Privacy

Privacy Policy.

Last updated: 2026-05-02. We try to keep this readable. If something isn't clear, write to hello@sahipick.in.

1. Who we are

SahiPick (sahipick.com) is an India-focused affiliate review site. We earn a commission when you buy via our links; that's how we keep the site free. We're a sole-prop, currently based in India, and we comply with the Digital Personal Data Protection Act, 2023 (DPDP).

2. What we collect

• Page-view analytics — anonymous, aggregated. We use self-hosted Plausible (no cookies, no cross-site tracking).
• Click events — when you click an affiliate link, we log the bundle and offer ID so we know which picks people find useful. Stored against a session-scoped, non-personal ID — not your name, IP, or email.
• Email — if you sign up for price alerts or the weekly digest. Stored only as long as you want it. One-click unsubscribe in every email.
• WhatsApp number — if you opt into our WhatsApp recommendation chatbot. We store the number, your consent text verbatim, and the timestamp. Used only for the conversation you started, plus one optional 7-day follow-up.
• Search queries — when you use the on-site search, we may log the query (without your identity) to improve coverage.

3. What we do NOT collect

• No third-party advertising cookies. We don't run programmatic ads.
• No fingerprinting or cross-site tracking.
• No selling, renting, or trading of personal data — ever.
• No special-category data (Aadhaar, biometrics, financial IDs).

4. WhatsApp loop — DPDP specifics

You opt in via the page widget by ticking the consent box and submitting your number. We store:

• The exact consent text you saw, verbatim.
• The timestamp of consent.
• Your IP address at the time of consent (proof of consent only).
• Your phone number, hashed for matching incoming messages.

Reply STOP to any of our WhatsApp messages to revoke consent. We honour STOP within seconds and delete your number from future-message tables. The DPDP Act gives you the right to consent withdrawal, data correction, and erasure — write to privacy@sahipick.in.

5. Cookies

We use the minimum cookies the site needs to function:

• sahipick_session — opaque session ID for click attribution. Lifetime: 30 days.
• None for advertising. None for cross-site tracking.

6. Affiliate links — disclosure

Every product link on this site is an affiliate link. We earn a commission when you buy. This does NOT change the price you pay, and it does NOT change which products win our rankings — see our methodology page. Disclosure is shown above the fold on every page (the "Includes affiliate links" pill near the top).

7. Data retention

• Click events — 24 months, then deleted.
• Email subscribers — until you unsubscribe.
• WhatsApp consent + numbers — until you reply STOP, then 7 days for legal proof, then deleted.
• Server logs (web access) — 30 days.

8. Your DPDP rights

• Access — ask what data we have about you.
• Correction — fix anything that's wrong.
• Erasure — delete your data.
• Withdraw consent — for marketing emails / WhatsApp.
• Grievance — write to our Data Protection Officer at dpo@sahipick.in.

We respond within 30 days as required by the DPDP Act.

9. Where data lives

Our servers are in Hetzner Falkenstein (Germany). Day-to-day operations don't transfer Indian users' data outside India for anything beyond cloud hosting. We use the following sub-processors:

• Hetzner — server hosting (DE).
• Twilio — WhatsApp message delivery (US).
• Postmark — transactional email delivery (CA).
• Plausible (self-hosted) — analytics (DE, our box).

LLM providers (Google Gemini, Groq) process the recommendation conversation but don't receive your phone number or email — only the product text + your concern slug. No identity goes off our box.

10. Children

Per DPDP § 9, we do not knowingly process data of users under 18. If you believe a child has shared data with us, write to privacy@sahipick.in and we will delete it.

11. Changes to this policy

We may update this policy. Material changes will be notified via the site banner; the "Last updated" date at the top of this page tracks every revision.

12. Contact

General: hello@sahipick.in
Privacy: privacy@sahipick.in
DPO: dpo@sahipick.in