Privacy policy
Last updated: 4 October 2026
The short version
- HopDeal is run by Aira Samriddhi Pvt. Ltd., India. We make discount games that brands put on their websites, Shopify stores and in their shops.
- When you play a brand's game, the brand decides what we collect. Often it's nothing personal; sometimes it's your mobile number or email address. We use it only to run the game for that brand.
- We never sell personal data, and we don't use it for our own advertising.
- From Shopify stores we read only the discount code, order number and amounts of orders that used a HopDeal code. We don't store customers' names, emails or addresses.
- You can ask for your data to be shown, corrected or deleted at any time: support@gethopdeal.com.
1. Who we are, and our role
"HopDeal", "we" and "us" mean Aira Samriddhi Pvt. Ltd., 53, BAKOLI, DELHI, INDIA. This policy covers gethopdeal.com, the HopDeal games, the brand dashboard and the HopDeal app for Shopify.
We play two roles:
- For brands (our customers, including Shopify merchants), we decide how their account data is used. Under India's Digital Personal Data Protection Act, 2023 (DPDP Act) we are the Data Fiduciary for it (the "controller" under the EU and UK GDPR).
- For shoppers who play a brand's game, the brand decides why the data is collected and is the Data Fiduciary (controller). We process it on the brand's behalf as its Data Processor, only to run the game and give the brand its results. The brand's own privacy notice, linked from its game, also applies.
2. What we collect
From shoppers who play a game
| Data | When | Why |
|---|---|---|
| Mobile number or email address | Only if the brand asks for one before you play | To allow one game per person per day, and to show your code again if you come back |
| One-time code sent by SMS or WhatsApp | Only if the brand chooses to verify numbers | To check the number is yours. Deleted within 24 hours |
| Marketing consent: yes or no, the exact wording you agreed to, and when | Only if you tick the optional box | So the brand can prove you agreed before sending you offers. Without the tick, the brand must not message you |
| Game results: discount won, the unique code, when it was issued, used or expired | Every game | To issue a single-use code and apply the brand's daily limits |
| A random device ID stored in your browser, your IP address and the browser type | Every game | To stop abuse (for example, someone playing hundreds of times) and keep the service secure |
From Shopify stores (the HopDeal app for Shopify)
- The store's address (myshopify.com domain), name, primary website address and the store contact email, plus an access key Shopify gives us when the app is installed.
- For orders that used a HopDeal code: the code, the order number and ID, the order total and the discount amount. Shopify sends us the whole order, but we keep only these fields and discard the rest, including the customer's name, email, phone and address.
- The store's HopDeal plan and its status, from Shopify Billing. Shopify handles all payments; we never see card details.
The app asks Shopify for two permissions only: create discount codes (write_discounts) and read orders (read_orders).
From brands with a HopDeal account
- Name, email, password (stored only as a secure hash), website, the platform the store runs on, logo, colours and game settings.
- Plan and payment status. Payments by card or UPI are handled by Razorpay; we receive only the subscription status, never card or bank details.
- Login records (time and session) to keep accounts secure.
Cookies and browser storage
- Login cookies for the brand dashboard and the staff code-check page. They are needed to stay logged in and are deleted when you log out or they expire.
- Browser storage on a brand's website: the HopDeal pop-up remembers whether you closed it and the code you won, so it doesn't keep reappearing and your code stays handy. This stays in your browser and you can clear it at any time.
- We don't use advertising or tracking cookies, and we don't run third-party analytics.
3. How we use it
- To run the games, issue and check discount codes, and apply each brand's limits.
- To create the discount codes in a brand's Shopify store, put a code in a shopper's cart when they tap "Apply", and count the sales from codes on the brand's dashboard.
- To give each brand its results, and its list of players who agreed to receive offers.
- To run brand accounts: log-in, password resets, billing and support.
- To keep HopDeal secure and prevent fraud and abuse.
- To meet legal obligations, such as tax records and lawful requests from authorities.
For brands, our terms of service include the data processing terms that apply to shoppers' data.
Our legal basis: your consent where we ask for it, the performance of our contract with the brand, and legitimate uses allowed by law (such as preventing fraud and keeping records the law requires). We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. The discount you win depends on the game, not on who you are.
4. Who we share it with
We don't sell or rent personal data. We share it only with:
- The brand whose game you played. It sees the results, the codes and, if it asked for them, numbers, with each person's marketing consent.
- Service providers who help us run HopDeal, under contracts that let them use the data only for us:
- Railway (hosting and database)
- Shopify (for stores using our Shopify app)
- Razorpay (payments for brands paying in India)
- An SMS or WhatsApp provider such as MSG91, 2Factor or Meta, only when a brand verifies numbers
- Resend (account emails, such as password resets)
- Authorities, when the law requires it.
- A buyer of our business, if HopDeal is sold or merged, under the same protections as this policy.
5. Where it is stored
Our servers and those of our providers may be outside India, including in the United States. When data leaves India, or leaves the EU or UK, we rely on the safeguards the law requires, such as contractual protections with our providers.
6. How long we keep it
- One-time verification codes: deleted within 24 hours.
- Shoppers' numbers, consent records and game results: kept while the brand's game account is active, so the brand can check codes and honour its offers. The brand can delete any person's data at any time from its dashboard.
- Shopify stores: when a store uninstalls HopDeal, we turn its game off and delete the access key immediately. When Shopify sends its data-deletion request (48 hours after uninstall), we delete the store's account, games, players and codes.
- Brand accounts: kept while the account is open. When a brand asks us to close it, we delete its data within 30 days, except records we must keep by law, such as invoices.
- Server logs: kept for a short time for security and troubleshooting, then deleted by our hosting provider.
7. Your rights
Depending on where you live (under India's DPDP Act, the EU/UK GDPR, or US state laws such as the CCPA), you can:
- get a summary of the personal data we hold about you and who it was shared with;
- ask us to correct, complete or update it;
- ask us to delete it;
- withdraw your consent at any time. This doesn't affect anything done before you withdrew it;
- object to or restrict some uses, and get a copy of your data in a usable format (GDPR);
- nominate someone to act for you if you die or can't act yourself (DPDP Act);
- complain to us, and then to the regulator: the Data Protection Board of India, or your local data protection authority.
To use these rights: email support@gethopdeal.com. For a game you played, include the brand's name and the mobile number you used. Because we act for the brand, we may pass your request to the brand, or handle it with the brand's agreement. We reply within 30 days. We will never charge you or treat you differently for asking.
Shopify customers: requests made through a Shopify store reach us automatically through Shopify's privacy webhooks, and we act on them.
8. Children
HopDeal is not meant for anyone under 18, and we don't knowingly collect children's data. If you think a child has given us their number, email us and we will delete it.
9. Security
We use encrypted connections (HTTPS) everywhere and store passwords only as secure hashes. Access to data is limited, and codes are random, single-use and expire. Logins and plays are rate-limited to stop abuse. No system is perfectly secure. If a breach affects your data, we will tell you, the brand and the authorities as the law requires.
10. Changes to this policy
If we make important changes, we'll update the date at the top. Brands will also get an email or a notice in their dashboard before the change takes effect.
11. Contact and grievances
Aira Samriddhi Pvt. Ltd. (HopDeal)
53, BAKOLI, DELHI, INDIA
Grievance Officer: Amarjeet Chauhan
Email: support@gethopdeal.com
We acknowledge complaints within 48 hours and resolve them within 30 days.