Last updated: March 2026
1. Introduction
IMAST Operations Private Limited (“IMAST,” “we,” “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you use our services, including LoyaltyBoard, Distribution+, Sales Track, LeadSprint, TrueView, and Reward+ (collectively, the “Platform”).
By using the Platform, you consent to the practices described herein. If you do not agree, please discontinue use immediately.
2. Data We Collect
a) Account Information
When you register, we collect your name, email address, phone number, company name, job title, and billing information.
b) Customer Data
Data you or your end-users input into the Platform — including loyalty transactions, distribution records, sales orders, leads, service tickets, and reward redemptions. You retain full ownership of Customer Data.
c) Usage Data
We automatically collect device information, IP addresses, browser type, pages viewed, features used, session duration, and interaction patterns to improve our services.
d) Cookies & Tracking
We use essential cookies for session management, analytics cookies (Google Analytics) for traffic patterns, and marketing cookies (with your consent) for campaign attribution. See our Cookie Policy for details.
3. How We Use Your Data
- Service Delivery: Provide, maintain, and improve the Platform
- Support: Respond to inquiries and resolve technical issues
- Billing: Process payments and send invoices
- Analytics: Understand usage patterns and improve features
- Security: Detect fraud, prevent abuse, and protect infrastructure
- Communication: Send product updates, security alerts, and (with consent) marketing materials
- Legal: Comply with applicable laws, regulations, and legal processes
We never sell, rent, or trade your personal data to third parties.
4. Legal Basis for Processing
- Contract Performance: Processing necessary to deliver our services
- Legitimate Interests: Product improvement, security, fraud prevention
- Consent: Marketing communications and non-essential cookies (withdrawable anytime)
- Legal Obligation: Tax reporting, regulatory compliance
5. Data Sharing
We share data only with:
- Service Providers: AWS (hosting), payment processors, email delivery — all under strict Data Processing Agreements
- Legal Requirements: When required by law, court order, or to protect rights and safety
- With Your Consent: Any other sharing requires your explicit approval
6. Data Retention
- Active accounts: Duration of subscription plus 90 days
- After deletion: Customer Data purged within 90 days; backups within 30 days
- Billing records: 7 years (Indian tax law requirement)
- Anonymised analytics: Retained indefinitely for product improvement
7. Your Rights
You have the right to:
- Access your personal data
- Rectify inaccurate information
- Erase your data (“right to be forgotten”)
- Port your data in CSV, JSON, or PDF format
- Restrict processing in certain circumstances
- Object to processing based on legitimate interests
- Withdraw consent for marketing at any time
To exercise any right, email privacy@imast.in. We respond within 30 days.
8. International Data Transfers
Primary data storage is on AWS Mumbai (ap-south-1). For EU/EEA data subjects, any transfers outside India are safeguarded by Standard Contractual Clauses (SCCs) and Transfer Impact Assessments.
9. Children’s Privacy
Our services are not directed at individuals under 18. We do not knowingly collect data from minors. If we become aware of such collection, we will delete it promptly.
10. Security Measures
We implement AES-256 encryption at rest, TLS 1.2+ in transit, AWS KMS key management with 90-day rotation, MFA for production access, 24/7 SOC monitoring, and quarterly penetration testing. See our Security Center for details.
11. Changes to This Policy
We may update this policy periodically. Material changes will be notified via email and Platform banner at least 30 days in advance. Continued use after changes constitutes acceptance.
12. Contact
Privacy Team: privacy@imast.in
Data Protection Officer: dpo@imast.in
Legal: legal@imast.in
IMAST Operations Private Limited
IMAST House, 1, Eastern Ring Rd, WB 74, Scheme No 94 Sector EB
Indore, Madhya Pradesh 452001, India