Legal
Privacy Policy
Last updated 23 September 2026.
Draft — this describes what ScanPrint actually does today. It has not yet had a formal legal review; that is planned before general release.
ScanPrint ("we", "us") runs a print-counter system used by shops (each a "Shop", operated by an "Owner") and by the Shop's own customers who send a file to be printed ("Students" or "Customers"). This policy covers all three: Students, Owners, and visitors to this website.
1. What we collect, and why
From a Student sending a file to print
| We collect | Why |
|---|---|
| The file(s) sent to print | To count pages, show a price, and produce the printed pages — nothing else |
| First name | So the counter can call out the right job. We do not ask for a surname, phone number, or any account |
| The print options chosen (copies, colour, sides, page range) | To price and produce the job correctly |
We do not open, read, or extract information from any file. A file is treated the same way whether it is a college assignment or a photograph of an ID document: counted for pages, rendered for printing, then deleted. We do not run OCR or identity extraction on any upload, and we do not keep presets for Aadhaar, PAN, or any other identity document.
Deletion: a Student's file and name are deleted as soon as the job is printed, or after 3 hours from upload (or shop closing, whichever is sooner) if it is never printed. Every deletion is logged, without the file name, student name, or amount involved.
From a Shop Owner
| We collect | Why |
|---|---|
| Phone number | To sign up, and to log in on this website to see and renew the plan — verified by a one-time code. We keep only a keyed hash of it, never the number in the clear |
| Shop name, rates, printer setup, opening hours | To run the Shop's page and queue |
| UPI ID and payee name | To show the Shop's own payment link and QR to Students — never a credential that can move money out |
| Paytm merchant API credentials, if the Owner opts into automatic payment confirmation | Held encrypted, used only to ask "did this exact amount arrive?" — never to hold, move, or refund money |
| Device and pairing information | So only the Shop's own paired computer receives that Shop's jobs |
| Legal name, GSTIN and billing address, if given | To issue the Shop's own subscription invoice correctly |
| Subscription payments: the plan bought, the amount, the payment's reference | To activate the plan and issue the invoice. Card, UPI and bank details are entered with Razorpay and never reach us |
The day's cash, UPI and unpaid totals — the "hisab" — are never sent to us. They live only on the Shop's own computer. Our server keeps job counts for the queue, never amounts.
From a visitor to this website
We do not use tracking or advertising cookies, and we do not run any analytics service on this site. When a Shop Owner logs in, one cookie keeps them logged in for up to four hours and holds only which Shop it is; logging out removes it. The language you choose is remembered in your own browser. If you write to us, we keep what you send us to answer you.
2. The rule that limits everything else
ScanPrint never receives, holds, or forwards money paid by a Student. Every payment link and QR code carries the Shop's own UPI ID; the money moves directly between the Student's bank and the Shop's. This is a design limit, not a promise we could choose to break later.
3. Where data is stored, and for how long
- Server data is hosted in India (Oracle Cloud, Mumbai/Hyderabad region).
- A Student's file and name: deleted on print, or within 3 hours, as above.
- Job counts, used for the live queue and for shops' monthly usage: kept in aggregate.
- An Owner's account and Shop details: kept for as long as the Shop is active, and removed on request once a Shop is closed (see Section 5).
- Paytm credentials, if given: encrypted at rest, removed immediately if automatic confirmation is turned off or the Shop is closed.
4. Who we share data with
We do not sell personal data. We share only what is necessary to run the service:
- Payment confirmation: the Shop's own Paytm account, used read-only, as above.
- Phone verification: Google Firebase sends and checks the one-time login code, so it receives the Owner's phone number for that purpose.
- Subscription payments: Razorpay processes a Shop's payment for its ScanPrint plan and tells us the result. It is the Shop paying ScanPrint for the plan — never a Student's payment.
- Our hosting provider (Oracle Cloud), which stores data on our behalf under its own security commitments.
- Anyone required by Indian law, if we receive a valid legal order.
5. Your rights
You can ask us what we hold about you, ask us to correct it, or ask us to delete it — subject to what we're required to keep for legal or accounting reasons (for example, a Shop's paid invoices). Write to the Grievance Officer on our Contact page with the subject "Data request". We aim to respond within 15 days.
This policy will be updated as the Digital Personal Data Protection Act, 2023 and its rules come fully into force, and after the legal review mentioned above.
6. Children
ScanPrint is built for use at a shop counter by whoever is sending a print job — typically students at or above college age. We do not knowingly build profiles of, or market to, children.
7. Security
Data in transit is encrypted (TLS). Sensitive credentials, such as a Shop's Paytm API keys, are encrypted at rest. A Shop's desktop app is verified against ScanPrint's own certificate before it will pair or accept jobs.
8. Changes to this policy
If this policy changes in a way that matters, we'll post the update here with a new date, and Shop Owners will see a notice in the app.
9. Contact
Questions about this policy, or a complaint about how we've handled your data, go to the Grievance Officer listed on our Contact page.