Privacy policy

Last updated: 12 November 2026

Who we are

Sanmaan is operated by Tushar Mali, an individual based in India. Postal address: [Address to be added]. Email: tusharmali1972@gmail.com.

Your lists, designs and certificates

• When you open or paste an Excel/CSV file, it is read by code running in your browser. The rows are never sent to Sanmaan or anyone else.
• Designs you upload (for example a Canva export), logos and signatures are processed the same way, on your device.
• The PDFs and ZIP files are created in your browser and saved straight to your computer.
• So you can pick up where you left off, the editor saves your current project (including the list and images) in your browser's local storage on that device. “Start over” in the app clears it, and clearing your browser's site data removes it completely.

QR verification

• If you turn on QR verification, your browser creates a signing key for your organisation and keeps it in local storage on your device. We never receive it. Use “Back up issuer key” in the app to keep a copy safe.
• Each QR code contains the details printed in it (recipient name, what it's for, date, organisation, serial number) plus a signature. That information is printed on the certificate, so treat it like the certificate itself.
• The verify page (sanmaan.app/v/) reads these details only from the link. They sit after the “#” in the address, which browsers do not send to our server, and the check runs on the visitor's device.

Payments and licence keys

• Payments are handled by Razorpay (India) and Dodo Payments (international, acting as merchant of record). They collect your payment details and contact information under their own privacy policies. We never see your card or bank details.
• After payment, your browser sends the payment ID to our licence endpoint. It looks the payment up with the payment provider to confirm it, then returns a licence key. The key contains your plan, purchase date, payment reference and the email address you paid with. We don't keep a customer database; the payment providers keep the records of the transaction.
• Your licence key is checked inside your browser and saved in local storage, so no account or login is needed.
• If you email us (for example for support or a refund), we use your email only to reply and keep it as long as needed for that.

Hosting, cookies and analytics

• The website is served as static files by a hosting/CDN provider, which, like any web server, may briefly process technical data such as your IP address and browser type to deliver pages and protect against abuse.
• We do not use advertising, tracking cookies or third-party analytics. Fonts are served from our own site.

Your choices and rights

Because your lists and designs never reach us, there is nothing of yours on our side to access or delete — you control it in your browser. For anything related to a payment or an email you sent us, you can ask us to access, correct or delete your information (subject to records we must keep by law, such as invoices) by writing to tusharmali1972@gmail.com. This also serves as our contact for grievances.

Children

Schools and teachers often make certificates for students. The students' data stays on the teacher's or school's computer. Sanmaan itself is meant to be used by adults and organisations, not by children directly.

Changes

If this policy changes, we'll update this page and the date above.