1. Introduction

Welcome to SumMint ("we," "us," or "our"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our software services. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

2. Information We Collect

We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device.

• Personal Identifiers: Name, email address, phone number, billing address, and IP address.
• Business Data: Company details, GST numbers, transaction records, customer data, and operational logs input into the system.
• Financial Data: Payment transaction references (we do not store full credit card numbers; these are handled by our payment processors).
• Files & Documents: Documents, images, and other files you upload through the Files Module are stored securely in Google Cloud Storage and are accessible only to authorised users within your organisation.
• Referral & Coin Data: Participation details in the Premium Rewards Program, including referral codes generated, redemption history, and current coin balance.
• Technical Data: Browser type, operating system, login times, and page views collected via cookies and logs.

3. How We Use Your Data

We use the collected data for various purposes:

• To provide, operate, and maintain our Service.
• To process payments and manage subscriptions.
• To improve, personalize, and expand our Service.
• To understand and analyze how you use our Service.
• To develop new products, services, features, and functionality.
• To communicate with you, including for customer service, updates, and marketing (with consent).
• To detect and prevent fraud.

4. Data Sharing & Disclosure

We do not sell, trade, or rent your personal identification information to others. We may share generic aggregated demographic information not linked to any personal identification information with our business partners and advertisers. We may disclose your information to:

• Service Providers: Third-party companies that perform services on our behalf, including:
  • Google Cloud (Firebase & Cloud Storage) — database, authentication, and file storage.
  • Razorpay (RBI-authorised payment aggregator) — processes online subscription payments. Razorpay has its own Privacy Policy governing data it collects during payment.
  • Google BigQuery — analytics and audit log processing.
• Legal Requirements: If required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).

5. Data Security

We use administrative, technical, and physical security measures to help protect your personal information. Data is encrypted at rest and in transit. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.

6. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Upon account termination, your data may be retained in our archives for a period of up to 30 days before permanent deletion, unless a longer retention period is required or permitted by law.

7. Cookies and Tracking

We use cookies and similar tracking technologies to track the activity on our Service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

8. Your Data Rights

Depending on your location, you may have the following rights:

• The right to access and receive a copy of your personal data.
• The right to rectify or update inaccurate personal data.
• The right to request deletion of your personal data (Right to be Forgotten).
• The right to restrict or object to processing.

To exercise these rights, please contact us at privacy@oyucon.com.

9. Children's Privacy

Our Service does not address anyone under the age of 18 ("Children"). We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your Children has provided us with Personal Data, please contact us.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at privacy@oyucon.com