Privacy Policy

· Account Information: Name, email address, phone number, and password when you register.

· Business Information: Business name, address, description, operating hours, website, and photos when you claim a pincode.

· Payment Information: Payment details processed through Razorpay. We do not store your credit/debit card numbers.

· Reviews & Content: Text, ratings, and photos you submit as reviews, brick messages, or tile descriptions.

· Location Data: GPS coordinates when you use location-based features (Near Me, GPS-verified reviews, treasure hunts). This is collected only with your explicit permission.

· Usage Data: Pages visited, features used, search queries, interaction timestamps, and session duration.

· Device Information: Browser type, operating system, device type, and IP address.

· Cookies: Session cookies to maintain your login state and preferences (theme, language).

· To provide, operate, and improve the Platform and its features.

· To process business claims, payments, and subscriptions.

· To facilitate the PixelCoin reward system, missions, treasure hunts, and auctions.

· To display business listings, reviews, and user-generated content.

· To enable GPS-verified reviews and nearby business discovery.

· To send transactional emails (payment receipts, claim confirmations, password resets).

· To send marketing communications (with your consent; you can opt out at any time).

· To detect and prevent fraud, abuse, and violations of our Terms of Service.

· To comply with legal obligations under Indian law.

· Payment Processors: Razorpay, to process your transactions securely.

· Public Display: Business names, descriptions, reviews, ratings, and photos are publicly visible on the Platform.

· Government APIs: We use data from data.gov.in (India Post Pincode Directory) to enrich pincode information. No personal data is sent to this service.

· Legal Requirements: When required by law, subpoena, or court order, or to protect our rights and safety.

· Your data is stored on secured servers hosted in India.

· Passwords are hashed using bcrypt and are never stored in plain text.

· All data transmission is encrypted using TLS/SSL (HTTPS).

· Payment information is handled entirely by Razorpay, which is PCI-DSS compliant.

· We implement reasonable technical and organisational measures to protect your data, but no system is 100% secure.

· Access: Request a copy of the personal data we hold about you.

· Correction: Request correction of inaccurate or incomplete data.

· Deletion: Request deletion of your account and associated personal data.

· Withdraw Consent: Withdraw consent for location tracking or marketing communications at any time.

· Data Portability: Request your data in a machine-readable format.

· Account data is retained as long as your account is active.

· Business claim data is retained for the duration of the subscription plus 90 days.

· Reviews and public content may be retained after account deletion for platform integrity.

· Payment records are retained for 8 years as required by Indian tax laws.

· Upon account deletion request, personal data is removed within 30 days, except where retention is legally required.