Website forms
The IIS form handler requires HTTPS, validates submitted fields and forwards the expected fields to Power Automate. The signed flow URL stays in server configuration and is excluded from public website bundles. Production configuration must be checked after each deployment.
Face-data protection
Face registration is optional, requires explicit consent and is available only to users aged 18 and over. We never store raw photos: we store only an encrypted face template. Templates are stored in India on Amazon Web Services and Google Cloud servers in Mumbai. These providers host the data for us; no third party receives access for its own purposes. Nothing is stored on the kiosk.
Deletion and separate records
You can delete your face data yourself from Profile in the app. It is permanently erased within 30 days. Payment and transaction records are stored separately and retained for as long as the law requires. Another way to pay is always available at checkout.
Limits of automated controls
The current website handler includes temporary per-worker rate limits and request identifiers. Restarts, cache eviction and multiple workers can affect those controls. These measures do not guarantee the prevention of abuse or duplicate submissions.
Payment roles
The ShigramPay wallet is a semi-closed prepaid payment instrument (PPI) issued by Transaction Analysts (India) Pvt. Ltd., an RBI-authorised PPI issuer. ShigramPay Private Limited provides the technology platform; it is not the wallet issuer. The issuer’s own terms and security arrangements apply to its payment services.
Report a security concern
Email support@shigrampay.com with the affected page and a concise description. Provide the minimum information needed to investigate, avoid sending secrets or other customers’ data, and do not disrupt services. Escalate to vijayesh@shigrampay.com if necessary.