Privacy policy
Draft for review under India's Digital Personal Data Protection Act, 2023. Final wording to be confirmed with counsel.
What we collect
- Account data: phone number or email, name, roles.
- Brand data: company name, category, GSTIN (optional), payments made through our gateway.
- Creator data: Instagram profile, reels you submit and their insights (views, reach, likes, comments, shares, saves), follower demographics (country and city shares), payout details and KYC fields.
- Technical data: IP address at sign-up and login, device information, audit logs of actions taken on the platform.
Why
To match campaigns to creators, verify views through official APIs, pay creators, detect fraud, resolve disputes and meet our legal obligations. We never scrape and never use screenshots as proof.
Consent
You consent at sign-up and when connecting Instagram. You can disconnect Instagram at any time from your profile; we stop reading its data and keep only what is needed for past payments and disputes.
Storage and security
Data is stored in India-region infrastructure where available. Access tokens and KYC fields are encrypted at rest. Money moves only through an append-only ledger with audit trails.
Retention
Metric snapshots and review evidence are kept for the tracking window plus the hold period, with a buffer, and as long as tax law requires for payments.
Your rights
You can request a copy of your data or its deletion by emailing support, or through the data deletion page. Deleting your account removes personal data except records we must keep for payments, disputes and tax.
Third parties
Meta (Instagram API), our payment gateway and payout provider, and our messaging providers process data on our behalf under their own terms.