Privacy policy

This policy explains what personal data ishalabs.com collects, why, and what you can do about it. The site is run by Isha Labs ("we", "us").

What we collect

Account details, if you register: your name, email address and a securely hashed password, plus your wishlist.
Newsletter sign-ups: your email address and whether you are still subscribed.
Session data: while you browse, a session record holds your IP address, browser type and preferences such as language and currency. It expires after a period of inactivity.
Server logs: like most websites, our server records requests (IP address, page, time, browser) to keep the site secure and working.

We do not collect payment details. Purchases happen on CodeCanyon, and Envato's own privacy policy applies there.

Cookies and similar storage

Essential cookies: a session cookie and a security token that protects forms. The site does not work without them.
Theme preference: if you switch between light and dark mode, your choice is saved in your browser's local storage. It never leaves your device.
Affiliate tracking (Impact): we use a script from Impact (impact.com), which runs Envato's affiliate programme. It records page views and clicks on links to CodeCanyon, and may set cookies, so that a purchase you make on CodeCanyon can be credited to us. Impact processes this data under its own privacy policy.

You can block or delete cookies in your browser settings. Blocking essential cookies will stop sign-in and forms from working.

Other services we use

Google Fonts: our fonts are loaded from Google's servers, which receive your IP address when a page loads.
Help desk: support tickets at helpdesk.ishalabs.com are handled on that site, which has its own records of what you send.
Live demos: our product demos run on separate sites. Do not enter real personal data in them; demo data is shared and may be reset.

Why we use your data

To run your account and wishlist (to provide the service you asked for).
To send the newsletter you signed up for (your consent, which you can withdraw).
To keep the site secure and fix problems (our legitimate interest).
To be credited for affiliate sales (our legitimate interest).

We do not sell your personal data, and we do not use it for advertising profiles.

How long we keep it

Account data: until you ask us to delete your account.
Newsletter: until you unsubscribe or ask us to delete your email.
Sessions: they expire after inactivity and are cleared automatically.
Server logs: kept only as long as needed for security and troubleshooting.

Your rights

Depending on where you live, you can ask to see the personal data we hold about you, correct it, delete it, or object to how we use it. To make a request, open a ticket at helpdesk.ishalabs.com from the email address on your account. We will reply within 30 days.

Security

The site is served over HTTPS, passwords are stored only as secure hashes, and admin access is restricted. No system is perfectly secure, but we take reasonable steps to protect your data.

Children

This site is for businesses and developers. It is not aimed at children, and we do not knowingly collect data from anyone under 16.

Changes

We will update this page if what we collect changes. The date at the top shows the latest version.

Contact

Privacy questions or requests: open a ticket at helpdesk.ishalabs.com.