Effective 1 October 2026
Arbuda Sales Corporation, referred to in this policy as ASC Arbuda, operates the ASC Arbuda Rewards mobile app for eligible rewards participants in Ahmedabad, Vadodara, and Indore. This policy covers the mobile app and the administration of its rewards programme. It does not cover a third-party site or app you open from a link in the app.
Information we handle
- Sign-in and profile: your mobile number, one-time password verification, authentication session, full name, city, trade, assigned district, account status, and referral code.
- Identity verification: an identity document, such as a masked Aadhaar copy or other ID, only when you choose to upload it for account review or an administrator requests it. We store the document and its review status.
- Rewards activity: product QR token when you scan and submit it, claim history, points ledger, referral activity, notifications, document requests, and redemption history.
- Withdrawal details: the points requested and either a UPI ID or the account holder name, bank name, account number, and IFSC code that you enter, plus the request status and any payout reference.
- Technical information: our authentication and hosting providers may process connection information, such as IP address, device or browser details, and service logs, to operate and protect the service. The app stores an authentication session on your device.
The app requests camera access when you choose to scan a product QR code. It submits the decoded QR token for the claim; it does not upload a continuous camera feed. Document access starts only when you select a file to upload. The district map uses selected city names and can open Google Maps; the app does not request your device's precise location for that map.
Why we use this information
We use it to verify sign-in and participant eligibility; review profiles and requested documents; award and account for points; prevent duplicate or fraudulent QR claims; operate referrals; show your balance and notices; review and manually settle withdrawal requests; answer support and privacy requests; and maintain service security and records required by law.
The displayed demo account uses fictional sample data stored locally in the app. Its demo OTP does not send an SMS, create a live account, or submit a real withdrawal.
Who can receive information
Authorised ASC Arbuda district administrators can review participant details and reward requests for their assigned district. Supabase supplies authentication, database, and file storage services; hosting and SMS delivery providers may process limited technical or mobile-number information needed to provide those functions. If you request a payout, authorised staff use the destination details you supplied to arrange the transfer through the relevant bank or UPI payment channel outside the app. We may disclose information when required by law or to protect the service from fraud. We do not sell your personal information or use it for behavioural advertising.
If you open Google Maps from the district map, Google receives information according to its own privacy policy. You can use the rewards app without opening Maps.
Storage and security
Data is transmitted to our service over HTTPS. Access to participant records and uploaded documents is restricted by account and district permissions. Only authorised personnel should access identity and payout details for verification or fulfilment. No internet service can guarantee absolute security, so please do not email identity documents or bank account numbers to the privacy contact below.
Retention and deletion
We keep account and reward information while your account is active and for as long as reasonably needed to operate the programme, resolve disputes, prevent fraud, and meet legal, accounting, or tax obligations. Identity documents are kept only for verification and any necessary compliance period. When you request account deletion, we verify the request, close the account, and delete or de-identify associated personal data, including uploaded documents, unless specific records must be retained for a legal or legitimate recordkeeping reason. Any retained records remain access restricted and are removed when that reason expires.
You may request access, correction, or deletion of your information by contacting us. For the steps to delete your account, see Delete your ASC Arbuda Rewards account. Deleting the app alone does not delete your account.
Children and changes
The rewards programme is intended for adult trade participants and is not directed to children. We may update this policy when the app or our practices change; the effective date at the top will show the latest version.
Contact
For privacy questions or data requests, contact Arbuda Sales Corporation at admin@arbudapipes.com. Include your registered mobile number to help us locate the account; do not send an OTP, identity document, or bank details by email.