Privacy Policy

This Privacy Policy describes how SourceSwap, operated by Firefly Design LLP, with its registered office at D-227 Abul Fazal Enclave-1, Okhla, New Delhi-110025, India (the "Company", "we", "us" or "our"), collects, uses, discloses, and safeguards your information when you use the SourceSwap website, progressive web application, Sensors, and related services (the "Service"). It should be read together with our Terms of Service.

By accessing or using the Service, you consent to the collection and use of your information as described in this Policy. If you do not agree, please do not use the Service. This Policy is published in accordance with the Information Technology Act, 2000, the rules made thereunder, and the Digital Personal Data Protection Act, 2023, as applicable.

1. Information We Collect

1.1 Information you provide

• Account information obtained through Google Sign-In, such as your name, email address, and profile picture.
• Profile and preferences, including the society/location you select and your plan.
• Contact details, including the WhatsApp/phone number you provide for notifications.
• Payment information, including your UPI ID (VPA) and recurring-mandate details, processed by our payment partners (we do not store full payment-instrument data).
• Communications you send to us, such as support requests.

1.2 Information collected automatically

• Sensor and usage data, including mains/voltage readings, power status, outage history, and related timestamps associated with your society.
• Device and technical data, such as IP address, browser type, device identifiers, and log data.
• Cookies and similar technologies, including session cookies and service-worker/PWA storage used to keep you signed in and to enable offline/app functionality.

1.3 Information from third parties

We receive information from authentication providers (Google), payment processors (Paytm/UPI), and messaging providers (WhatsApp/Meta) as necessary to provide the Service.

2. How We Use Your Information

We use your information to:

• provide, operate, maintain, and improve the Service;
• authenticate you and manage your Account;
• monitor power status and deliver alerts and notifications;
• process subscriptions, recurring payments, and renewals;
• provide customer support and respond to your requests;
• detect, prevent, and address fraud, abuse, and security issues;
• analyse usage to improve features and reliability; and
• comply with legal obligations and enforce our Terms.

3. Legal Bases and Consent

We process personal data on the bases of your consent, the performance of our contract with you, our legitimate interests in operating and securing the Service, and compliance with legal obligations. Where we rely on consent, you may withdraw it at any time as described below; withdrawal does not affect processing carried out before withdrawal.

4. How We Share Your Information

We do not sell your personal data. We may share information with:

• Service providers and processors who perform services on our behalf (e.g., hosting, analytics, messaging), under appropriate confidentiality obligations;
• Payment processors (Paytm/UPI) to process subscriptions and mandates;
• Messaging providers (WhatsApp/Meta) to deliver notifications you have opted into;
• Authentication providers (Google) for sign-in;
• Authorities or third parties where required by law, legal process, or to protect rights, safety, and property; and
• Successors in connection with a merger, acquisition, or sale of assets, subject to this Policy.

5. Cookies and Tracking Technologies

We use strictly necessary cookies to keep you signed in and to operate the Service, and may use analytics technologies to understand usage. The Service is a progressive web application and may register a service worker that caches resources on your device. You can control cookies and clear stored data through your browser settings, though disabling them may affect functionality.

6. Data Retention

We retain personal data for as long as your Account is active and as needed to provide the Service, and thereafter for as long as required to comply with legal, tax, accounting, and dispute-resolution obligations, after which it is deleted or anonymised. Aggregated or de-identified data that cannot reasonably identify you may be retained for analytics.

7. Data Security

We implement reasonable technical and organisational security measures designed to protect personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for safeguarding access to your Account and authentication credentials.

8. Your Rights

Subject to applicable law, you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request erasure of your data, subject to legal retention requirements;
• withdraw consent for processing based on consent;
• object to or restrict certain processing; and
• nominate, where permitted, another individual to exercise your rights in the event of death or incapacity.

To exercise these rights, contact us at hello@sourceswap.app. We may need to verify your identity before acting on your request.

9. Children's Privacy

The Service is not directed to individuals under the age of 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

10. International Data Transfers

Your information is primarily processed in India. Where information is processed or stored by service providers located outside India, we take steps to ensure that appropriate safeguards are in place in accordance with applicable law.

11. Third-Party Links and Services

The Service may link to or integrate with third-party websites and services that have their own privacy practices. We are not responsible for the privacy practices of such third parties, and we encourage you to review their policies.

12. Changes to This Policy

We may update this Policy from time to time. The updated version will be posted with a revised "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the revised Policy.

13. Grievance Officer and Contact

For questions, requests, or complaints regarding your personal data or this Policy, contact:

• Grievance Officer: Shamail Tayyab
• Email: hello@sourceswap.app
• General privacy queries: hello@sourceswap.app
• Address: D-227 Abul Fazal Enclave-1, Okhla, New Delhi-110025, India

We will address grievances within the timelines required under applicable law.

By using SourceSwap, you acknowledge that you have read and understood this Privacy Policy.