Privacy Policy

Effective date: 18 May 2025

1 Who We Are

Santosha Digital US Ltd. ("we", "our", "us") operates the Lucrum Cash point‑of‑sale mobile application (the "App").

2 Scope

This Policy explains how we collect, use, disclose and protect Personal Data of people who use the App in the United States, Canada, and Brazil.

3 Information We Collect

Category	Details	Source
Profile Data	Optional display name, avatar image, and status message.	Provided by you.
Transaction Data	Card‑present payment details processed by Stripe.	Generated during checkout.
Location Data	Precise device latitude/longitude at time of payment, required by Stripe for fraud prevention.	Collected automatically by the App.

We do not collect passwords or other authentication credentials.

4 How We Use Personal Data

Provide Services. Run point‑of‑sale transactions and display your profile.
Legal Compliance. Meet tax, accounting, and anti‑fraud obligations.
Security & Fraud Prevention. Validate terminal location via Stripe, monitor for abuse.
Customer Support. Respond to inquiries and troubleshoot issues.

5 Legal Grounds for Processing

Region	Main Legal Basis
United States	Performance of a contract; our legitimate interests in operating the App.
Canada (PIPEDA)	Collection is reasonable for the stated purposes; consent is implied by use of the App.
Brazil (LGPD)	Art. 7(VI) performance of a contract and Art. 10 legitimate interest; cross‑border transfer under Art. 33(I) via contractual safeguards.

6 Sharing & Third‑Party Processing

We share Personal Data only with:

Stripe, Inc. – payment processing (PCI‑DSS Level 1). Stripe may store location data as required for authentication.
Infrastructure and analytics providers who host servers or help us understand service performance (bound by confidentiality obligations).

We do not sell or rent Personal Data.

7 International Transfers

Data may be stored and processed in the United States. Where required, we rely on standard contractual clauses or equivalent safeguards for transfers from Canada or Brazil.

8 Retention

Data Type	Retention Period
Profile Data	Until you delete it or remove the App.
Transaction Data	Up to 7 years to satisfy accounting and anti‑fraud obligations.
Location Data	Not stored by us after transmission to Stripe.

We periodically review our holdings and delete or anonymize data that is no longer needed.

9 Security Measures

Encryption in transit (TLS 1.2+)
Least‑privilege access controls
Continuous monitoring and logging
Payment credentials handled exclusively by Stripe using PCI‑DSS Level 1 controls

10 Your Rights

Depending on your jurisdiction, you may have the right to:

Access a copy of Personal Data we hold about you.
Correct inaccurate or incomplete data.
Delete Personal Data.
Withdraw consent (where processing is based on consent).
Port data in a structured, machine‑readable format (Brazil & Canada).
Complain to a supervisory authority.

To exercise these rights, email support@lucrum.cash.

11 Children

The App is not directed to children under 13 (U.S.) or under 16 (Canada/Brazil). We do not knowingly collect data from minors. If you believe a child has provided Personal Data, contact us and we will delete it.

12 Changes to This Policy

We may update this Policy from time to time. Material changes will be highlighted in‑App or via email. The "Effective date" above indicates the latest revision.

13 Contact Us

Santosha Digital US Ltd.
503‑5970 Indian Creek Dr.
Miami, FL 33140, USA
Email: support@lucrum.cash