Privacy Policy

1. Introduction

Freaquer Corporation Private Limited (CIN: U72300TG2012PTC083627), having its registered office at Tower-B, The I-THUM, Unit No. 1204 & 1205, 12th Floor, Plot No. A-40, Sector-62, Noida, Gautam Buddha Nagar, Uttar Pradesh - 201301, India, operates the sttiz platform ("Platform") accessible via websites (sttiz.com and its subdomains) and mobile applications.

The sttiz Platform is a multi-vertical SaaS and ERP platform providing services across marketplace, retail, restaurants, hotels, healthcare, salons, grocery, delivery, logistics, B2B commerce, workforce management, and investment services. This Privacy Policy applies to all users of the Platform, including customers, sellers, merchants, service providers, delivery partners, staff, and investors.

2. Information We Collect

2.1 Personal Information You Provide

• Account Information: Full name, email address, phone number, date of birth, gender, profile photograph, and login credentials.
• Identity Verification: PAN card, Aadhaar (as permitted by law), GSTIN, business registration documents, KYC documents for sellers and merchants.
• Address Information: Billing address, shipping/delivery addresses, GPS coordinates for location-based services.
• Business Information: Business name, type, category, bank account details, UPI IDs, tax registration details (for sellers, merchants, and service providers).
• Communication Data: Messages, reviews, ratings, support tickets, and any content you post on the Platform.

2.2 Payment Information

We process payments through the following third-party payment gateways:

• Razorpay: We share necessary transaction details with Razorpay Software Private Limited for processing payments via credit/debit cards, UPI, net banking, and wallets. Razorpay's privacy policy is available at razorpay.com/privacy.
• Paytm: We share necessary transaction details with One97 Communications Limited (Paytm) for processing payments via Paytm wallet, UPI, cards, and net banking. Paytm's privacy policy is available at paytm.com/privacy-policy.
• Stripe: We share necessary transaction details with Stripe, Inc. for processing international card payments and subscriptions. Stripe's privacy policy is available at stripe.com/privacy.

Important: We do not store complete credit/debit card numbers, CVV, or card PINs on our servers. All payment card data is handled directly by our PCI-DSS compliant payment gateway partners. We only retain transaction IDs, amounts, dates, payment status, and the last four digits of card numbers for reference.

2.3 Automatically Collected Information

• Device Information: Device type, operating system, unique device identifiers, IP address, browser type, and version.
• Usage Data: Pages visited, features used, time spent, click patterns, search queries, and interaction logs.
• Location Data: GPS coordinates (with your permission), IP-based approximate location, delivery route data.
• Camera and Media: Photos and videos you capture within the Platform (product images, pitch reels, profile photos) with your explicit permission.
• Log Data: Server logs including access times, error logs, and referring URLs.

2.4 Information from Third Parties

• Social media profile information (if you sign in via Google, Facebook, or other social providers).
• Delivery status and tracking data from logistics partners.
• Credit and risk assessment data from financial partners (for lending/investment features).
• Business verification data from government databases (MCA, GST portal).

3. How We Use Your Information

We use your personal data for the following purposes:

• Service Delivery: To create and manage your account, process orders, facilitate deliveries, manage bookings, and provide customer support.
• Payment Processing: To process payments, refunds, and settlements through Razorpay, Paytm, and Stripe payment gateways.
• Platform Operations: To manage the marketplace, POS systems, inventory, analytics dashboards, staff management, and ERP functionalities.
• Communication: To send order updates, delivery notifications, promotional offers, newsletters, and critical service announcements.
• Personalization: To provide personalized recommendations, search results, deals, and content based on your preferences and usage patterns.
• Safety & Security: To detect and prevent fraud, unauthorized access, and illegal activities; to verify identities and enforce our Terms of Service.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, and government requests including tax reporting and GST compliance.
• Analytics & Improvement: To analyse usage patterns, improve Platform features, conduct A/B testing, and develop new services.
• Seller/Merchant Services: To provide business analytics, inventory insights, customer analytics, and operational reports to sellers and merchants on the Platform.

