Privacy Policy
Published for development review on 2 October 2026. Company information, pricing, billing and refund provisions remain provisional. These drafts are not an active paid-plan offer; effective dates will be set before public launch.
Effective date: [EFFECTIVE DATE]
Last updated: [LAST UPDATED DATE]
1. Who is responsible and what this Policy covers
[FULL LEGAL NAME AND LEGAL FORM], trading as The Amazing Apps, operates DomainsLounge.com from [FULL INDIAN ADDRESS]. We are responsible for the personal information we process to operate our website, user accounts, domain listings, hosted landers, monitoring and support. Contact [PRIVACY EMAIL] for privacy questions. Our privacy/grievance contact is [NAME AND DESIGNATION], reachable at [EMAIL, POSTAL ADDRESS AND CONTACT NUMBER].
This Policy covers processing by DomainsLounge, including technical information received when someone visits a lander we host on a customer's domain. It does not cover an independent registrar, marketplace or other website opened through a purchase link. Those organisations explain their own processing in their privacy notices.
2. Information we collect and why
Account information: Your name, email address, organisation details where provided, authentication information and account preferences. We use these to create and secure the account, identify authorised users and deliver requested features. [CONFIRM LOGIN METHOD AND WHETHER PASSWORD HASHES OR THIRD-PARTY SIGN-IN IDENTIFIERS ARE STORED.]
Domain and listing information: Domain names, proof of control or authority, listing descriptions, public prices, purchase links, configuration settings and monitoring results. We use these to publish the listings you request, configure landers, carry out monitoring, identify abuse and maintain accurate records. Only the fields identified as public when submitted are intended to appear publicly.
Billing information: Billing name and address, tax details when needed, plan, invoice, payment status and transaction reference. We use these to collect our Service fees, issue invoices, process refunds and maintain financial records. Payments for our plans are handled through [PAYMENT PROVIDER]. [CONFIRM PAYMENT DATA RECEIVED BY DOMAINSLOUNGE, INCLUDING WHETHER ANY CARD OR PAYMENT TOKEN IS RETAINED.] We do not collect payment information for the purchase of a listed domain.
Technical information: IP address, time of request, requested page or domain, browser/device information, referral information where supplied, security events and error logs. We use this information to deliver and protect pages, investigate faults and abuse, prevent fraud and meet legal logging obligations. A request to a hosted lander can create these records even when the visitor has no DomainsLounge account.
Communications: Information you send in support requests, legal notices, privacy requests and abuse reports. We use it to answer requests, verify authority where necessary, investigate concerns and retain appropriate records of our response. Do not send registrar passwords, transfer authorisation codes, full card details or unnecessary identity documents to us.
We do not operate buyer inquiry forms on hosted landers. Clicking a purchase link takes you to the external provider. We do not receive the inquiry or purchase information you submit there merely because you used our link.
3. Sources, choices and consent
We receive information directly from you, automatically from devices requesting our pages, from our payment and infrastructure providers, and from permitted domain registration or status sources. We obtain domain information through supported sources and use it for the stated listing and monitoring purposes.
We explain required fields when collecting them. If you do not provide information necessary for an account, payment or security check, we may be unable to provide that feature. Optional fields remain optional.
Where consent is required, we request it for the specified purpose and provide a way to withdraw it. You can contact [PRIVACY EMAIL] to withdraw consent or change an optional choice. Withdrawal does not invalidate earlier lawful processing, and may mean we cannot continue a feature that needs the information. We do not treat acceptance of our Terms or continued browsing as blanket consent to unrelated marketing or optional tracking.
We send operational messages needed for your account, billing, security and requested monitoring. Promotional email is a separate choice; if we offer it, we obtain the permissions required by law and include an unsubscribe option. Declining promotion does not prevent you from using a paid plan.
4. Public listings and external websites
Listings and landers are public and may be indexed, cached or copied by search engines and other visitors. Do not include personal contact details you do not want published. Removing a listing from our Service may not immediately remove copies held by others.
When you open an external purchase link, your browser contacts that provider and may disclose technical information such as your IP address and referrer according to browser and link settings. That provider's policies govern its site. A link does not mean we have shared your account or billing profile with it.
5. When we share information
We share information with service providers only as needed for hosting, content delivery, security, authentication, payment processing, transactional email and support, subject to appropriate contractual and security requirements. Some providers, including payment companies, may also process information for their own legal obligations under their notices. The providers relevant to the Service are listed at [PROVIDER LIST URL OR IDENTIFY THEM HERE].
