Privacy Policy
1. Scope & Application
This Privacy Policy governs the collection, processing, storage, and protection of personal data by Shri Laxmishree Trader LLP ("Amountshop", "we", "us", or "our") when you access our website (amountshop.com), mobile applications, affiliate portals, and related services. We comply strictly with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.
2. Categories of Data Collected
In operating our performance marketing and rewards platform, we collect the following categories of data:
- Identity & Authentication Data: Mobile phone number (verified via Secure SMS OTP), member username, display name, and unique referral codes.
- Financial & Settlement Data: Indian bank account details (account holder name, bank account number, IFSC code) and Unified Payments Interface (UPI) virtual payment addresses submitted solely for manual payout processing.
- Technical & Click Stream Data: IP addresses (anonymized where applicable), user agent strings, device identifiers, browser types, timestamps, and referral URLs required for attribution and fraud prevention.
- Conversion Data: Merchant order identifiers, sale timestamps, purchase values, and commission calculations transmitted via merchant server-to-server (S2S) postbacks.
3. Lawful Grounds & Purpose of Processing
Data processing is conducted exclusively for explicit legitimate business purposes:
- To verify affiliate identities and prevent duplicate or fraudulent account registrations.
- To attribute qualifying merchant sales to referring affiliates and compute 3-tier commission allocations.
- To disburse external manual bank and UPI settlements with official transaction receipts.
- To comply with statutory financial reporting, audit regulations, and tax withholding (TDS) under the Income Tax Act, 1961.
4. Data Minimization & Third-Party Disclosures
Amountshop never sells, rents, or commercializes personal data to third-party data brokers. Data is shared exclusively with:
- Merchant Partners: Anonymized click IDs and conversion order references to verify sales validity.
- Cloud & Infrastructure Providers: ISO-certified cloud hosting providers and secure database systems operating under strict data processing agreements.
- Law Enforcement & Statutory Bodies: Only when mandated by lawful subpoena or Indian judicial orders.
5. Data Retention & Erasure
Personal identifiers and device tokens are retained only as long as an affiliate maintains an active account. Upon verified account deletion, personal identification data is permanently purged within 14 business days, except for financial transaction records, which must be retained for 7 years as mandated by Indian taxation laws.
6. Rights of Data Principals
Under the DPDP Act, affiliates have the right to access, rectify, or request erasure of their personal information. To exercise your rights, visit our Account Deletion Portal or contact our designated Grievance Officer at contact@amountshop.com.
