1. Introduction

Spatial India ("we", "us", or "our") operates the website www.spatialindia.com and the interactive map application at www.spatialindia.com/app (collectively, the "Service"). The Service provides demographic intelligence derived from publicly available datasets.

This Privacy Policy explains what information we collect when you use the Service, how we use it, who we share it with, and what rights you have with respect to your information. By using the Service, you agree to the practices described in this policy.

2. Information We Collect

a) Email address. If you voluntarily submit your email address through a sign-up form on the Service (for example, to receive early access or feature announcements), we collect that email address and forward it to our email list provider, Loops.so.

b) Usage analytics. We use Umami, a cookieless analytics tool, to understand how visitors use the Service. Umami may collect information including but not limited to:

• Page URLs visited
• Referring website or URL
• Browser type and screen size (aggregated)
• Country of visit (derived from IP address, not stored individually)
• In-app interactions and feature usage events

Umami does not use cookies, does not build individual user profiles, and does not collect personally identifiable information. We may expand our analytics capabilities over time. Any changes to the categories of personal data collected will be reflected in an updated version of this policy.

c) Map interactions (client-side only). When you use the interactive map — selecting districts, toggling datasets, adjusting filters — all processing happens entirely in your browser. This interaction data is never transmitted to our servers.

d) Server access logs. Like any web host, Cloudflare (our hosting and network provider) may automatically record standard server logs including your IP address, browser type, and pages requested. These logs are used for security and infrastructure diagnostics and are governed by Cloudflare's own privacy policy.

e) Account information. If you sign in to the Service with Google, we receive from Google your email address, your name, and a stable account identifier. We store the identifier, your email address, your name, and the date the account was created. We do not receive or store your Google password. Signing in is optional: the free map and every dataset on it are usable without an account.

f) Payment information. If you buy a subscription, the payment is processed by Razorpay. Your card number, UPI ID, bank credentials, and any mandate details are collected and held by Razorpay and never reach our servers. What we store is limited to the fact of the subscription: which plan, whether it is active, when it expires, and the Razorpay reference for it.

g) Error diagnostics. We use Sentry to record technical details of errors and performance problems in the Service — the error message, the code path, the browser type, and the page. We configure Sentry to remove account identifiers, cookies, and request contents, and to redact email addresses and sign-in codes from recorded web addresses, before any report is sent.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Email: To send you product updates, early access announcements, and feature launches. Every marketing email includes an unsubscribe link.
• Analytics: To understand aggregate usage patterns and improve the platform. We do not use analytics data for advertising or for building individual user profiles.
• Security: To detect and prevent abuse, fraudulent activity, and other harmful behaviour.
• Account: To recognise you when you return, to keep you signed in, and to decide which features your subscription entitles you to.
• Payments: To take payment, to issue refunds, to send receipts and renewal notices, and to meet the record-keeping obligations that come with taking money.

We use your information only for the purposes listed above. We do not sell, rent, or trade your personal information to any third party, and we do not use your account or payment information for advertising or for any purpose you were not told about when it was collected.

4. Third-Party Data Processors

We share your information only with the following service providers, strictly for the purposes described:

• Loops.so— manages our email list and sends transactional and marketing emails. When you submit your email, it is transferred to Loops.so's servers. Please review Loops.so's Privacy Policy.
• Umami — provides cookieless analytics. Please review Umami's Privacy Policy.
• Cloudflare — hosts the Service, serves it over its network, and stores account and subscription-status records. It may process standard server access logs. Please review Cloudflare's Privacy Policy.
• Google — provides sign-in. If you choose to sign in, Google confirms your identity to us and shares your email address, name, and account identifier. Please review Google's Privacy Policy.
• Razorpay — processes payments and subscriptions. Razorpay collects and holds your payment details directly; we receive only the status of the payment. Razorpay is authorised by the Reserve Bank of India as a payment aggregator. Please review Razorpay's Privacy Policy.
• Sentry — records technical error and performance diagnostics, with account identifiers, cookies, and request contents removed before transmission. Please review Sentry's Privacy Policy.

