Privacy Policy
Effective date: 2026-09-21 · Governed by the laws of India.
Draft — requires legal review.
This document is a template written by the engineering team, not reviewed by counsel. Do not rely on it as the operative policy until a licensed attorney has signed off, replaced the placeholders (marked [LEGAL REVIEW]), and dated it below.
Who we are
Stamposa is operated by [LEGAL REVIEW — legal entity name, CIN, registered office address] (“Stamposa”, “we”, “us”). We are a data fiduciary under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) for the accounts we operate directly (merchant, staff and platform admin accounts). For the customer data a merchant collects using Stamposa, we act as a data processor on that merchant’s behalf — see our Data Processing Agreement.
What we collect
Merchant & staff accounts. Name, email address, phone number, password hash, business profile (name, address, phone, logo). We also record the IP address and user agent of sessions for security.
Customer accounts (a merchant’s customers). Phone number, optional name and email, marketing consent flag, and the merchant’s private notes / tags on that customer. Every stamp added, every reward redeemed, and every campaign message sent is recorded so the merchant has an accurate history.
Payments. We do not store card details. Payments are processed by our merchant of record, Dodo Payments, which sees the card details directly.
Technical. We use Sentry to record application errors (with the request id and, where relevant, the internal account id — never a phone number or email).
Why we collect it
- To operate the loyalty program the merchant has configured.
- To authenticate you, and to protect your account against fraud.
- To send transactional messages (OTP codes, email verification).
- To send marketing/campaign messages ONLY when you have consented (customer) or on behalf of a merchant to their own opted-in customers.
- To provide analytics to the merchant about their own customer base.
- To meet our tax, accounting and legal obligations.
How long we keep it
Merchant accounts and their customer data: for as long as the account is active, plus [LEGAL REVIEW — retention period, typical 12–24 months] after cancellation to satisfy tax and accounting rules. You can request earlier deletion (see “Your rights” below).
Application logs and Sentry error records: 90 days. Backups: rotated according to our deploy runbook (daily 7 days, weekly 4 weeks, monthly 12 months).
Who we share it with
We share the minimum data needed with our sub-processors:
- Dodo Payments — merchant billing (invoice email, plan).
- MSG91 — SMS delivery (phone number, message body).
- Apple Wallet and Google Wallet — pass rendering (membership id, business name, stamp count).
- Sentry — error monitoring (technical metadata only).
- Our infrastructure provider [LEGAL REVIEW — CloudStick / hosting provider legal name] stores our databases.
We do not sell personal data. We do not share personal data with advertisers.
Where the data is stored
Our production database is hosted in [LEGAL REVIEW — region, e.g. India (Mumbai)]. Some sub-processors process data outside India; where they do, we rely on the DPDP Act’s cross-border transfer rules and standard contractual terms.
Your rights
Under the DPDP Act you have the right to:
- Ask what personal data we hold about you.
- Ask us to correct or update it.
- Ask us to erase it (subject to any legal retention we still owe — e.g. tax records).
- Withdraw consent for marketing messages at any time.
- Nominate someone to exercise these rights on your behalf if you are unable to.
- Complain to the Data Protection Board of India.
To exercise any of these, email hello@stamposa.com. Merchants can also self-serve erasure of their customers from the merchant dashboard.
Security
We use argon2 password hashing, TLS everywhere, per-tenant data isolation, JWT sessions with server-side revocation, Redis-backed rate limiting on sensitive endpoints, and encrypted off-box daily database backups. Platform administrators are required to use two-factor authentication.
Children
Stamposa is not directed at children under 18. Merchants are contractually required not to enrol minors into their loyalty programs without verifiable parental consent.
Changes to this policy
When we make material changes we will email account holders and update the effective date above. Continuing to use Stamposa after the effective date means you accept the change.
Contact
[LEGAL REVIEW — grievance officer name and contact per the DPDP Act + IT Rules 2011]