Privacy Policy

Welcome to MetroCardz. We value your trust, and we are committed to protecting the personal data of our merchants and their loyalty program customers.

1. Information We Collect

To run the custom loyalty programs, we collect and process information on behalf of merchants:

• Merchant Profile: Business name, address, category, WhatsApp number, and representative name.
• Customer Profiles: Customer names, mobile numbers, dates of birth (for birthday reminders), and anniversary dates (optional).
• Loyalty Data: Stamp counts, points balances, transaction histories, and redemption logs.

2. How We Use Your Data

We process data solely to provide and improve the MetroCardz services, including:

• Validating and recording customer loyalty point accruals and redemptions.
• Automating birthday, anniversary, and membership renewal notifications via SMS/WhatsApp as configured by the merchant.
• Providing analytics, charts, and report exports inside the merchant dashboard.

3. DPDP Act 2023 Compliance

In alignment with India's Digital Personal Data Protection (DPDP) Act 2023:

• Role: MetroCardz operates as a Data Processor. The respective merchant is the Data Fiduciary responsible for obtaining proper customer consent.
• Rights: End-customers can request access to, correction of, or erasure of their loyalty records by contacting their respective merchant.
• Retention: We store customer data only as long as necessary to fulfill the loyalty program obligations or until requested otherwise.

4. Security Measures

All customer personal data is transmitted securely via TLS encryption and stored in secure cloud environments within local data centers in India. No customer phone numbers or PII are sold or shared with third-party advertising companies.

5. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact our data grievance officer at privacy@metrocardz.in.