Social Stamp ("we", "us", or "our") is operated by Social Stamp (a product of INSOMNIACS DIGITAL, India). We are committed to protecting your privacy and handling your data transparently. This Privacy Policy applies to our website at socialstamp.in and all related services.
1. Information We Collect
Information You Provide
- Account registration: Name, email address, and password when you create an account.
- Event creation: Event name, category, date, and frame configuration details.
- Payment information: When you subscribe to a paid plan, payment is processed by Razorpay. We do not store card numbers or CVV details — only transaction identifiers and plan metadata.
- Communications: Any messages you send us via email or support channels.
Information Collected Automatically
- Usage data: Pages visited, features used, stamp counts, device type, and browser information.
- Stamps data: When attendees use your stamp link, we collect the uploaded photo (processed in-browser and not stored on our servers unless you enable gallery mode), the attendee's name, and basic analytics (timestamp, device type, approximate location if permitted).
- Log data: IP addresses, request timestamps, and User-Agent strings for security and abuse prevention purposes.
- Cookies: Session cookies for authentication and analytics cookies via Google Analytics. See our Cookie Policy for full details.
2. How We Use Your Information
- To provide, maintain, and improve the Social Stamp platform.
- To process payments and manage your subscription plan.
- To send transactional emails (account creation, password reset, payment receipts) via Resend.
- To display analytics to event organisers about their campaigns.
- To detect and prevent fraud, abuse, and security incidents.
- To comply with legal obligations under applicable Indian law.
We do not sell your personal data to third parties. We do not use your data for advertising profiling outside of our own platform analytics.
3. Data Sharing
We share data only with the following service providers, strictly to operate the platform:
- Cloudflare: Hosting, CDN, and DDoS protection. Data may pass through Cloudflare's global edge network.
- Turso (ChiselStrike): Database infrastructure. Your account and campaign data is stored in Turso's distributed database.
- Cloudflare R2: File storage for uploaded frame images and event assets.
- Razorpay: Payment processing. Governed by Razorpay's Privacy Policy.
- Resend: Transactional email delivery.
- Google Analytics: Aggregated site analytics. See Google's Privacy Policy.
We require all processors to maintain appropriate security measures and use your data only as directed by us.
4. Data Retention
- Account data: Retained for the duration of your account and up to 90 days after deletion.
- Campaign data: Retained while your account is active. Deleted within 30 days of account closure.
- Stamp analytics: Retained for 12 months from the stamp date.
- Payment records: Retained for 7 years as required by Indian financial regulations.
- Log data: Retained for 30 days for security purposes.
5. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your account and associated data.
- Object to or restrict certain types of processing.
- Data portability (receive your data in a machine-readable format).
To exercise any of these rights, email us at privacy@socialstamp.in. We will respond within 30 days.
6. Security
We implement industry-standard security measures including HTTPS encryption, httpOnly session cookies, HMAC-signed authentication tokens, and SSRF-hardened API endpoints. However, no system is 100% secure. If you discover a security vulnerability, please disclose it responsibly to security@socialstamp.in.
7. Children's Privacy
Social Stamp is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.
8. International Transfers
Our infrastructure providers (Cloudflare, Turso) may process data outside India. By using Social Stamp, you consent to such transfers to the extent necessary to provide the service. We ensure appropriate safeguards are in place with each provider.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes by email at least 14 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.
10. Contact Us
For privacy-related queries, contact us at:
Email: privacy@socialstamp.in
Address: Social Stamp, INSOMNIACS DIGITAL, India