Privacy Policy
Effective 25 October 2026
The short version
- You can read SolxLab without an account and without giving us any personal data.
- If you comment or use the contact form, we keep your name, email address and message. We use them only to run the site and reply to you.
- If you buy a model, we keep what's needed to check your payment and send your download: your email, the UPI reference (UTR) and any screenshot you upload. Screenshots are deleted after 90 days.
- Some free pages show ads from Google AdSense. Google may use cookies to choose those ads (see section 3), and you can turn off personalised ads in Google's Ad Settings. We never show ads on paid downloads, never sell your data, and use no third-party analytics. We count page visits ourselves, without cookies and without storing IP addresses. For those counts we work out your country from your IP address on our own server; the IP address is not stored or sent to anyone for this.
- If you ask us for custom work (proofreading, modelling, correction or review of your model or paper), we keep your name, email address, what you asked for and the materials you share, to do the work and keep you updated. If an independent contributor does the work, they get what they need for it, but never your name, email address or the price.
- If you subscribe to our newsletter, we keep your email address to send it, and only once you've confirmed from the email we send. Every issue has a link to unsubscribe.
- IP addresses are deleted after 30 days. You can ask us to see, correct or delete your data at any time.
1. Who is responsible for your data
SolxLab (solxlab.in) is run by the SolxLab owner, an individual based in India, who is the data fiduciary for the personal data described here under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act").
Privacy questions and requests: admin@solxlab.in
2. What we collect and why
| When | What we collect | Why | How long we keep it |
|---|---|---|---|
| You read the site | SolxLab adds one to daily counts of the page you open, the website that linked you here (for example google.com), your device type (desktop, mobile or tablet) and your country. The country is looked up from your IP address on our own server in DB-IP's free IP-to-country database, and only the country is added to the counts. On a job post, a click on its Apply button is also counted. To count each visitor once a day, it also stores a one-way code made from the date, your IP address and your browser type. The code can't be turned back into your IP address and changes every day. No cookies are used, and your IP address itself is not stored. Our hosting provider's servers also record standard access logs: IP address, page requested, browser type and time. | Knowing which pages people read so we can improve the site; delivering pages, security, fixing errors | The daily counts are kept, but they can't identify anyone. The one-way code is deleted the next day. Access logs are kept under the hosting provider's log retention policy. |
| You leave a comment | Name, email address, comment text, time, and IP address | Showing your comment once approved, contacting you about it, and stopping spam and abuse | The comment stays until it's deleted. The IP address is deleted after 30 days. |
| You use the contact form | Name, email address, subject, message, time, and IP address | Reading and replying to your message, and stopping spam | Until we delete the message. The IP address is deleted after 30 days. |
| You buy a model download | Name (optional), email address, the model, amount, time and IP address. For UPI: the UPI reference (UTR) and, if you choose to upload one, a payment screenshot. The screenshot may show your name, bank or UPI ID, so crop anything you don't want to share. For card or net banking: the payment ID and status from Razorpay. We never receive your card number, UPI PIN or bank login. | Checking and taking payment, sending your download link and receipt, handling refunds and disputes, preventing fraud, and keeping the accounts Indian tax law requires | Order records are kept for as long as Indian tax and accounting law requires (generally up to 8 years). Payment screenshots are deleted after 90 days. The IP address is deleted after 30 days. |
| You ask us for custom work (with the Request a service form, by email or by message) | Name, email address, the work you ask for, its due date, the links and files you share, the price, and whether you've accepted the quote and paid. For UPI: the UPI reference (UTR) and, if you choose to upload one, a payment screenshot. Each email we send you about the order, and the messages you and we write on your order page. From the form, also the time and your IP address. | Quoting, doing and delivering the work, keeping you updated, taking payment and sending your receipt, handling questions and disputes, stopping spam, and keeping the accounts Indian tax law requires | Until the order is deleted, and for paid orders as long as Indian tax and accounting law requires (generally up to 8 years). Payment screenshots are deleted after 90 days. The IP address is deleted after 30 days. |
| You do custom work for us as an independent contributor | Name, email address, the work we give you and your fee, whether we've paid you, what you hand in (notes and files) and the messages you and we write on your work page, with times | Giving you the work, receiving it, paying you and keeping a record of it | Until the order is deleted, and for paid work as long as Indian tax and accounting law requires. Your name and email address stay in our list of contributors until we remove them, which you can ask us to do. |
| You use our Telegram bot | Your Telegram chat id, name and @username as Telegram shares them, when you last used the bot, and whether you've subscribed to new posts. If you use /contact, what you write is passed to the SolxLab team's Telegram chat; it isn't stored on our site. | Answering you, sending new posts if you subscribed, passing your messages to the team and sending their replies, and stopping abuse | Until you ask us to delete it. Send /unsubscribe to stop new posts, or block the bot to stop everything. Messages you send to the team stay in our Telegram chat until we delete them. |
| You subscribe to the newsletter | Email address, where on the site you signed up, the times you signed up, confirmed and unsubscribed, which issues we sent you, and your IP address | Confirming it's really you, sending the newsletter, and stopping spam sign-ups | Until you unsubscribe and ask us to delete it, or we remove it. After you unsubscribe we keep your address marked as unsubscribed, so we never send to it again. The IP address is deleted after 30 days. |
| Someone tries to sign in to the owner area | IP address and time of each failed attempt | Blocking password-guessing attacks | 24 hours |
Your name and comment become public once a comment is approved. Your email address is never published. Each new comment or message is also emailed to the site owner so they can review it.