We may disclose necessary information to a competent authority when lawfully required, or where legally permitted to investigate fraud, protect rights or respond to a security threat. We assess requests and limit disclosure to what is necessary. A listing complaint may require sharing relevant allegations with the account holder; we avoid unnecessary disclosure of a complainant's personal information.
If the business is reorganised or transferred, information may be disclosed under appropriate confidentiality and legal safeguards to advisers and the successor responsible for the Service. We will give any notice and obtain any permission required by law.
We do not sell personal information or disclose it to advertising networks for targeted advertising. If our practices change, we will update our notices and obtain any legally required choice or consent before starting the new use.
6. Countries where information is processed
DomainsLounge is operated from India. Our infrastructure includes servers in Singapore and the United States, and authorised personnel in India may access information to operate and support the Service. [ADD INDIA AS A STORAGE LOCATION ONLY AFTER THE INDIAN LOGGING/STORAGE SETUP IS ACTIVE.] Specific hosting, backup and provider locations are described in [PROVIDER/LOCATION LIST URL].
We use appropriate contractual, organisational and technical safeguards for transfers and comply with applicable restrictions and conditions. Where applicable Indian rules require equivalent protection for transferred sensitive personal information and a permitted basis for the transfer, we apply those requirements. Publishing this Policy does not replace a consent or other transfer requirement imposed by law.
We will update the location information before adding a materially different processing location and provide any notice or obtain any permission required by law. A future hosting location is not treated as authorised simply because this Policy refers to international processing.
7. Retention and deletion
We retain information only as long as needed for the purposes explained here, applicable legal requirements and properly documented dispute or security needs. Our retention schedule is:
- Account profile and operational listing records: while the account is active, then [POST-CLOSURE DELETION PERIOD], subject to the legal exceptions below.
- Public listings and landers: until you remove them, they are suspended under our policies, or the relevant Service ends; removal from live pages occurs within [LIVE REMOVAL PERIOD].
- Support and grievance records: [RETENTION PERIOD AND STARTING EVENT].
- Billing and tax records: for the applicable statutory accounting and tax period; [INSERT CONFIRMED PERIOD(S) FOR THE OPERATOR].
- ICT/security logs: at least the rolling 180-day period required by applicable CERT-In directions, and longer where another legal requirement or an active investigation requires it.
- User registration information and removed content: where the Indian intermediary rules apply, registration information is retained for 180 days after cancellation or withdrawal, and specified removed content and associated records for 180 days, or longer when lawfully required.
- Backups: deleted or overwritten through our restricted backup cycle within [BACKUP RETENTION PERIOD], subject to legal holds.
We restrict access to retained records and do not retain them for unrelated marketing. When a legal hold ends or a retention period expires, we delete or irreversibly anonymise the information as appropriate. Any statutory retention requirement takes priority over a shorter routine deletion period stated above.
8. Security and incidents
We use reasonable technical and organisational safeguards appropriate to the information and risks, including access controls and safeguards applied through our infrastructure providers. [CONFIRM IMPLEMENTED CONTROLS; DO NOT CLAIM A CERTIFICATION OR ENCRYPTION CONFIGURATION WITHOUT VERIFICATION.] No online service can guarantee that every security incident will be prevented. We investigate incidents and notify competent authorities and affected people when required by applicable law.
9. Your privacy requests
You may ask us to review or correct your personal information, explain our processing, withdraw a consent, close your account or delete information we no longer need. We apply the rights and exceptions available under the law governing the request. We may need proportionate information to verify that the request is yours, without collecting unnecessary identity documents.
Send requests to [PRIVACY EMAIL]. We will respond within applicable legal deadlines and explain any lawful reason why we cannot fully carry out a request. If a request affects retained financial, security or legal records, we will explain the restriction. You may complain to our Grievance Officer and use any competent regulatory or judicial remedy available under applicable law.
When additional rights under the Digital Personal Data Protection Act, 2023 become applicable to this processing, including statutory access, correction, erasure, grievance and nomination rights, we will provide the corresponding request mechanisms and notices. This Policy does not represent that provisions scheduled to commence later are already in force.
10. Children
Accounts and paid services are intended for adults aged 18 and over. We do not knowingly seek children's personal information for account creation or marketing. If you believe a child has provided information, contact [PRIVACY EMAIL] so we can investigate and take appropriate action. An age statement does not remove any legal duties that apply if we process a child's information.
11. Cookies and changes
Our Cookie Policy describes cookies and similar storage technologies. We publish changes to this Policy with a revised date and provide additional notice or seek a new consent where required for a material change. Our current policy and contact details are available at DomainsLounge.com/privacy and DomainsLounge.com/contact.