Privacy Policy

1Introduction & Scope

Welcome to Ugrahak ("we," "our," or "us"). Ugrahak is a software-as-a-service (SaaS) customer loyalty and retention platform operated by Ugrahak. We provide digital tools that help local Indian merchants capture customer visits via counter QR codes, issue first-visit scratch card rewards, broadcast promotional offers, and facilitate Google Maps review requests.

This Privacy Policy explains how we collect, store, use, and safeguard personal information when merchants register an account, and when customers scan a merchant's store QR code to participate in store loyalty rewards.

3How We Use Collected Information

We process personal data strictly to deliver and maintain the core functionality of Ugrahak:

• To enable merchants to capture visits, recognize repeat customers, and calculate store footfall.
• To issue, validate, and redeem digital scratch cards and unique reward reference codes.
• To deliver instant promotional offers sent by the shop owner to their customers.
• To schedule and dispatch automatic Google Maps review links 30 minutes following a first-time customer registration.
• To maintain platform security, prevent fraudulent check-ins, and manage merchant subscriptions.

4Multi-Tenant Data Isolation & Security

We employ strict PostgreSQL Row Level Security (RLS) policies. Every merchant's customer list, reward records, and offer broadcasts are strictly isolated to their own account. No merchant can access or view another merchant's customer records.

All data transmissions are encrypted using standard Transport Layer Security (HTTPS / TLS 1.3). Database access credentials and secrets are managed via encrypted environment configurations.

5Third-Party Service Providers

To operate our software reliably, we work with reputable third-party cloud infrastructure providers:

• Supabase: Cloud database hosting, data storage, and authentication services.
• Google Firebase Cloud Messaging (FCM): Web push notification dispatch infrastructure.
• Google Maps: Direct link redirection for verified customer reviews.
• Vercel: Cloud hosting and serverless execution platform.

6Cookies & Local Storage

Ugrahak uses essential HTTP cookies and browser local storage strictly for maintaining merchant authentication sessions, security verification, and caching temporary customer reward states on the browser. We do not use intrusive cross-site behavioral tracking cookies.

7Data Retention & Deletion Process

Merchant account information is retained for the duration of the merchant's active subscription. Customer loyalty records associated with a store are retained as long as the merchant maintains an active store profile.

How to Request Data Deletion: Any merchant or customer may request full deletion of their records by sending an email with their registered phone number or email address to our support desk at supportugrahak@gmail.com. Deletion requests are processed within 30 days.

8User & Customer Privacy Rights

• Notification Opt-Out: Customers can revoke push notification permissions at any time directly through their browser or device notification settings.
• Right to Rectification: Merchants can update their store profile, phone number, and location details anytime from the settings panel.
• Right to Inquire: Users may inquire about what personal data is maintained by contacting support.

9Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or platform enhancements. Significant changes will be communicated by updating the "Last Updated" date at the top of this page.