Privacy Policy (DPDP Act)

Last updated: 2026 · Digital Personal Data Protection Act, 2023

1. Data we collect

• Account: email, password (stored with a bcrypt hash), optional name and phone.
• Identity verification: government-issued ID and selfie, stored with restricted access and available only to moderation.
• Ads: texts and images submitted by the advertiser (image metadata/EXIF is removed automatically).
• Browsing: strictly necessary cookies (session and age verification).

2. Purpose and legal basis

We process personal data to operate the platform, moderate content, comply with legal obligations and prevent fraud and unlawful activity. Processing is based on your consent, as a Data Principal, under the Digital Personal Data Protection Act, 2023.

3. Image and data consent

By posting, the advertiser consents to the processing and public display of the images and represents that they have the consent of the people depicted. Consent can be withdrawn at any time through our removal channel.

4. Your rights (Data Principal)

You may request access to, correction of, and erasure of your personal data, and may withdraw consent, through our removal/contact channel, in accordance with the DPDP Act, 2023. You may also raise a grievance with our grievance officer.

5. Sharing and retention

We do not sell your personal data. We may share information with authorities when required by law. Verification data is retained only for as long as necessary to meet legal obligations and is then deleted.

6. Security

We use HTTPS, password hashing (bcrypt), rate limiting, input sanitisation, removal of image metadata and regular backups.

7. Data contact

For privacy matters, contact us through our contact channel.

Initial template. Review it with qualified Indian legal counsel before operating in production.