone: +91 88003 37299. We acknowledge grievances promptly and aim to resolve them within the timelines prescribed under the DPDP Act and the Consumer Protection (E-Commerce) Rules, 2020. If you are not satisfied, you may escalate your complaint to the Data Protection Board of India.

8. International processing

Some of our service providers may process data on servers outside India. Where we do so, we take steps consistent with the DPDP Act and applicable transfer restrictions.

9. Changes to this policy

We may update this Privacy Policy from time to time; the current version is always on this page, with the "Last updated" date above.

10. Contact

For any privacy question or request, contact us at info@oakbridge.in, Oakbridge Publishing Pvt. Ltd., 934, Tower B3, Sohna–Gurgaon Rd, Sector 49, Spaze iTech Park, Gurugram, Haryana 122018, India.