Privacy Policy

Last updated: April 2026  |  Effective: April 2026

Operated by: Upving Digital Solutions Pvt Ltd, India

1. Summary (Plain English)

PushDraft is a collection of free online tools — salary calculators, tax estimators, developer utilities, and more. Every tool runs entirely inside your browser. Nothing you type into any tool is ever sent to our servers. We do not store, process, or share your inputs.

The only data we collect is anonymous site analytics (page views, device type) — and only after you give consent.

2. Who We Are

PushDraft is a product of Upving Digital Solutions Pvt Ltd, a company registered in India. For privacy matters, contact us at privacy@pushdraft.com.

3. What Data We Collect

3.1 Analytics — Google Analytics 4 (consent required)

We use Google Analytics 4 (GA4) to understand how the site is used. GA4 is loaded only after you accept analytics cookies via our consent banner. GA4 collects:

• Pages visited and time spent on each page
• Approximate geographic location (country and city level — not precise GPS)
• Device type, browser, operating system, and screen size
• Referral source (how you reached us — e.g., Google search, direct, social)
• Session and engagement metrics (bounce rate, pages per session)

GA4 does not collect: your name, email, phone number, salary figures, tax data, JSON payloads, or any input you type into our tools. IP anonymization is enabled. We use GA4 Consent Mode v2 to respect your preferences.

Google's privacy policy: policies.google.com/privacy

3.2 Newsletter — Beehiiv (optional, explicit opt-in only)

If you choose to subscribe to the PushDraft newsletter, we collect your email address only. This is processed by Beehiiv. You can unsubscribe at any time using the link in any newsletter email. We do not subscribe you automatically — you must actively opt in.

3.3 Payments — LemonSqueezy (Pro tier, future)

If you purchase a Pro subscription, payment is processed by LemonSqueezy. They collect your email address and payment information to complete the transaction. We receive only a confirmation of your purchase and your email for license verification. We do not store full payment card details. LemonSqueezy's privacy policy governs their data handling.

3.4 Essential Cookies (no consent required)

We use a small number of essential cookies that are necessary for the site to function. These do not track you and do not require consent:

• Theme preference — remembers your dark/light mode selection (stored in localStorage, not a cookie)
• Consent state — records whether you have accepted or declined analytics cookies
• Pro license verification — verifies your Pro purchase locally (no server call)

4. What We Do NOT Collect

To be explicit about our privacy commitments:

• Tool inputs — salary figures, tax amounts, JSON data, Base64 strings, regex patterns, JWT tokens, or any other data you enter into any tool. These are processed entirely in your browser and never transmitted.
• Personal identification information — no name, phone number, Aadhaar number, PAN, or government ID.
• Financial data — no income, bank account, credit card, or investment data from tool usage.
• Advertising cookies — we do not use cookies for ad targeting or behavioral profiling.
• Cross-site tracking — we do not track you across other websites.

5. Consent and Cookie Management

When you first visit PushDraft, a consent banner gives you a clear choice:

• Accept analytics — GA4 is enabled. You help us understand which tools are most useful.
• Decline — GA4 is not loaded. The site works exactly the same. No data is collected.

You can change your choice at any time: Reopen cookie preferences.

We implement Google Consent Mode v2. When you decline, GA4 fires only aggregated, cookieless pings (no individual session tracking). This is compliant with DPDPA and GDPR requirements.

6. Third-Party Services

We do not sell your data to any third party.

7. Data Retention

• Tool inputs: Never stored — zero retention by design.
• GA4 analytics data: 14 months (Google's standard retention period). We do not extend this.
• Newsletter email: Retained until you unsubscribe. Beehiiv handles deletion on unsubscribe.
• Pro license email: Retained for as long as your license is active, for support and license verification.
• Consent records: Stored in your browser's localStorage. Cleared when you clear browser data.

8. Your Rights Under DPDPA 2023 (India)

Under the Digital Personal Data Protection Act (DPDPA) 2023, you have the following rights:

• Right to access — You can request a summary of any personal data we hold about you.
• Right to correction — You can request correction of inaccurate data.
• Right to erasure — You can request deletion of your data. For newsletter data, unsubscribe directly via the email link. For Pro account data, contact us.
• Right to withdraw consent — You can withdraw analytics consent at any time via the cookie preferences link above. This does not affect lawfulness of processing before withdrawal.
• Right to grieve — You may file a complaint with the Data Protection Board of India if you believe your rights have been violated.

To exercise any of these rights, contact: privacy@pushdraft.com. We will respond within 30 days.

Because we collect no personal data through our tools, there is typically nothing to access or erase beyond newsletter and Pro account details.

9. Your Rights Under GDPR (EU/EEA Users)

If you are located in the European Union or European Economic Area, you have additional rights under GDPR:

• Right to access, rectification, and erasure of your personal data
• Right to restrict or object to processing
• Right to data portability
• Right to lodge a complaint with your local supervisory authority

Our lawful basis for analytics processing is consent (Article 6(1)(a) GDPR). You may withdraw consent at any time without affecting prior processing.

10. Children's Privacy

PushDraft is not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us personal data, contact privacy@pushdraft.com and we will delete it promptly.

11. Security

Our security approach:

• All tools run client-side — no tool data ever touches a server, so there is nothing to breach at the server level.
• The site is served over HTTPS at all times via Cloudflare.
• Content Security Policy (CSP) headers restrict what scripts can execute on the page.
• We do not operate user account systems (except Pro license verification), minimizing attack surface.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, legal requirements, or new features. When we make material changes, we will update the "Last updated" date at the top of this page. For significant changes, we may notify Pro subscribers by email. We recommend reviewing this page periodically.

13. Contact

For privacy questions, data requests, or complaints:

• Email: privacy@pushdraft.com
• Entity: Upving Digital Solutions Pvt Ltd, India

We aim to respond to all privacy requests within 30 days.