Privacy

Last updated 1 November 2026

This page explains what KRM.lib keeps about you, why, how long for, and how to have it removed. Email knowledgeresourcemanagement01@gmail.com with any question about it.

What we keep, and why

• Your orders: the email you paid with, which books you bought, when, whether a promotion code made it free, and Stripe's reference for the order. We need these to deliver your books and run your library, and the law requires us to keep sales records.
• Your account, if you sign in: your email address and the date you joined. We don't use passwords. We email you a one-time link instead, and keep only a scrambled (hashed) copy of each link and sign-in session.
• Reviews you post: the name you chose (or none, in which case a short reader id is shown), your rating, your words, and how many people liked it. Reviews are public on this site.
• Questions you send us: your name, your email and your question, so we can reply.
• Technical data: our host keeps short-term server logs, which include your IP address and the pages you request. We also use your IP address for a few minutes to stop people flooding our forms. We don't build profiles or track you across other sites.

Cookies and storage in your browser

• Sign-in cookie (krm_session), only if you sign in. It keeps you signed in for up to 30 days and is removed when you sign out.
• Browser storage on your own device: your cart, the books you bought in this browser, and which reviews you liked. It never leaves your device unless you take an action that needs it, such as checking out.

We don't use advertising, analytics or tracking cookies, so we don't ask you to accept any.

Payments

Payments are handled by Stripe. Your card, bank or UPI details go straight to Stripe and never reach us. Purchases are sold through Stripe's Link service, which acts as the reseller, collects any sales tax or VAT, and receives your billing country and postcode to do so. Stripe's own privacy policy is at stripe.com/privacy.

Who else handles your data

• Stripe, for payments and tax.
• Railway, which hosts this website and its data.
• Resend, which sends our emails: download links, sign-in links and our replies to you.
• Google Fonts. This site loads its typefaces from Google, which receives your IP address when a page loads.

Some of these companies are outside your country, so your data may be processed in other countries, including the United States. Each of them is bound by contract to protect it. We don't sell your data, use it for advertising, or share it with anyone else. We don't send newsletters or marketing emails.

Our reasons for using your data

Where the law asks us to name a legal basis (for example under the GDPR or India's DPDP Act):

• To deliver what you bought and run your account: because it's needed for our contract with you.
• To keep sales records: because the law requires it.
• To answer questions, show reviews and keep the site secure: our legitimate interest in running the shop, which we balance against your privacy.

How long we keep it

• Order records: as long as tax law requires, usually 6 to 8 years. Then we delete them.
• Your account: until you delete it.
• Reviews: until you delete your account or ask us to remove one.
• Questions: up to 12 months after we reply.
• Sign-in links: 15 minutes. Sign-in sessions: 30 days, or until you sign out.
• Server logs: kept by our host for a short time, then deleted automatically.

Your rights

• See and download your data: sign in, open My library and choose "Download my data". You get your account, orders and reviews. For a copy of any questions you've sent us, email us.
• Delete your account: in My library, choose "Delete my account". This removes your account, your sign-in sessions and your reviews straight away. Order records stay for the period above, because the law requires them, and the download links in your order emails keep working. To have your questions deleted too, email us.
• Correct your data, object to how we use it, or ask us to limit it: email us. We'll reply within 30 days.
• Complain: if you're unhappy with our answer, you can complain to the data protection authority where you live.

Children

Our books are written for adults. We don't knowingly collect data from children under 16, and we'll delete it if we find we have.

Changes

If we change how we use your data, we'll update this page and the date at the top. If a change is significant, we'll email account holders before it applies.

Contact

Email knowledgeresourcemanagement01@gmail.com. We reply within 30 days.