Privacy Policy

Customer Claim Submissions (`/claim`): When an end buyer scans a box insert QR code and submits a claim, we collect their:

• Marketplace Order Reference (e.g. Amazon or Flipkart Order ID)
• Purchase Order Amount and Purchase Date
• Contact Phone Number (strictly formatted in standard E.164 e.g. `+919876543210`)
• UPI ID (e.g., `username@okhdfcbank`, `mobile@paytm`) or verified Bank Account details for instant cashback disbursement
• Order confirmation and review verification screenshots uploaded to AWS S3 storage

Merchant / Seller Center Accounts: When a brand registers for CashbackDesk™, we collect the business trade name, merchant email address, authorized contact phone, and wallet transaction history.

We process submitted data exclusively for the following legitimate operations:

• Cashback Verification & Payout: Validating that the order matches the merchant's product and disbursing approved cashback directly to the specified UPI handle or bank account.
• Anti-Fraud Return Cooling: Cross-checking order reference uniqueness to prevent duplicate claims, and verifying the 7-day cooling period against marketplace returns.
• Direct Merchant CRM: Allowing the specific seller who shipped the parcel to identify and service their genuine verified buyer.

Progressra employs telecom-grade safeguards to protect data integrity:

• Encrypted Transport: All data transmissions are strictly encrypted via modern TLS 1.3 / SSL protocols.
• Multi-Tenant Isolation: Database queries are scoped strictly by authenticated `business_id` tenant keys. No seller can view another seller's buyer lists or claims.
• Secure AWS S3 Bucket Storage: Uploaded invoice proofs and review screenshots are stored in private S3 buckets with time-limited pre-signed URLs.

Claim records and transaction settlement logs are retained for auditing, dispute resolution, and taxation compliance. Customers or merchants may request permanent account deletion or claim data purge by contacting our security desk at contact.progressra@gmail.com.