5. Data Sources Used in the Platform

The statistical and geospatial data displayed on Spatial India is sourced from publicly available government and open datasets. These are aggregate demographic statistics and are not personal data about you. The current data sources are listed below; this list is updated as new datasets are added to the Service:

• Census 2011— Office of the Registrar General & Census Commissioner, India. Used under the Government Open Data License – India (GODL-India).
• NFHS-5 (2019–21)— National Family Health Survey, Ministry of Health & Family Welfare, Government of India. Aggregate district factsheet data sourced from the Open Government Data Platform (data.gov.in) under GODL-India.
• NJDG (2024)— National Judicial Data Grid, Department of Justice, Ministry of Law & Justice, Government of India.
• Climate Vulnerability Index (2021) — Department of Science & Technology (DST) and Indian Council of Agricultural Research (ICAR), Government of India.
• Agricultural Census (2015–16) — Ministry of Agriculture & Farmers Welfare, Government of India. Used under GODL-India.
• MSME / Udyam (2026)— Ministry of Micro, Small & Medium Enterprises, Government of India. Used under GODL-India.
• Night-time lights (VIIRS) — VIIRS annual composites, Earth Observation Group, Payne Institute, Colorado School of Mines. Used under CC BY 4.0; district zonal statistics and colour ramps are our own changes.
• District & state boundaries — Geospatial data used in accordance with the DST Guidelines on Geospatial Data dated 15 February 2021.
• Base map tiles — OpenFreeMap / MapTiler (fallback) / © OpenMapTiles / © OpenStreetMap contributors (Open Database Licence).

6. Cookies & Tracking Technologies

We use cookies for one purpose — signing you in and keeping you signed in. They are strictly necessary, they are set only once you begin signing in, and they hold no email address, no name, and no record of what you look at. They are marked HttpOnly and Secure, so they cannot be read by scripts and are sent only over an encrypted connection. Signing out, or clearing cookies in your browser, removes them.

We set no advertising cookies, no retargeting pixels, and no third-party tracking scripts. Umami analytics operates without cookies or persistent identifiers.

7. Your Rights

You have the following rights regarding your personal information:

• Unsubscribe from email: Click the unsubscribe link in any email we send, or contact us at hello@spatialindia.com. We will remove you from the list promptly.
• Analytics opt-out: Umami honours your browser's Do Not Track (DNT) setting. You may also block the analytics script using a browser extension.
• Data access and deletion: You may request a copy of the personal data we hold about you, or ask us to delete it, by writing to hello@spatialindia.com. We will respond within 30 days and will instruct Loops.so to purge your record upon a verified deletion request.
• Correction: You may ask us to correct or complete inaccurate account information. Your email address and name come from Google; correcting them in your Google account updates them here at your next sign-in.
• Account deletion: You may ask us to delete your account at any time and we will act on it promptly. We delete your account record, the link to your Google sign-in, and any subscription entitlement; your access ends at that point. The sign-in cookie in your browser is a signed token rather than a copy of anything we hold — it stops being usable, and signing out or clearing your cookies removes it. Where you have made a payment, we must retain the minimum transaction record described in Section 8; that record is kept for tax and accounting purposes only and is not used for anything else.
• Grievance redressal: Under the Digital Personal Data Protection Act, 2023, you may raise a grievance about how we handle your personal data with our grievance contact, privacy@spatialindia.com. We will respond within 30 days. If you are not satisfied with our response, you may escalate to the Data Protection Board of India.

8. Data Retention

• Email address: Retained until you unsubscribe or request deletion.
• Umami analytics data: Retained per Umami's default retention period. Aggregate and anonymised; no individual retention relevant to you.
• Map session data: Not retained. All district selections, filters, and layer states are held in your browser memory only and are discarded when you close the tab.
• Account record: Retained while the account exists, and deleted on request.
• Subscription record: Retained for the life of the subscription and afterwards, so that a lapsed or refunded subscription can be explained if you ask about it. A refunded or cancelled record is marked as such rather than erased.
• Payment records: Held by Razorpay under its own retention policy, and retained by us for the period Indian tax and accounting law requires.
• Sign-in cookies: Expire automatically, and sooner if you sign out or delete them.

9. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with their information, please contact us at hello@spatialindia.com and we will delete it promptly.

10. International Data Transfers

Spatial India is operated from India. Some of the processors named in Section 4 — Loops.so, Cloudflare, Google, and Sentry — operate servers outside India, so your email address, account record, and error diagnostics may be transferred to and stored outside India. Razorpay processes and stores payment data within India. By using the Service you acknowledge and consent to these transfers.

11. Changes to This Policy

We may update this Privacy Policy at any time. When we do, we will revise the effective date at the top of this page. Your continued use of the Service following the posting of an updated policy constitutes your acceptance of the changes.

12. Contact Us

General questions about this Privacy Policy: hello@spatialindia.com

To exercise your rights, or to raise a grievance under the Digital Personal Data Protection Act, 2023, write to our grievance contact: privacy@spatialindia.com. We respond within 30 days.