Privacy Policy

1 Who is responsible for your data

Elseif Technologies Private Limited, registered at Plot No. 9, Door No. 2, Balamurugan Nagar 3rd Street, Chennai City Corporation, Tamil Nadu, India, is the “Data Fiduciary” (data controller) for the personal data described in this Policy. We process personal data in line with the Information Technology Act, 2000, the rules made under it, and the Digital Personal Data Protection Act, 2023, as they apply to us from time to time.

2 Information we collect

2.1 Information you give us

• Account details: name, email address, mobile number, and a password (stored in hashed form) or your sign-in details if you use a third-party login such as Google.
• Payout details: UPI ID, bank account details or other payment method you choose to receive cashback. Where the law requires it, we may also ask for identity or tax details such as PAN.
• Support and claims: messages, order IDs, screenshots, invoices and other proof you send when you raise a missing-cashback claim or contact support.
• Reviews and feedback: any review or feedback you choose to submit.

2.2 Information collected automatically

• Device and usage data: IP address, browser type and version, operating system, device identifiers, language, pages viewed, features used, referring pages and timestamps.
• Cashback tracking data: the store you clicked through to, the time of the click, a unique click ID and a tracking cookie. This is what lets a merchant or affiliate network tell us that a purchase came from Kaassu.
• Order data from merchants and affiliate networks: order ID, order value, commission, status (tracked, confirmed, cancelled) and dates. We receive this from the merchant or network, not from your shopping account.

2.3 Information the browser extension handles

• Product page details on supported shopping sites you visit: product name, price, availability, seller, product URL and images, so we can show price history, compare prices and check for cashback.
• Your tracked products and alerts: the products you choose to track, your target prices and alert preferences.
• Extension settings and an install identifier so the extension works as you configured it and so we can measure and fix problems.

The extension does not collect your passwords, payment card or bank details entered on shopping sites, the content of your emails or messages, or your browsing activity on sites that are not supported shopping sites.

2.4 Information from others

We may receive information from affiliate networks and merchants (order and commission data), from sign-in providers (basic profile details you allow them to share), and from analytics and fraud-prevention providers.

3 How we use your information

We rely on your consent for the personal data you provide or that is collected through the Services, and on legitimate uses recognised by law (for example, complying with legal obligations or responding to a medical or security emergency). You can withdraw consent at any time (section 10); withdrawal does not affect what we did before you withdrew.

4 How cashback tracking works

When you click to a store from Kaassu, or activate cashback through the extension, a tracking cookie or identifier is set so the merchant can attribute your purchase to us. We only activate cashback tracking when you take that action, such as clicking an activation button. We do not silently replace or insert affiliate links.

If you block cookies, use a VPN, or leave and return to the store through another link or coupon site, tracking may fail and cashback may not be recorded. Our Terms & Conditions explain this in more detail.

5 Cookies and similar technologies

You can manage or delete cookies in your browser settings. Disabling them may stop cashback tracking and some features from working.

6 Who we share your information with

• Merchants and affiliate networks: click IDs, order references and similar tracking data needed to confirm your purchase and pay us the commission. We do not give them your name, contact details, or payout details unless you ask us for a specific claim.
• Service providers working for us under contract: cloud hosting, payment and payout processors, email/SMS/WhatsApp and push notification providers, analytics, customer support tools, and fraud-prevention services. They may use your data only to provide their service to us.
• Authorities and advisers: where required by law, court order or a lawful government request, to enforce our Terms, or to protect our rights, users or the public; and to our lawyers, auditors and insurers where needed.
• Business transfers: if we merge with, are acquired by, or sell assets to another company, your data may be transferred to it. We will tell you before your data becomes subject to a different privacy policy.
• Aggregated or anonymized data that cannot identify you may be shared for research or reporting.

We do not sell your personal data. We do not use it to advertise unrelated products through third-party ad networks.

7 Browser extension permissions and store policies

The extension asks your browser for permissions such as access to supported shopping sites, storage for your settings and tracked products, and notifications for price alerts.

Our use of data collected through the extension follows the Chrome Web Store User Data Policy, including its Limited Use requirements. We use that data only to provide and improve the price tracking and cashback features you asked for. We do not sell it, use it for unrelated advertising, or use it to decide creditworthiness or lending. You can remove the extension at any time from your browser’s extension settings.

8 How long we keep your information

• Account data: for as long as your account is active and for 3 years afterwards, or as required by law.
• Order, payout and tax records: for the period required by applicable tax and accounting laws.
• Click and tracking logs: for 12–24 months, so we can resolve missing-cashback claims.
• Tracked products and price data you created: until you remove them or delete your account.
• Support messages: 3 years after the case is closed.

When data is no longer needed, we delete it or anonymize it. Data needed to handle a legal claim or a fraud investigation may be kept longer.

9 Security

We use reasonable technical and organizational safeguards, including encryption in transit, access controls, and restricted access to payout details. No system is completely secure, and we cannot guarantee absolute security. Please choose a strong, unique password, do not share it, and tell us immediately if you suspect unauthorized use of your account. If a personal data breach affects you, we will notify you and the relevant authority as the law requires.

10 Your rights and choices

Subject to applicable law, you can:

• ask for a summary of the personal data we hold about you and how we process it;
• ask us to correct inaccurate data or complete incomplete data;
• ask us to erase your data, and delete your account;
• withdraw your consent to processing at any time (some features, such as cashback payouts, cannot work without the data they need);
• nominate another person to exercise your rights if you die or become unable to;
• opt out of marketing by using the unsubscribe link or writing to us, and turn off push notifications in your browser or device;
• make a complaint (section 14).

To use these rights, email [email protected] from the email address on your account. We may need to verify your identity first, and we will respond within a reasonable time and in any case within the period required by law. Some data must be kept for legal reasons even after you ask us to delete it, and pending cashback may be forfeited if you close your account before it is confirmed.

11 Children

The Services are for people aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

12 Links to other sites and international transfers

The Services link to merchants and other third-party sites. We do not control their privacy practices and are not responsible for them; please read their policies. Our service providers may store or process data on servers outside India. Where that happens, we take steps to ensure your data receives appropriate protection, in line with applicable law.

13 Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will notify you by email, in the app or extension, or on our website before they take effect where the law requires it. The “Last updated” date at the top shows the current version. Continuing to use the Services after a change means you accept the updated Policy.

14 Contact and Grievance Officer

For questions about this Policy, to exercise your rights, or to make a complaint, contact our Team:

We will acknowledge your complaint within 48 hours and aim to resolve it within one month of receiving it. If you are not satisfied with our response, you may approach the Data Protection Board of India once it is operational, or any other authority with jurisdiction.