Privacy Policy

Influenzars Connect Private Limited (“Company”, “we”, “our”, or “us”) operates an Android-based aggregator platform (“Application”) designed to connect influencers and businesses for collaboration and marketing opportunities across India.

We commit to protecting your privacy, security, and financial interests while complying with Indian laws including:

• Information Technology Act, 2000
• IT (Reasonable Security Practices and Sensitive Personal Data or Information) Rules, 2011
• Digital Personal Data Protection Act, 2023 (DPDP Act)
• Consumer Protection Act, 2019
• RBI guidelines for payment processing

3.1 Personal & Identity Information

• Full name, email address, mobile phone number
• Date of birth (for age verification)
• Profile photograph or avatar
• Gender (optional, for personalisation)
• Government-issued ID (PAN card, Aadhaar — only for KYC; masked/tokenised where possible)

3.2 Professional & Business Information

• Business name, type, and registration details
• Social media handles and linked platform profiles (Instagram, YouTube, X/Twitter, etc.)
• Follower counts and engagement metrics (via authorised platform APIs)
• Portfolio links, niche/category, and pricing information
• Campaign briefs, deliverables, and collaboration terms

3.3 Financial Information

• Bank account number and IFSC code (for influencer payouts)
• UPI IDs
• Payment card details (tokenised via RBI-compliant gateways — raw card numbers are never stored)
• Transaction history, invoices, and commission records
• GST/TAN number (for business users where applicable)

3.4 Device & Technical Information

• Device model, manufacturer, and Android OS version
• Unique device identifiers (Device ID, Android Advertising ID)
• IP address, network type, and carrier information
• App version, crash logs, and diagnostic data

3.5 Location Information

• Approximate location (city/region) derived from IP address
• Precise GPS location — only if you explicitly grant permission, and only for geo-targeted campaign features

3.6 Usage & Behavioural Data

• Pages/screens viewed, features accessed, and time spent in-app
• Search queries, filter preferences, and click-through behaviour
• Session duration and navigation paths

3.7 Communications & Content Data

• In-app chat messages between influencers and businesses
• Campaign negotiation records and agreed terms
• Dispute or grievance submissions
• Feedback and ratings given or received

3.8 Device Permissions

The Application requests access to your Camera, Gallery/Media, and Contacts. These permissions are optional and only activated when you choose to use the relevant features.

• Camera: Used to capture profile photos and campaign media. Images are uploaded only upon your explicit action; the camera is never accessed in the background.
• Gallery / Media: Used to select and upload profile photos, portfolio content, or campaign deliverables. Only files you explicitly choose are transmitted.
• Contacts: Used to help you discover and invite existing contacts on the platform. Contact data is processed on-device only and is NOT transmitted to our servers or any third party.

In accordance with Google Play's Data Safety requirements and the DPDP Act, 2023, the following table declares all data types collected, whether each is transmitted off the user's device, and the purpose for which it is used.

• Account creation, authentication, and profile management
• Facilitating discovery and collaboration between influencers and businesses
• Processing payments, disbursing commissions, and maintaining financial records
• Verifying user identity (KYC) and preventing fraud or impersonation
• Personalising content, recommendations, and campaign suggestions
• Sending transactional notifications (payments, campaign updates, messages)
• Sending marketing communications (only with your explicit consent — opt out at any time)
• Conducting analytics to improve platform performance and user experience
• Monitoring for suspicious activity, abuse, or policy violations
• Resolving disputes and providing customer support
• Complying with applicable laws, court orders, and regulatory obligations
• Generating aggregated, anonymised statistical reports (no individual identification)

Data may be shared only in the following circumstances:

7.1 Platform Participants

Influencers and businesses may view each other's public profile information and campaign-related data necessary for collaboration. Sensitive financial details are never shared between participants.

7.2 Payment & Financial Service Providers

RBI-licensed payment aggregators and gateways (e.g., Razorpay, PayU, or equivalent) and banking partners for payouts and escrow. All payment processors are contractually bound to PCI-DSS compliance and Indian data protection law.

7.3 Cloud Infrastructure & Hosting

Cloud server providers hosting our databases and application backend; CDNs for media content. These providers process data solely on our behalf under strict data processing agreements.

7.4 Analytics & Crash Reporting

In-app analytics providers (e.g., Firebase Analytics) and crash reporting tools (e.g., Firebase Crashlytics). Analytics data is pseudonymised wherever possible. These providers do not use your data for their own commercial purposes.

