Privacy Policy

Looply is a product of Astrix Technologies Pvt. Ltd. ("Astrix," "we," "us," or "our").

This Privacy Policy explains how we collect, use, share, and protect personal information through Looply, including both our Business Owner accounts and our public, no-login Customer participation flow.

1. Scope

This Policy applies to two categories of people:

• Business Owners, who register for a Looply account to create and manage Loyalty Programs.
• Customers, who participate in a Business Owner's Loyalty Program by scanning a QR code and submitting information such as a mobile number, without creating a Looply account.

2. Information We Collect

From Business Owners (at registration and account use):

• Name, email address, mobile number, password (stored securely, never in plain text), and business details (business name, type, and related setup information).
• Subscription and billing records: your free-trial and subscription dates and, for each payment you make, its date, amount, method (for example UPI or bank transfer), the payment reference you give us, and the period it covers. We do not store card numbers, UPI PINs or bank login details.

From Customers (through the no-login QR flow):

• Mobile number (required — this is the sole identifier used to track a Customer's participation in a Business Owner's Loyalty Program).
• Name, entered per visit (optional, and not treated as a fixed identity — a Customer may enter a different name on different visits).
• A photo of a bill/receipt, if a Business Owner has enabled this requirement for their program.
• Visit history and timestamps, approval/rejection status of visit submissions, and scratch card program outcomes.

Collected automatically:

• Standard technical/log data (such as IP address, device/browser type, and timestamps) for security, debugging, and service reliability purposes.

3. Legal Basis for Processing

We process Customer information on the basis of consent: by submitting a mobile number (and any accompanying information) through a Business Owner's QR page, a Customer consents to that information being collected and used as described in this Policy. Business Owners must ensure their use of Looply, and any communication to their customers about scanning the QR code, does not misrepresent what information is collected or why.

4. How We Use Information

We use the information we collect to:

• Operate the core Service — tracking visits, verifying scratch card eligibility, generating one-time reward claim codes, and displaying program status to Business Owners and Customers.
• Maintain the security and integrity of the Service, including preventing fraudulent or duplicate submissions.
• Communicate with Business Owners about their account and the Service.
• Manage Business Owners' free trials and subscriptions, record and confirm payments, and keep the billing history shown on their Billing page.
• Improve and troubleshoot the Service.

We do not use Customer mobile numbers for advertising or marketing on behalf of third parties.

5. How We Share Information

• With the relevant Business Owner: a Customer's participation data (mobile number, visit history, submitted name/photo, program status) is visible to the specific Business Owner whose Loyalty Program the Customer joined. It is not shared with, or merged into, that Customer's data at any other business on the platform — each business's Customer relationship is kept separate.
• With service providers: we may share information with third parties who help us operate the Service (for example, cloud hosting providers, an error-monitoring provider that receives technical details of crashes with mobile numbers, request contents and cookies removed, or an SMS/communications provider used to deliver one-time reward claim codes), under obligations to protect that information. If we introduce online payments, a payment gateway provider will process payment details on our behalf and will receive the information needed to complete the payment.
• For legal reasons: we may disclose information if required by law, regulation, legal process, or governmental request.
• We do not sell personal information.

6. Data Retention

We retain Business Owner account information for as long as the account remains active, and Customer participation data for as long as reasonably necessary to operate the relevant Loyalty Program, or as required by applicable law. Subscription and payment records are kept for as long as required by applicable tax and accounting laws, even if an account is closed.

7. Data Security

We implement reasonable technical and organizational measures — including secure password storage, access controls, and encrypted connections — to protect personal information from unauthorized access, alteration, or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction (including under India's Digital Personal Data Protection Act, 2023, where applicable), you may have rights to access, correct, or request deletion of your personal information.

• Business Owners can access and update most of their information directly through account settings, and may request account deletion by contacting us.
• Customers, since no account exists, may exercise these rights by contacting us with the mobile number in question at [support/privacy email] — we will verify the request is legitimate before acting on it, and will work with the relevant Business Owner where necessary.

9. Children's Privacy

Looply's Business Owner accounts are intended for users 18 years of age or older. Our Customer-facing flow does not verify age, since it requires no account creation. If your Loyalty Program may be used by customers under the applicable age of consent for data processing in your jurisdiction (for example, minors under India's DPDP Act, which has specific requirements — including verifiable parental consent — for processing children's personal data), you are responsible for ensuring your use of Looply complies with those requirements. We recommend seeking legal advice on this point before deploying a QR-based program in a setting where minors are a likely customer base (e.g., certain retail or food & beverage contexts).

10. International Data Transfers

[If your hosting/cloud infrastructure (e.g. AWS) stores or processes data outside India, disclose this here — e.g. "Your information may be stored and processed on servers located outside India. Where this occurs, we take steps to ensure an adequate level of protection consistent with applicable law."]

11. Cookies and Tracking

[If the Looply website or dashboard uses cookies or similar tracking technologies, describe what they're used for here — e.g. session management, analytics — and reference a cookie consent mechanism if one is implemented.]

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Service or other reasonable means. Continued use of the Service after changes take effect constitutes acceptance of the revised Policy.

13. Grievance Officer / Contact

In accordance with applicable Indian law, including the Information Technology Act, 2000 and rules made thereunder, and the Digital Personal Data Protection Act, 2023, the Grievance Officer for Looply can be reached at:

Shantanu Shahane
Ajinkya Dhotre

For general privacy questions, contact us at work.shantanushahane@gmail.com or ajinkyadhotre201@gmail.com.