Privacy Policy
Effective Date: May 25, 2025 · Last Updated: May 25, 2025
This Privacy Policy describes how PointMe (“we,” “our,” or “us”) collects, uses, stores, and protects personal information of users who access or use our platform at pointme.cc. By using our Service, you agree to this Policy. If you do not agree, please discontinue use immediately.
1. Information We Collect
Information You Provide Directly
When you register or use our Service, we collect:
- Full name and email address
- Username and password (encrypted)
- Profile photo, bio, and description text
- Links and URLs you add to your page
- Business name and category (for business accounts)
- Payment information (processed securely — we never store raw card data)
- Communications you send to our support team
Information Collected Automatically
When you use the Service, we automatically collect:
- IP address and approximate geolocation
- Browser type, version, device type, and operating system
- Pages visited, time spent, and click/interaction data
- Referring website or traffic source
- Cookies and similar tracking technologies (see Section 6)
Information from Third Parties
If you connect a third-party account (e.g., Google) to our Service, we may receive basic profile information as permitted by those platforms and your privacy settings.
2. Legal Basis for Data Collection
In compliance with the Individual Privacy Act, 2075 (Nepal), we process your personal data only on the following lawful bases:
- Consent — you have given clear, informed, and explicit consent.
- Contractual Necessity — processing is required to provide the Service.
- Legal Obligation — compliance with applicable Nepali law.
- Legitimate Interests — necessary for our business, provided they do not override your fundamental rights.
We ensure your consent is obtained before collection, you are informed of the purpose and scope, and data collected is limited to what is necessary.
3. How We Use Your Information
To Provide and Improve the Service
- Create and manage your account
- Display and operate your link-in-bio page
- Process payments and subscriptions
- Provide customer support
- Improve, personalize, and develop new features
Analytics and Performance
- Provide click analytics and traffic data for your page
- Analyze usage patterns to improve the Service
- Generate aggregated, anonymized reports
Communications
- Transactional emails (account confirmation, password reset, billing)
- Service updates and policy changes
- Marketing communications (only with your explicit consent, always with an unsubscribe option)
Ad Revenue Program
If you opt into our Ad Revenue Sharing Program, we use your data to determine page eligibility, facilitate ad display, process revenue share payments, and share necessary data with advertising partners. Participation is entirely voluntary and you may opt in or out at any time via your account settings.
4. Data Sharing and Disclosure
We do not sell, rent, or trade your personal information. We share data only in these circumstances:
Service Providers
Trusted third-party companies (hosting, payment processing, email delivery, analytics, customer support) contractually bound to handle your data only as specified.
Advertising Partners (Ad Revenue Program Only)
Limited aggregated traffic and analytics data — never personally identifiable information without your explicit consent.
Legal Requirements
We may disclose data when required by a valid court order, law enforcement authorities, or legal obligations under Nepali law.
Business Transfers
In a merger or acquisition, your data may transfer to a successor entity. We will notify you and ensure continued protection.
5. Data Retention
- Account data: duration of active account plus 2 years after closure
- Transaction records: 5 years as required by financial regulations
- Analytics data: up to 2 years in aggregated and anonymized form
- Support communications: 1 year after resolution
Upon a deletion request, we erase your personal data within 30 days, except where retention is required by law.
6. Cookies and Tracking Technologies
- Essential Cookies — required for basic Service functioning; cannot be disabled.
- Analytical Cookies — understand how users interact with the Service; used with your consent.
- Preference Cookies — remember your settings and preferences.
- Marketing Cookies — deliver relevant ads in the Ad Revenue Program; only active if you opt in.
You may manage cookie preferences through your browser settings. Disabling certain cookies may affect Service functionality.
7. Your Rights
Under the Individual Privacy Act, 2075 and Article 28 of the Constitution of Nepal, you have the following rights:
- Access — request a copy of the personal data we hold about you.
- Rectification — request correction of inaccurate or incomplete data.
- Erasure — request deletion of your personal data (subject to legal retention requirements).
- Withdraw Consent — withdraw consent at any time without affecting prior lawful processing.
- Object — object to processing for marketing or non-essential purposes.
- Data Portability — request your data in a structured, commonly used format.
To exercise any of these rights, contact us at legal@pointme.cc. We will respond within 30 days. If unsatisfied, you may file a complaint with the relevant District Court of Nepal within 3 months of the incident.
8. Data Security
We implement technical and organizational measures including:
- SSL/TLS encryption for data in transit
- Encrypted storage of passwords
- Access controls limiting data access to authorized personnel
- Regular security assessments and audits
- Secure data backup systems
No internet transmission is completely secure. In the event of a data breach affecting your rights, we will notify you and relevant authorities as required by law.
9. Children's Privacy
Our Service is not directed to individuals under 13. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us data, contact us immediately and we will delete it promptly.
Users between 13 and 18 require parental or guardian consent, in compliance with Section 16 of the Individual Privacy Act, 2075.
10. Cross-Border Data Transfers
Some data may be processed or stored on servers outside Nepal. We ensure appropriate safeguards so your data is protected to the same standard as within Nepal and in compliance with applicable Nepali law.
11. Changes to This Policy
When we make material changes, we will:
- Update the "Last Updated" date at the top of this Policy
- Notify you via email or a prominent notice on the Service
- Seek your renewed consent where required by law
Your continued use of the Service after the effective date constitutes acceptance of the revised Policy.
12. Contact Us
For questions, concerns, or requests regarding this Privacy Policy, contact us:
For grievances under Nepali law, you may also approach the relevant District Court of Nepal.
© 2026 PointMe. All rights reserved.