Draft. Anything marked “to be confirmed” is a business decision that hasn’t been made yet, and these pages still need a lawyer’s review before ScanPing takes an order.

Legal

Privacy policy

Last updated 1 October 2026

ScanPing lets someone reach the owner of a vehicle without either of them seeing the other’s number. This page covers what that takes from the owner who puts up a sticker and from the person who scans it, and what happens to it afterwards.

The short version

  • Someone who scans your sticker sees its code and the actions you allow. They never see your plate or address, and they see your name or number only if you switch that on yourself.
  • Someone who scans isn’t asked for their name, their number or an account.
  • There’s no advertising. We count page visits with Google Analytics, without the sticker codes or links in the address, to see what people use.
  • You can see every device signed in to your account, and sign any of them out.

ScanPing is run by SCANPING (proprietorship of Subhadip Das), Islampur, Nahata, Gopalnagar, Bongaon, North 24 Parganas, West Bengal – 743290 (“we”). Under the Digital Personal Data Protection Act, 2023, that business is responsible for the personal data described here.

If you own a sticker

  • Your mobile number. It’s how you sign in (we text a one-time code to it) and the number a sticker leads back to.
  • Your profile. A name and an email address if you add them, and the language and time zone you choose.
  • Your vehicles. The kind of vehicle, its nickname, and any details you choose to add, such as make, model, colour, year and registration number, along with the stickers linked to it.
  • Your settings. Which actions strangers can take through your stickers, and whether your name or number is shown to them.
  • Your emergency contact. The name, number and relationship of the person you nominate. They get a text if someone opens an emergency case on your vehicle, so let them know you’ve added them.
  • Your signed-in devices. For each one, the kind of device and browser, its network (IP) address and when it was last used. You can see these in Settings.
  • Phone notifications, if you turn them on: a notification token from your browser, kept on your device and with Google Firebase Cloud Messaging, which delivers the notifications.
  • Orders. Your name, delivery address and phone number, and a record of the payment. Payments are taken by Razorpay; we never receive your full card number, UPI PIN or banking password.
  • Support. What you tell us when you get in touch, and our replies.

If you scan a sticker

  • The scan itself. When it happened, which sticker, your network (IP) address, your browser and kind of device, and the page that sent you, if any.
  • What you choose to send. The reason you pick, any note you write, a report, or an emergency case and what you say in it.
  • Your location, only if you tap to share it and allow your browser to give it.
  • Replies. If you keep the conversation open, the messages you and the owner exchange. It closes by itself 24 hours after it opens.

You don’t need an app or an account, and you’re not asked for your name or number.

The owner sees the reason, your note, any report, the time and the kind of device, and your location only if you shared it. They don’t see your number, your network address or your browser details: those stay with us, for running the service and stopping abuse.

How we use it

  • To run ScanPing: to get a scan to the right owner, pass replies both ways, text the emergency contact, and show owners their history.
  • To sign you in and keep your account secure.
  • To stop abuse. A scan’s network address is how we cap the messages one person can send and notice bursts of scans.
  • To deliver orders and deal with returns.
  • To answer you when you contact us.
  • To do what the law requires of us.

You give us this information by signing up, or by choosing to send something through a sticker, and we use it for that purpose. We don’t use it for advertising and we don’t sell it.

Who sees it

The other side of the conversation. The owner sees what’s listed above. The person who scanned sees whether the owner was told, and any replies, and the owner’s name or number only if the owner switched it on.

Your emergency contact. When someone opens an emergency case on your vehicle, they get a text with your vehicle’s nickname, what the person who scanned wrote about it, and a case number. It carries no link, and nothing about the person who scanned.

Companies that run parts of ScanPing for us. They may use it only to do that:

  • Text messages (sign-in codes and emergency texts): GoSMS
  • WhatsApp messages: Meta (WhatsApp Business Platform)
  • Masked phone calls: Plivo
  • Phone notifications: Google Firebase Cloud Messaging
  • Counting page visits: Google Analytics
  • Servers and database: Hostinger
  • Photos and voice notes, once they’re offered: Hostinger
  • Payments: Razorpay
  • Delivery: our courier partner may vary; orders ship through the logistics partners ScanPing selects

Authorities, when the law requires us to share it.

Where it’s kept, and for how long

Our servers are in India. The providers listed above that deliver messages, calls and notifications handle them on their own systems, which may be outside India.

Some of it expires by itself: a sign-in code stops working after a few minutes, and a reply conversation closes 24 hours after it opens.

We keep scans, messages, reports and emergency cases for 12 months, and anything left after you close your account for 30 days. Order records are kept as long as tax law requires.

Your rights

  • See what we hold about you, and who we’ve shared it with. Ask us.
  • Correct it. Edit your profile, vehicles and settings in the app, or ask us.
  • Close your account. In Profile. It signs you out on every device. Closing doesn’t erase your data; to have it erased, ask us.
  • Have it erased, except what the law makes us keep.
  • Name someone to use these rights for you if you die or can’t act for yourself.
  • Complain. Go to our grievance officer first (below). If you’re not satisfied, you can go to the Data Protection Board of India.

We answer requests within 30 days, subject to applicable law.

Cookies and storage

pp_access_token and pp_refresh_token
Cookies that keep you signed in, the second for up to 30 days. They’re set only when you sign in, page scripts can’t read them, and they go only to ScanPing.
pp_push_token
Kept in your browser’s storage, only if you turn on phone notifications.
An offline copy
ScanPing keeps a few of its own files on your device so it can open, and say when you’re offline.
_ga and _ga_*
Google Analytics cookies that count visits to each page, for up to two years. Google is sent which kind of page you opened, never its sticker code, link or anything you typed, and its advertising features are switched off.

No advertising cookies, and no other third-party trackers.

Age

You must be 18 or older to have a ScanPing account. If you think a child has given us personal information, tell us and we’ll delete it.

Security

You sign in with one-time codes sent to your phone, your session is held in cookies page scripts can’t read, and every signed-in device is listed in Settings for you to sign out. No system is perfectly secure. If you think someone else has been in your account, sign out every device in Settings and contact us.

Changes to this policy

When this policy changes, so does the date at the top.

Contact and grievances

Grievance officer: Subhadip Das
Email: [email protected]
Phone: 8910893882
Post: Islampur, Nahata, Gopalnagar, Bongaon, North 24 Parganas, West Bengal – 743290

For anything else, email [email protected].