4. Legal Basis for Processing (DPDP Act 2023)

Under the Digital Personal Data Protection Act, 2023, we process your personal data based on:

• Consent: We obtain your explicit consent before collecting and processing personal data at the time of registration and for specific features like location tracking and camera access.
• Legitimate Uses: Processing necessary for performance of a contract (e.g., order fulfilment, payment processing), compliance with legal obligations, and responding to medical emergencies.
• Certain Legitimate Uses: As specified under Section 7 of the DPDP Act, including processing for employment purposes, protecting against threats, and providing benefits ordered by the State.

5. Data Sharing and Disclosure

We may share your information with:

• Payment Processors: Razorpay, Paytm, and Stripe for processing financial transactions securely.
• Sellers & Merchants: Relevant order information shared with sellers/merchants to fulfil your orders.
• Delivery Partners: Name, address, and phone number shared with delivery personnel for order delivery.
• Service Providers: Cloud hosting providers (for data storage), analytics tools, communication service providers (SMS, email, push notifications).
• Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred as part of the business assets.
• Legal Requirements: When required by law, court order, government authority, or to protect the rights, property, or safety of the Company, our users, or the public.
• With Your Consent: For any purpose not described above, we will seek your prior consent.

We do not sell your personal data to third parties for their marketing purposes.

6. Cookies and Tracking Technologies

We use the following technologies to enhance your experience:

• Essential Cookies: Required for Platform functionality, authentication, and security.
• Analytics Cookies: To understand how users interact with our Platform and improve our services.
• Preference Cookies: To remember your settings, language, and region preferences.
• Marketing Cookies: To deliver relevant advertisements and measure campaign effectiveness (only with consent).

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect Platform functionality.

7. Data Retention

• Active Accounts: We retain your data for as long as your account is active and as needed to provide services.
• Transaction Records: Financial and transaction data is retained for a minimum of 8 years as required under Indian tax laws and the Companies Act, 2013.
• Payment Data: Payment gateway transaction references are retained as per RBI guidelines and payment processor requirements.
• After Account Deletion: Upon account deletion request, we will delete or anonymize your personal data within 90 days, except where retention is required by law.
• Communication Records: Support tickets and communication logs are retained for 3 years for quality and training purposes.

8. Data Security

We implement industry-standard security measures to protect your data:

• Encryption of data in transit (TLS/SSL) and at rest (AES-256).
• Regular security audits and vulnerability assessments.
• Access controls and role-based permissions for employee access to data.
• Secure API communications between our servers and payment gateways.
• Compliance with PCI-DSS standards through our payment gateway partners.
• Regular data backups with encrypted storage.
• Incident response and breach notification procedures.

9. Your Rights

Under the DPDP Act 2023 and applicable regulations, you have the following rights:

• Right to Access: Request a summary of your personal data being processed and the processing activities.
• Right to Correction: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data (subject to legal retention requirements).
• Right to Withdraw Consent: Withdraw previously given consent at any time. This will not affect the lawfulness of processing done prior to withdrawal.
• Right to Grievance Redressal: Lodge complaints with our Grievance Officer or the Data Protection Board of India.
• Right to Nominate: Nominate any individual who shall exercise your rights in the event of your death or incapacity.

To exercise any of these rights, contact our Grievance Officer at [email protected].

10. Children's Privacy

The Platform is not intended for children under the age of 18. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at [email protected] and we will take steps to delete such information. As per the DPDP Act 2023, processing of a child's data requires verifiable consent from a parent or lawful guardian.

11. Cross-Border Data Transfers

Your data is primarily stored and processed in India. However, certain data may be transferred to and processed in other countries through our service providers (such as Stripe for international payment processing and cloud service providers). Such transfers are done in compliance with the DPDP Act 2023 and applicable regulations. We ensure that appropriate safeguards are in place to protect your data during cross-border transfers.

The Central Government of India may notify specific countries or territories to which personal data may not be transferred. We will comply with any such restrictions as and when notified.

12. Third-Party Links

The Platform may contain links to third-party websites, applications, or services. This Privacy Policy does not apply to such third-party services. We encourage you to review the privacy policies of any third-party service before providing your personal data. We are not responsible for the privacy practices of third-party services.

13. Grievance Officer

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We will notify you of any material changes by posting the updated policy on this page with a revised "Last Updated" date, and where required, by sending you a notification via email or in-app notification. Your continued use of the Platform after any changes indicates your acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us: