Privacy Policy

The short version

You give this app sensitive things: your deals, your money, your PAN and bank details. We treat that the way we would want ours treated. Your data exists to power your tools, nothing else. We do not sell it, we do not share your individual numbers with anyone, and you can erase all of it yourself, any time.

What we collect

• Account basics: name, email, Instagram handle, WhatsApp number, password (stored hashed).
• Business records you enter: deals, invoices, payments, expenses, rate card, business identity (PAN, GSTIN, address, bank details for your invoices), creator stats and niche.
• Directory contributions: reviews, ratings and contacts you choose to share with the community.
• Feedback you send through the feedback button, with the screen it was sent from.
• Anonymous usage analytics (page views, device type) via Vercel Analytics. No ad trackers, no pixels.

Payments

Membership billing runs through Razorpay. When you subscribe, Razorpay receives your name and email from us, and collects your payment details (card, UPI, netbanking) directly; those details never touch our servers. We store only your subscription's status, its Razorpay reference and its renewal date, to know your membership is active. Billing records are kept after account deletion only to the extent Indian tax and accounting law requires.

Where it lives

Your data is stored with Supabase in the Mumbai (India) region and served through Vercel. Every record is isolated to your account at the database level (row-level security), so another member's session can never read your rows. Bank details and PAN appear only on documents you generate.

Who can see what

• Your business records: only you. To run the service, the operator's admin view shows per-account activity levels and top-line totals (like how much a member has tracked), never your individual deals, invoices, documents or their contents.
• Your published media kit: public at your chosen link, showing only the snapshot you published.
• Directory reviews: shown to members, anonymously by default. Your identity behind an anonymous review never leaves the database.
• Directory contacts you contribute: revealed to members one at a time inside a weekly budget. There is no export and no bulk view, by design.

If you are listed in the Directory

Members may share work contacts (name, role, work email) that came from their own genuine business dealings, shared strictly in a business capacity; we accept no personal phone numbers by design. If a member has listed your work contact and you want out, report the entry (or email the grievance contact below) and it comes down immediately; once we confirm the request, your email goes on a permanent suppression list so it can never be added back. This works even if you are not a member. The suppression list itself stores only a one-way hash of the email, kept forever so the promise holds.

Emails

We send transactional email only: password resets, email-change confirmations, and (once billing starts) payment receipts and billing notices via Razorpay. No newsletters or marketing without your explicit opt-in, which we have not asked for and will not sneak in.

How long we keep things

Your data lives as long as your account does; a lapsed membership deletes nothing. Deleting your account erases it immediately from the live database. Short-lived operational backups (kept for roughly 30 days, then overwritten) can briefly retain already-deleted rows before they cycle out. Two things outlive deletion by design: the hashed directory suppression list (so a removal stays permanent) and billing records Indian tax law requires us to keep.

Your rights, and the delete button

You can read and correct everything you have entered, it is all editable in the app. You can export your financial records from the Money page. And you can delete your account from the Account page: it permanently erases your profile, business records, directory contributions and sign-in, immediately and irreversibly. This is your erasure right under India's DPDP Act, self-served.

Housekeeping

We are an Indian service for Indian creators, built to be DPDP-shaped from day one. The app is intended for users 18 and older. If we ever suffer a data breach affecting you, you will be informed without delay. For any privacy request or complaint, use the grievance and contact routes below, where our grievance officer is named.