7.5 Identity Verification (KYC) Providers

Government-issued ID data is shared with licensed KYC/verification service providers solely for identity verification. Data is masked/tokenised before transmission.

7.6 Communication Service Providers

OTP and SMS gateway providers (for two-factor authentication) and push notification services (e.g., Firebase Cloud Messaging).

7.7 Legal Authorities

We may disclose personal data to law enforcement agencies, courts, or government authorities when required by law, court order, or to protect the rights, property, or safety of the Company, our users, or the public.

7.8 Business Transfers

In the event of a merger, acquisition, or sale of company assets, personal data may be transferred to the successor entity. Users will be notified in advance of any such transfer.

8.1 Encryption

All data transmitted between the Application and our servers is protected using industry-standard encryption. Sensitive data stored on our systems (financial details, government IDs) is protected with strong encryption standards. End-to-end encryption is applied to in-app messages where technically feasible. Raw card numbers are never stored.

8.2 Access Controls

Access to personal data is restricted to authorised personnel based on job responsibilities, enforced by strong authentication and least-privilege access principles.

8.3 Infrastructure Security

Periodic security reviews and vulnerability assessments; ongoing monitoring for suspicious activity; secure coding practices and third-party code audits.

8.4 Payment Security

Payment processing conducted through RBI-compliant payment aggregators. Appropriate safeguards are in place to identify and flag suspicious payment activity.

Under the Digital Personal Data Protection Act, 2023, and applicable Indian law, you have the following rights:

We will acknowledge all rights requests within 72 hours and endeavour to fulfil them within 30 days. In complex cases, we may extend to 60 days with prior notice.

10.1 How to Request Account Deletion

• Option A – In-App (Recommended): Navigate to Account → Delete Account and follow the on-screen instructions.
• Option B – Email Request: Send a deletion request to support@influenzars.com from your registered email with subject line: “Account Deletion Request – [Your Registered Email]”

10.2 What Happens After You Submit

• We verify your identity before processing the request
• Active campaigns or pending transactions must be resolved before deletion proceeds
• Your account is deactivated immediately upon verification; full data deletion is completed within 30 days
• You receive email confirmation once deletion is complete

10.3 Data We Must Retain

Retained data is held in restricted-access, encrypted storage and used solely for the specific legal purpose requiring retention. It is not used for any commercial purpose after account deletion.

• Active accounts: Data retained for the duration of the account
• Inactive accounts (no login for 24 consecutive months): we will notify you 30 days before initiating anonymisation or deletion
• Financial records: 8 years per Indian tax law
• Communication logs: 3 years (for dispute resolution)
• KYC records: 5 years post-relationship end
• Crash and diagnostic data: 12 months
• Marketing consent records: Duration of consent plus 3 years

The Application is strictly intended for individuals aged 18 years and above. We do not knowingly collect personal data from anyone under 18. If we discover that we have inadvertently collected data from a minor, we will delete it immediately. If you believe a minor has created an account, please notify us immediately at support@influenzars.com.

As an Android Application, we use mobile equivalents of tracking technologies:

• Android Advertising ID (AAID): Used for analytics and, where consented to, personalised advertising. You may opt out via Android Settings → Google → Ads → Reset/Opt out of Ads Personalisation.
• Firebase Analytics: Collects anonymised usage and performance data.
• Crash Reporting SDKs: Collect device state at the time of a crash for debugging purposes.

You can limit tracking by revoking optional permissions (location, advertising ID) through your device's application settings.

Our primary data storage and processing infrastructure is located in India. In cases where third-party service providers process data outside India, we ensure:

• Contractual obligations equivalent to the protections required under Indian data protection law
• Adequate safeguards such as standard contractual clauses
• Data is transferred only to jurisdictions with sufficient data protection standards, or subject to your explicit consent

When we make changes to this Privacy Policy, we will:

• Update the “Effective Date” and “Version” at the top of this document
• Display a prominent in-app notification for material changes
• Send an email notification to your registered email address for significant changes
• For changes requiring fresh consent under the DPDP Act, 2023, seek your explicit re-consent before continuing to process your data

Previous versions of this policy are available on request.

By downloading, installing, or using the Application, you represent that you are at least 18 years of age and that you have read, understood, and freely consented to the collection and processing of your personal data as described in this Privacy Policy.

Consent is specific, informed, and freely given. You may withdraw consent at any time by contacting us at support@influenzars.com. Please note that withdrawing consent may affect the availability of certain Application features. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.