Privacy Policy

This Privacy Policy explains how ShelfSpace ("we", "us") collects, uses and protects information when library owners, staff, administrators, and authorized student members use our platform. We follow the principles of India's Digital Personal Data Protection Act, 2023 (DPDP).

Information we collect

• Account data: name, phone number, email (optional) and role.
• Operational data: shifts, seat assignments, subscriptions, attendance and payments.
• Optional identity data (e.g. ID number) only when a library chooses to collect it; stored as a hash, never in plain text.

How we use it

We use data solely to operate the service for the library: authentication, seat and fee management, attendance, notifications and reporting. We do not sell personal data.

Authentication & security

Login uses a password and a session PIN — we do not send SMS OTPs. PINs and passwords are stored only as salted hashes. Repeated failed attempts trigger progressive lockouts.

Consent

Libraries can collect and record consent at registration. The timestamp and IP of consent are recorded where this workflow is enabled. Consent can be withdrawn by contacting the library.

Your rights (DPDP)

• Access and correction of your personal data.
• Right to erasure — a library owner can anonymise a member record on request; financial records may be retained where law requires.
• Grievance redressal via the contact below.

Data retention

We retain data for as long as the library account is active or as required by law. Anonymised analytics may be kept indefinitely.

Contact

For privacy questions, email hello@shelfspace.example.