Privacy Policy

Who this policy covers

Amigo Softcom LLP operates LittleSpend at littlespend.com. This policy covers the current website and phone sign-in service. It does not describe an unreleased app or integrations that have not been enabled. Our privacy contact is Shashank Jain, shashank@amigo.gg, +91 9910074373.

Information we collect

We collect information needed to run the service:

• Your mobile number and account timestamps when you verify a sign-in code.
• Seller applications include business identity, public support contacts, dispatch/return addresses, GSTIN where supplied, delivery coverage and charges. We also store submitted product content, images, offer inventory, review feedback and seller fulfilment reports.
• Verification request times, outcomes, attempt counts and a hashed IP address for rate limiting and abuse prevention. Twilio verification identifiers link our requests to the SMS provider.
• Random session identifiers, stored as hashes on our server, and a signed browser cookie containing session and sample-bag information.
• Technical request information in hosting/access logs, such as IP address, requested URL, browser information and request time.
• Information you choose to provide when contacting support. Do not send OTPs, financial credentials or unnecessary information about children.
• When ordering is enabled: recipient name, delivery address, order items, prices, fulfilment/tracking events, return requests and payment/refund references. The verified phone is used for delivery and support.

How we use information

We use this information to verify access, maintain accounts and bags, process orders, coordinate delivery, cancellations, returns and refunds when ordering is enabled, operate and secure the site, prevent SMS abuse, respond to requests and meet applicable legal obligations. OTPs are processed for verification and are not stored as plaintext in our application database. We do not use sign-in as consent to marketing.

Service providers and disclosures

DigitalOcean hosts our application and database. Twilio Verify receives your mobile number and verification information to deliver and check SMS codes. SMS delivery involves telecom providers. Google Fonts receives ordinary web-request information when your browser loads fonts from Google’s servers.

For marketplace orders, the approved seller receives customer contact, address and order details for its own orders through a restricted seller workspace, for fulfilment and support. We also share the recipient name, delivery address, contact number, parcel and COD details with the courier or fulfilment provider needed to deliver your purchase. Accounting and refund processing use the records needed for those tasks. Ask support for the provider associated with your order.

Our current website has no Google Analytics, Meta Pixel, Facebook Login or advertising SDK integration. We do not sell personal information. We may disclose information where required by law or necessary to protect the service and users. We will update this policy before introducing materially different uses or providers.

Providers may process data outside your country. Their infrastructure and retention practices apply to information they process; see their privacy notices linked below. We do not promise that all data stays in India.

Retention and deletion

Deleting a seller owner account pauses selling and removes the workspace account link. Seller business, product, order and financial records remain for fulfilment, reconciliation and applicable retention obligations. A later signup does not automatically recover the seller workspace. Contact support to resolve outstanding seller obligations.

Account information remains while your account is active. Customer sessions expire after 30 days at the server; admin sessions expire after eight hours. Expired sessions and verification records older than 24 hours are pruned on subsequent accepted code requests, so physical removal may occur later.

Our account-deletion control removes your account, all its login sessions and verification records for its phone number from the active application database. You are signed out and this browser’s bag is cleared. Unused and pending promotional cashback is forfeited when an account is deleted. Cashback grants, redemption and seller-funding audit records are retained with the account link removed for reconciliation and legal obligations. Order records are retained separately for fulfilment, support, accounting and legal obligations; account deletion does not cancel orders. Operational logs, existing backups, support correspondence and provider-held records are also separate from the active account database and may remain for security, recovery or legal purposes. For information about retention or removal of these separate records, contact our privacy contact.

Your choices

You can browse without signing in, sign out, clear browser cookies, or delete your account through Account & data deletion. Contact us to request access, correction or help with other personal information. We may verify your identity before acting. Disabling essential cookies prevents sign-in and the bag from working.

Children and household information

LittleSpend is intended for adults shopping for household needs. Selling baby products does not make the service intended for children. We do not ask for children’s names, dates of birth, health information, photos or contact details. If a child has supplied personal information, contact us for assistance.

Security and changes

We use HTTPS, restricted administrative access, expiring verification challenges and session controls. No online service can promise absolute security. Material changes will be reflected in this policy with an updated date and, where appropriate, an additional notice or consent request.

Provider privacy information

• DigitalOcean privacy policy
• Twilio privacy notice
• Google privacy policy