Privacy Policy

This policy explains what personal data we collect, why, and how you can control it under India's Digital Personal Data Protection Act, 2023.

1. Who we are

Influora Digital Private Limited ("Influora," "we," "us") is the Data Fiduciary for the personal data we collect through our platform, as defined under the Digital Personal Data Protection Act, 2023 ("DPDP Act"). Registered office: [REGISTERED ADDRESS — TBD]. CIN: U73100MH2024PTC434321.

2. What data we collect

We do not store full card numbers or bank credentials ourselves — these are handled by our payment processor, Razorpay.

3. Why we collect it (our legal basis)

Under the DPDP Act, we process your personal data based on:

• Your consent — given when you sign up, given clearly and specifically, and withdrawable at any time (withdrawal doesn't affect processing already done).
• Legitimate uses permitted by law — such as verifying identity for KYC/AML compliance (PMLA, RBI KYC Master Directions), meeting tax obligations (including tax deducted at source where it applies), and responding to your own requests.

We will always tell you what we're collecting and why at the point of collection, not just in this document.

4. How we use your data

• Operate your account and Campaigns
• Verify identity (KYC) before releasing a Payout
• Calculate and disclose Platform fees and commissions, and meet our tax obligations
• Detect fraud, fake engagement, or policy violations
• Improve our product, including training and evaluating AI features (Meera)
• Communicate with you about your account, Campaigns, and grievances
• Comply with Indian law (tax, AML, consumer protection)

5. Who we share it with

We share data only where necessary:

• Payment processor (Razorpay) — processes the card, UPI and net-banking payments brands use to add money to their Influora wallet. They receive only what's needed to process the transaction.
• Verification providers — for KYC document checks.
• Cloud and AI infrastructure providers — for hosting and AI-assisted features, under contractual confidentiality obligations.
• Regulators and authorities — where required by Indian law (tax, AML, law enforcement requests).

We do not sell your personal data.

Data from Meta (Instagram and Facebook)

If you connect an Instagram Business or Creator account, we receive profile, media and insights data from Meta's APIs. We use it only to verify your account, verify campaign deliverables, and produce the analytics shown on Influora. We never receive your password, your direct messages, or the personal data of your individual followers, and we never sell this data or share it with data brokers or ad networks. Our use of information received from Meta APIs adheres to the Meta Platform Terms and Meta Developer Policies.

Full details — every permission we request, every field we store, retention periods, and how to have this data deleted — are in our Meta Platform Data & Instagram Data Policy.

6. Your rights under the DPDP Act

As a Data Principal, you have the right to:

1. Access — a summary of the personal data we hold about you and how we process it.
2. Correction and updating — ask us to correct inaccurate or incomplete data.
3. Erasure — ask us to delete your data, subject to our legal retention duties (see below).
4. Withdraw consent — at any time, for processing based on consent.
5. Grievance redressal — raise a complaint with our Grievance Officer, and escalate to the Data Protection Board of India if unresolved.
6. Nominate — name someone to exercise your rights in case of death or incapacity.

To exercise these rights, contact info@influora.in or our Grievance Officer (details below).

7. Data retention

We keep your data only as long as needed for the purpose it was collected, or as required by Indian law — for example, KYC and transaction records are retained for the periods required under PMLA and tax law. Once that period ends, we delete or anonymize your data. Specific retention periods per data category: [RETENTION SCHEDULE — TBD, pending legal confirmation].

8. Security

We use industry-standard safeguards, including encryption of sensitive data at rest, to protect your personal data from unauthorized access, loss, or misuse. No system is 100% secure, and we continuously review our security practices.

9. Children's data

Influora is not intended for anyone under 18. We do not knowingly collect personal data from minors.

10. Cookies

We use cookies for login sessions, security, and analytics. See our Cookie Policy ([LINK — pending Wave 2 publish]) for details and your consent choices.

11. Grievances about your data

If you have concerns about how we handle your personal data, contact our Grievance Officer:

[GRIEVANCE OFFICER — NAME / EMAIL / ADDRESS — TBD]

We aim to acknowledge grievances within 48 hours and resolve them within 30 days. If unresolved, you may approach the Data Protection Board of India.

12. Changes to this policy

We may update this Privacy Policy as our practices or Indian law change. We'll post updates here with a new "Last updated" date.

13. Contact us

Registered office: [REGISTERED ADDRESS — TBD] Support: info@influora.in Grievance Officer: [GRIEVANCE OFFICER — NAME / EMAIL / ADDRESS — TBD]