Our legal basis. We process this data because you choose to give it to us for a specific purpose (to post a comment, to contact us or to get the newsletter), and for reasonable uses such as security and preventing abuse. You can withdraw your consent at any time by asking us to delete your data (see section 6). Withdrawing consent doesn't affect anything we did before you withdrew it.
3. Cookies and local storage
SolxLab's own code sets no advertising, analytics or tracking cookies, and counts visits without cookies (see section 2). The cookies and storage SolxLab itself uses are listed below. Pages that show ads also load Google's advertising code, which may set cookies of its own (see "Advertising" below).
| Name | Type | Purpose | Who gets it | Lasts |
|---|---|---|---|---|
rh_owner | Cookie (strictly necessary) | Keeps the site owner and team members signed in to the owner area | Only the owner and team members, after signing in. Visitors don't get it. | Ends after 2 hours of inactivity or 7 days at most, or when the browser closes |
solxlab.skipStats | Local storage (strictly necessary) | Stops the site team's own visits being counted in the site statistics | Only browsers that open the owner area | Until you clear your browser's site data |
solxlab.citeFormat | Local storage (preference) | Remembers which citation format (APA, MLA or BibTeX) you last chose | Anyone who uses the "Cite this" box | Until you clear your browser's site data |
solxlab.recent | Local storage (preference) | Remembers which posts you opened, so the home page can suggest related ones. Only the post IDs and times are kept, at most the last 40, and they never leave your browser. | Anyone who opens a post | Until you choose "Start fresh" on the home page or clear your browser's site data |
You can block or delete these in your browser settings. The site still works, although the owner won't be able to stay signed in.
Advertising
The home page, section pages and free posts may show ads served by Google AdSense (Google LLC). Pages for paid downloads, checkout, the owner area and these legal pages show no ads. On pages with ads:
- Google and its partners may use cookies and similar technologies to show ads, limit how often you see the same ad, measure how ads perform and prevent ad fraud. These include Google's advertising cookies, such as the DoubleClick cookie.
- Google may use your visits to this site and other websites to show you ads based on your interests (personalised ads).
- Your browser sends Google your IP address and information about your device and the page you're viewing.
You can turn off personalised ads in Google's Ad Settings, or turn off third-party vendors' use of cookies for personalised advertising at www.aboutads.info. To learn how Google uses this data, see How Google uses information from sites that use its services. If you visit from the European Economic Area, the UK or Switzerland, you'll be asked for your consent before personalised ads are shown.
4. Who we share data with
We never sell or rent personal data. We share it only in these cases:
- Hosting provider. The site, its database and its email run on servers rented from our hosting provider, who processes data on our behalf.
- Google Fonts. Some pages load a typeface from Google's font servers, which means your browser sends your IP address to Google. See Google's Privacy Policy.
- Google AdSense (Google LLC), which shows ads on some free pages and may collect data with cookies under Google's Privacy Policy. See "Advertising" in section 3.
- Embedded content. A post may embed a video or image from another site, such as YouTube. When you view that post, the other site may collect data under its own policy.
- Razorpay (Razorpay Software Private Limited), our payment gateway, when you buy a download. Razorpay collects your payment details directly in its own checkout window, which may use its own cookies, and handles them under its Privacy Policy. We receive only the payment ID and status.
- Independent contributors. If an independent contributor does your custom work, we give them what they need to do it: the brief, the links and files you shared, the due date and their fee. Never your name, email address or the price. We ask them to keep it private, and their link stops working when the work goes to someone else.
- Telegram (Telegram Messenger), if you use our Telegram bot. Your messages go through Telegram under Telegram's Privacy Policy.
- When the law requires it. We may share data with a government agency or court under a lawful order, or to protect people's safety or the site's security.
Some of these providers may store data outside India. Where they do, we rely on transfers that the DPDP Act and any government rules made under it permit.
5. How we protect data
Our security measures include:
- encrypted connections (HTTPS);
- a hashed owner password;
- a limit on sign-in attempts;
- moderation before anything is published;
- access to email addresses and messages limited to the site owner.
No system is completely secure. If a breach affects your personal data, we will tell you and the Data Protection Board of India as the DPDP Act requires.
6. Your rights
Under the DPDP Act you can ask us to:
- Access: give you a summary of the personal data we hold about you and how we use it.
- Correct or update data that is inaccurate or incomplete.
- Erase your data, for example by deleting your comment or message, or your email address from the newsletter list. We'll do this unless the law requires us to keep it.
- Withdraw consent to any processing based on consent.
- Nominate another person to exercise these rights if you die or become unable to.
- Raise a grievance: see our Grievance Redressal page.
Email admin@solxlab.in from the address you used on the site, so we can match your request to your data. We'll reply within 15 days. If you're not satisfied after using our grievance process, you can complain to the Data Protection Board of India.
7. Children
SolxLab is meant for researchers and professionals. Don't comment or send messages if you're under 18. If we find out that a child has given us personal data, we will delete it.
8. Changes to this policy
If we change how we handle personal data, we'll update this page and the date at the top. If a change significantly affects data we already hold, we'll make it clearly visible on the site.