Privacy Policy

This Privacy Policy explains how SkandaBio Organics Pvt. Ltd.(“passa”, “we”, “us”), operator of passa.gift, collects and uses personal data. We follow India's Digital Personal Data Protection Act, 2023 (DPDP Act). By using passa.gift, you agree to this policy.

Who this covers

passa serves two groups: partner brands (businesses that subscribe) and gift recipients (people who scan a passa QR and may pass a gift forward). We handle only the data each group needs.

What we collect

From partner brands

• Business name and, where provided, legal entity name, GSTIN, and PAN;
• Contact name, email, and phone of the account owner and team members;
• Billing information, processed by our payment processor (see below);
• Brand assets and product details you upload to run your chains.

From gift recipients

• The minimum needed for a gifting chain: first name, city, an optional message, and, if the giver chooses to be notified, an email address;
• QR scan events, used to show the chain and to produce aggregate analytics.

Recipients are never required to create an account to receive or continue a gift.

How we use data

• To provide the Service: run gifting chains, dashboards, and QR fulfilment;
• To bill partner brands and manage subscriptions;
• To send transactional messages (for example, when a gift is opened);
• To produce aggregate analytics for brands — counts of chains, hands, and cities. We never show a brand the personal details of individual chain participants.

How we share data

We share data only with service providers that help us run passa, including:

• Razorpay — to process subscription payments securely;
• Resend — to send transactional and account emails;
• Supabase and Vercel — to host our data and application.

We do not sell personal data. We do not share a brand's participant data with other brands, and we never publish personal messages — public chain views show only structure (intention, length, city), never private messages.

Retention

We keep personal data for as long as needed to provide the Service and to meet legal and accounting obligations. Chain records are retained so that gifts remain meaningful over time. You can request deletion as described below.

Your rights

Under the DPDP Act you may:

• ask what personal data we hold about you and request a copy;
• ask us to correct inaccurate data;
• ask us to delete your data, subject to legal retention limits;
• withdraw consent for non-essential processing, such as marketing email.

To exercise any right, email info@premanature.com. We will respond within the timelines set by law.

Security

We use industry-standard measures to protect data in transit and at rest. No system is perfectly secure, but we work to keep your data safe and to notify you of any material breach as required by law.

Grievance officer

For privacy grievances, write to info@premanature.com with “Privacy Grievance” in the subject line, addressed to the Grievance Officer, SkandaBio Organics Pvt. Ltd., 316/6A, Melapachakudi Village, Fathima Nagar, Viralimalai, Tamil Nadu 621316, India. We acknowledge within 48 hours and aim to resolve within 15 days.

Changes

We may update this policy. Material changes will be notified to partner brands by email. The “last updated” date above always reflects the current version.