Privacy Policy

This Privacy Policy explains how Xigmapro Software Pvt Ltd ("Xigmapro", "we", "us", "our"), the operator of Puraskar (the "Service"), collects, uses, discloses, and protects information when a business ("Merchant") or a Merchant's end customer ("Customer") uses the Service. By using Puraskar, you agree to the practices described in this policy.

1. Who we are

Puraskar is operated by:

Xigmapro Software Pvt Ltd
Salt Lake, Sector V, Kolkata 700091, India
Email: sales@xigmapro.com

2. Information we collect

From Merchants

When a business registers for Puraskar, we collect business details (business name, business type, branch addresses), owner and staff account information (name, email address, hashed password, assigned role), and records of activity within the platform (sales entries, loyalty rule configuration, campaigns, redemptions approved, and similar operational data).

From Customers

When a Merchant adds a Customer to their loyalty program, or a Customer signs in directly, we collect the Customer's name, email address, and — where provided — phone number, date of birth, and anniversary date, along with their loyalty activity with that Merchant (points and cashback balances, redemptions, check-ins, game plays, achievements, and referral relationships). Sign-in uses a one-time code sent to the Customer's email; we do not store passwords for Customer accounts.

Collected automatically

We collect standard technical information needed to operate the Service securely — IP address, browser/device information, and session identifiers (via cookies) — primarily for authentication, fraud prevention, and diagnosing issues.

3. How we use information

• To operate the core Service: calculating loyalty points and cashback, processing redemptions, running campaigns, gamification, and referrals.
• To authenticate accounts and keep the Service secure, including detecting and preventing fraud or abuse.
• To send transactional communications — one-time sign-in codes, order and redemption updates, and account notices.
• To generate AI-assisted insights for Merchants (such as a loyalty health score or customer segments) from their own sales and loyalty data.
• To provide customer support and respond to inquiries.
• To comply with legal obligations and enforce our Terms of Service.

We do not sell personal data to third parties.

4. Sharing and third-party service providers

We share information with service providers who help us operate Puraskar, under agreements that limit their use of that information to providing services to us:

• Email delivery — to send one-time sign-in codes and transactional emails.
• AI processing — when a Merchant requests an AI-generated insight, relevant sales/loyalty data is sent to our AI processing provider solely to generate that response.
• Push notifications — to deliver mobile notifications, where enabled.
• Cloud hosting and infrastructure — to store data and run the Service.

Data processed by these providers may be transmitted to and processed on servers located outside India. We require providers we work with to maintain reasonable security practices for any data they process on our behalf.

A Merchant's Customer data is visible to that Merchant's authorized staff (subject to the roles and permissions the Merchant configures) and is not shared with other Merchants.

5. Data storage and security

We apply reasonable security practices and procedures, including encrypted credential storage, role-based access controls, and tenant-level data isolation between Merchants, consistent with the requirements of the Information Technology Act, 2000 and its associated rules.

6. Data retention

We retain account and transaction data for as long as the associated Merchant or Customer account remains active, and for a reasonable period afterward to comply with legal, accounting, or reporting obligations, or to resolve disputes. A Merchant may request deletion of their account and associated data subject to these obligations.

7. Your rights

Subject to applicable law, including the Digital Personal Data Protection Act, 2023, you may request access to, correction of, or erasure of your personal data, and may withdraw consent to further processing where consent is the basis for that processing. Customers can update most of their own information directly from their Puraskar account profile. To make a request, contact our Grievance Officer below.

8. Cookies

We use strictly necessary cookies to maintain your signed-in session and protect against cross-site request forgery. We do not use third-party advertising or tracking cookies on the Service.

9. Children's privacy

Puraskar is intended for use by businesses and their adult customers. We do not knowingly collect personal data from children in a manner inconsistent with applicable law. If you believe a child's data has been provided to us without appropriate consent, contact us and we will address it.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the Service after a change constitutes acceptance of the revised policy.

11. Grievance Officer / Contact

For questions about this policy or to exercise your data protection rights, contact:

Grievance Officer, Xigmapro Software Pvt Ltd
Salt Lake, Sector V, Kolkata 700091, India
Email: sales@xigmapro.com