1. Information We Collect
We collect information you provide directly:
- Account information: name, email address, password (hashed)
- Profile information: bio, location, social media handles
- Business information: company name, GST number, bank account details
- Transaction data: campaign details, offer amounts, payment history
- Identity verification: government-issued ID, PAN card (KYC)
2. How We Use Your Information
We use collected information to:
- Operate and improve the Ryppl platform
- Process payments and payouts
- Verify your identity (KYC) as required by law
- Send transactional emails and platform notifications
- Detect and prevent fraud
- Comply with legal obligations
3. Data Sharing
We do not sell your personal data. We share it only with:
- Payment processors (Razorpay, Stripe) for transaction processing
- Cloud infrastructure providers (Supabase, Vercel) for hosting
- Email providers (Resend) for transactional emails
- Law enforcement when legally required
4. Data Security
Sensitive fields (bank account numbers, government IDs) are encrypted at rest using AES-256-GCM. All data is transmitted over TLS. Access to production data is restricted to authorised staff.
5. Data Retention
We retain account data for as long as your account is active. After account deletion, transaction records required for tax compliance are retained for 7 years. KYC documents are retained as required by applicable law.
6. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion (subject to legal retention obligations)
- Export your data in a portable format
To exercise these rights, email privacy@viralx.in.
7. Cookies
We use session cookies for authentication only. We do not use tracking or advertising cookies.
8. Social Media Platform Data (Meta / Instagram & YouTube)
To show creators' public reach to brands, we connect to social platforms:
- Instagram (Meta): Using the Meta Graph API (Business Discovery), we retrieve public information about the professional Instagram account whose handle you provide — username, follower count and post count. We never collect your Instagram password, access private content or messages, or post on your behalf. This use complies with the Meta Platform Terms and Developer Policies.
- YouTube: Using the YouTube Data API, we retrieve public channel statistics (subscriber count, view count) for the channel handle you provide.
We store only these public counts and handles to display on your profile. Remove them anytime by clearing the handle in your profile, or email privacy@viralx.in.
9. Contact
Privacy questions? Email privacy@viralx.in. Our Data Protection Officer can be reached at the same address.