Privacy Policy

Last updated: July 2026

1. Information We Collect

We collect two main categories of information to operate and provide our services effectively:

• Business Owner Data: Name, email address (via Google sign-in), business name, business category, and branch locations.
• Customer Data: Names, phone numbers, visit history, and spend amounts of your end customers.

2. How We Use Your Information

The information we collect is strictly used to deliver and enhance our service offerings:

• To provide loyalty tracking and comprehensive customer management for your business.
• To generate actionable analytics for your business operations.
• To facilitate communication via WhatsApp message templates (e.g., promotions and notifications).
• To track and manage customer referrals and rewards.

3. Legal Basis for Processing

We process your data in accordance with the Digital Personal Data Protection (DPDP) Act, 2023, based on the following grounds:

• Consent: Where explicit consent is provided by the data principal.
• Legitimate Interest: Processing necessary for the operation, improvement, and security of our services.

4. Data Storage and Security

We take the security of your data seriously. All information is securely stored on Google Cloud using Firebase infrastructure. Our security measures include:

• Data stored reliably in Google Cloud servers.
• Encryption of all data in transit using TLS protocols.
• Strict Firebase Firestore security rules to prevent unauthorized access.

5. Third-Party Services

We utilize the following carefully selected third-party services to operate LoyalGraahak:

• Firebase (Google): For secure database hosting, backend infrastructure, and user authentication.
• Google Analytics: To monitor website traffic and usage analytics (Tag: G-7S72S6PC01).
• Razorpay: For secure processing of payments and subscriptions.
• WhatsApp: We use WhatsApp only for generating message links (via wa.me) for business communication. There is no API integration and no personal data is shared directly with WhatsApp by us.

6. Data Retention

We retain your business data and your customers' data for as long as your account is active and needed to provide you the services. If an account becomes inactive or is closed, data will be retained in accordance with our retention policy and applicable laws, after which it will be securely deleted or anonymized.

7. Your Rights Under DPDP Act 2023

As per the Digital Personal Data Protection Act 2023, data principals have the following rights regarding their personal data:

• Right to Access: You can request a summary of personal data being processed.
• Right to Correction: You can request the correction of inaccurate or incomplete data.
• Right to Erasure/Deletion: You can request the deletion of personal data when it is no longer necessary.
• Right to Grievance Redressal: You have the right to readily available means of grievance redressal.
• Right to Nominate: You have the right to nominate an individual to exercise these rights in the event of death or incapacity.

8. Children's Privacy

LoyalGraahak is a B2B SaaS application. Our service is not directed at children under the age of 18, and we do not knowingly collect personal data from anyone under 18 years of age.

9. Data Processing by Business Owners

Under the DPDP Act 2023, you (the Business Owner) are the Data Fiduciary for your customers' data. You decide the purpose and means of processing this data. LoyalGraahak acts merely as a Data Processor on your behalf. Business owners must ensure they obtain valid consent from their customers before adding them to the platform.

10. Cross-Border Data Transfer

To provide our services reliably and securely, your data and your customers' data may be stored on Google Cloud servers located outside of India. We ensure such transfers comply with applicable data protection laws, including the DPDP Act 2023.

11. Cookies and Local Storage

We use essential local storage technologies to ensure our web application functions properly:

• localStorage: Used to save UI preferences and session states locally on your device.
• IndexedDB: Used for offline caching to make our Progressive Web App (PWA) fast and reliable even without an internet connection.

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our information practices. If we make any material changes, we will notify you via the email address specified in your account or through a prominent notice on our application prior to the change becoming effective.

13. Contact Information

If you have any questions or require further information about our privacy practices, please contact us at loyalgraahak@gmail.com. You can also visit our website at loyalgraahak.in.

14. Grievance Officer

In accordance with the DPDP Act 2023, we have appointed a Grievance Officer to address your concerns and grievances regarding the processing of your personal data. You can reach the Grievance Officer at loyalgraahak@gmail.com.