Privacy

What we store when you order

• Name, email, phone: to identify the order and tell you when it ships.
• Shipping address, city, PIN code: to put on the parcel.
• Profession: optional, and only so we know who PebbleRobo is reaching. Leave it blank.
• Quantity, amount paid, and the payment id: the record of the sale.

This sits in a Postgres database hosted by Neon. It is kept while we may still need it for the order, a return, or tax records, and is deleted when none of those apply.

What we never see

Your card details. Payment is handled entirely by Razorpay; the number never touches our servers. We receive only a payment id and the amount.

What is measured on the site

We record how the page is used (which sections are viewed, what is clicked, how far people scroll, and where a payment fails) using Mixpanel, the Meta Pixel and the X pixel. This is how we find out that a page is confusing, or that nobody can pay.

Mixpanel also records session replays: a reconstruction of mouse movement and scrolling. Text you type into the form is masked and is not recorded. The usage events themselves carry no name, phone or address; what each service receives once you order is listed below. Your email address is not sent with them either, but a one-way cryptographic hash of it is, so that the same buyer on a phone and a laptop is counted as one person rather than two. The hash cannot be turned back into your address.

Some of this (which pages were seen, and when an order is placed or paid for, with its value) is shared with Meta and X so that advertising reaches people likely to want a desktop robot. If you would rather not be measured, standard tracker blockers stop all three in your browser, and nothing on the site depends on analytics running. With Global Privacy Control switched on, X is told nothing about you at all: not by the page, and not by our server.

X is also told, by our server, when an order is placed and when its deposit is paid, so that it can count the sale against the advert that led to it. That report carries a one-way SHA-256 hash of your email address and of your phone number (never the plain values), the click id of the X advert you arrived through, if there was one, and your IP address and browser. Never your name or your address.

Email

We email you once, to confirm an order that has been paid for, and again when it ships. That is transactional, not marketing. There is no newsletter and no list, so there is nothing to unsubscribe from. Email is delivered by Resend.

Who else touches your data

• Razorpay: payment processing.
• Neon: the database your order is stored in.
• Vercel: hosting; sees standard request logs.
• Resend: sends the order emails.
• The courier: gets your name, address and phone, because that is how a parcel arrives, and collects the balance due in cash.
• Mixpanel: site usage, and, once you place an order, your name, email, phone, city, pincode and profession. We use it to see where orders stall and to follow up on one that did not complete. It is not used for advertising.
• Meta: site usage and the value of an order. Never your name, email, phone or address.
• X: site usage, the value of an order, and when you order, a one-way hash of your email and phone, the X ad click id and your IP address and browser. Never your name or address.

Nobody else. We do not sell data and we do not share it for anyone else's advertising.

Paying in two parts

Booking takes a deposit through Razorpay. The rest is collected in cash by the courier when your order is handed to you, so the delivery company is told what you still owe. That figure is fixed when you book and does not change afterwards, whatever the site happens to be charging by the time your box ships.

Your data, on request

Write to support@pebblerobo.com and ask for a copy of what we hold, a correction, or deletion. We will do it within 30 days. If your order has shipped we may need to keep the sale record for tax purposes, and we will say so rather than quietly keeping it.

Children

PebbleRobo is sold to adults. We do not knowingly collect details from anyone under 18.

Changes

If this page changes, the date at the top changes with it. We will not change it retroactively to cover something we have already done.