Welcome to Sankro.io. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our item tracking and recovery service through QR codes, NFC tags, and other identification methods.

By using Sankro.io, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

1. Information We Collect

1.1 Personal Information

When you register for and use Sankro.io, we may collect the following personal information:

• Account Information: Name, email address, phone number, and password
• Contact Details: Alternative contact methods for communication relay purposes
• Profile Information: Any additional information you choose to provide in your profile
• Communication Preferences: Your preferences for receiving notifications via email, SMS, WhatsApp, or phone calls

1.2 Item Information

Information about items you tag with our service:

• Item descriptions and categories (keys, bags, laptops, pets, etc.)
• Custom messages or instructions for finders
• Tag identifiers (QR codes, NFC tag IDs)
• Photos or images of tagged items (optional)

1.3 Communication Data

When communications are relayed through our system:

• Message content sent through our relay system
• Communication timestamps and metadata
• Authenticity verification logs
• Sender and recipient information (anonymized through our relay)

1.4 Technical Information

• Device information (device type, operating system, browser type)
• IP address and location data (approximate)
• Usage data and analytics
• Cookies and similar tracking technologies

2. How We Use Your Information

Sankro.io uses the collected information for the following purposes:

2.1 Service Delivery

• To create and manage your account
• To generate and manage QR codes and NFC tags for your items
• To facilitate communication between finders and owners of lost items
• To relay messages securely through our intermediate communication system

2.2 Security and Authentication

• To verify the authenticity of messages before delivery
• To protect against fraud, spam, and malicious activities
• To maintain the security and integrity of our service
• To validate the legitimacy of communication requests

2.3 Service Improvement

• To analyze usage patterns and improve our services
• To develop new features and functionality
• To troubleshoot technical issues
• To conduct research and analytics

2.4 Communication

• To send service-related notifications and updates
• To respond to your inquiries and support requests
• To send important security alerts
• To provide marketing communications (with your consent)

3. Communication Relay System

3.1 Message Authentication

Before any message is delivered to you, our system:

• Verifies the source of the communication
• Checks for spam, phishing attempts, and malicious content
• Validates that the communication relates to your registered items
• Filters out suspicious or potentially harmful messages
• Logs all communication attempts for security purposes

3.2 Privacy Protection

Our relay system ensures:

• Your phone number, email, and other contact details remain private
• Finders can only contact you through our secure channels
• You maintain control over who can reach you
• You can block or report suspicious communications

4. Information Sharing and Disclosure

4.1 We DO NOT Share Your Personal Information

Sankro.io does not sell, trade, or rent your personal information to third parties. Your contact details and account information are kept strictly confidential.

4.2 Limited Sharing Scenarios

We may share information only in the following circumstances:

• With Your Consent: When you explicitly authorize us to share specific information
• Service Providers: With trusted third-party service providers who assist in operating our service (email providers, SMS gateways, cloud hosting), under strict confidentiality agreements
• Legal Requirements: When required by law, court order, or government regulation
• Safety and Security: To protect the rights, property, or safety of Sankro.io, our users, or the public
• Business Transfers: In the event of a merger, acquisition, or sale of assets, with advance notice to users

4.3 Anonymous Information

We may share aggregated, anonymized data that cannot identify you personally for research, analytics, or marketing purposes.

5. Data Security

We implement robust security measures to protect your information:

5.1 Technical Safeguards

• End-to-end encryption for sensitive communications
• Secure socket layer (SSL/TLS) technology for data transmission
• Encrypted database storage
• Regular security audits and vulnerability assessments
• Firewall protection and intrusion detection systems

5.2 Operational Safeguards

• Strict access controls and authentication requirements
• Employee training on data protection and privacy
• Regular backup and disaster recovery procedures
• Secure data centers with physical security measures

5.3 Authentication System

• Multi-factor authentication for account access
• Automated message verification before delivery
• Real-time threat detection and prevention
• Continuous monitoring for suspicious activities

6. User Safety Recommendations

6.1 Best Practices for Safe Communication

• Verify Identity: Always confirm the finder's identity through multiple exchanges before sharing sensitive information
• Meet in Public: Arrange to meet in safe, public locations to retrieve lost items
• Avoid Sharing: Never share financial information, passwords, or sensitive personal details
• Be Suspicious: Be wary of requests for money, urgent demands, or unusual payment methods
• Report Suspicious Activity: Immediately report any suspicious communications to our support team
• Trust Your Instincts: If something feels wrong or too good to be true, it probably is

6.2 Red Flags to Watch For

• Requests for money or rewards before item return
• Pressure to act quickly or urgently
• Unusual or suspicious email addresses or phone numbers
• Poor grammar or spelling in professional-looking messages
• Requests to communicate outside the Sankro.io system
• Demands for personal or financial information

7. Your Rights and Choices

7.1 Access and Control

You have the right to:

• Access your personal information stored in our system
• Update or correct inaccurate information
• Delete your account and associated data
• Export your data in a portable format
• Opt-out of marketing communications
• Control your communication preferences

7.2 Data Retention

We retain your information for as long as:

• Your account is active
• Necessary to provide our services
• Required by law or for legal purposes
• Needed to resolve disputes or enforce agreements

After account deletion, we may retain certain information in anonymized form for analytics and service improvement.

7.3 Cookie Management

You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of our service.

8. Children's Privacy

Sankro.io is intended for users aged 13 and above. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information from our systems.

For users aged 13-18, we recommend parental guidance when using our service, especially when tagging items or communicating through our relay system.

9. International Data Transfers

Sankro.io primarily operates in India. If you access our service from outside India, please be aware that your information may be transferred to, stored, and processed in India where our servers are located. By using our service, you consent to the transfer of your information to India and other countries where we operate.

We ensure that any international data transfers comply with applicable data protection laws and regulations.

10. Third-Party Services

Our service may contain links to third-party websites, applications, or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access.

10.1 Third-Party Service Providers

We may use third-party services for:

• Email delivery (e.g., SendGrid, Amazon SES)
• SMS and WhatsApp messaging gateways
• Cloud hosting and storage (e.g., AWS, Google Cloud)
• Analytics and performance monitoring
• Payment processing (if applicable)

All third-party service providers are carefully vetted and required to maintain strict confidentiality and security standards.

11. Compliance with Indian Laws

Sankro.io complies with applicable Indian data protection laws and regulations, including:

• Information Technology Act, 2000
• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• Other applicable laws and regulations governing data privacy and protection in India

We continuously monitor changes in legislation to ensure ongoing compliance with evolving privacy requirements.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email or through a prominent notice on our platform
• Request your consent if required by applicable law

We encourage you to review this Privacy Policy periodically. Your continued use of Sankro.io after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

14. Acknowledgment and Consent

By creating an account and using Sankro.io, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. You consent to the collection, use, and disclosure of your information as described in this policy.

If you do not agree with any part of this Privacy Policy, you must not use our service.