Privacy Policy

This policy explains what personal data we collect, why, and how you can control it under India's Digital Personal Data Protection Act, 2023.

1. Who we are

Influora Digital Private Limited ("Influora," "we," "us") is the Data Fiduciary for the personal data we collect through our platform, as defined under the Digital Personal Data Protection Act, 2023 ("DPDP Act"). Registered office: [REGISTERED ADDRESS — TBD]. CIN: U73100MH2024PTC434321.

2. What data we collect

We do not store full card numbers or bank credentials ourselves — these are handled by our payment processor, Razorpay.

3. Why we collect it (our legal basis)

Under the DPDP Act, we process your personal data based on:

• Your consent — given when you sign up, given clearly and specifically, and withdrawable at any time (withdrawal doesn't affect processing already done).
• Legitimate uses permitted by law — such as verifying identity for KYC/AML compliance (PMLA, RBI KYC Master Directions), meeting tax obligations (including tax deducted at source where it applies), and responding to your own requests.

We will always tell you what we're collecting and why at the point of collection, not just in this document.

4. How we use your data

• Operate your account and Campaigns
• Verify identity (KYC) before releasing a Payout
• Calculate and disclose Platform fees and commissions, and meet our tax obligations
• Detect fraud, fake engagement, or policy violations
• Improve our product, including training and evaluating AI features (Meera)
• Communicate with you about your account, Campaigns, and grievances
• Comply with Indian law (tax, AML, consumer protection)

5. Who we share it with

We share data only where necessary:

• Payment processor (Razorpay) — processes the card, UPI and net-banking payments brands use to add money to their Influora wallet. They receive only what's needed to process the transaction.
• Verification providers — for KYC document checks.
• Cloud and AI infrastructure providers — for hosting and AI-assisted features, under contractual confidentiality obligations. This includes Cloudflare R2, which stores clips sent to the optional video clean-up feature (section 7) in a private bucket that is not reachable from the public internet.
• Regulators and authorities — where required by Indian law (tax, AML, law enforcement requests).

We do not sell your personal data.

Data from Meta (Instagram and Facebook)

If you connect an Instagram Business or Creator account, we receive profile, media and insights data from Meta's APIs. We use it only to verify your account, verify campaign deliverables, and produce the analytics shown on Influora. We never receive your password, your direct messages, or the personal data of your individual followers, and we never sell this data or share it with data brokers or ad networks. Our use of information received from Meta APIs adheres to the Meta Platform Terms and Meta Developer Policies.

Full details — every permission we request, every field we store, retention periods, and how to have this data deleted — are in our Meta Platform Data & Instagram Data Policy.

6. Your rights under the DPDP Act

As a Data Principal, you have the right to:

1. Access — a summary of the personal data we hold about you and how we process it.
2. Correction and updating — ask us to correct inaccurate or incomplete data.
3. Erasure — ask us to delete your data, subject to our legal retention duties (see below).
4. Withdraw consent — at any time, for processing based on consent.
5. Grievance redressal — raise a complaint with our Grievance Officer, and escalate to the Data Protection Board of India if unresolved.
6. Nominate — name someone to exercise your rights in case of death or incapacity.

To exercise these rights, contact info@influora.in or our Grievance Officer (details below).

7. Data retention

We keep your data only as long as needed for the purpose it was collected, or as required by Indian law — for example, KYC and transaction records are retained for the periods required under PMLA and tax law. Once that period ends, we delete or anonymize your data. Specific retention periods per data category: [RETENTION SCHEDULE — TBD, pending legal confirmation].

Optional video clean-up

If you choose Clean up on a clip you recorded in the Influora app, this is what happens to it:

• What we receive: that one clip, including its sound. It includes the whole camera picture, even the edges outside the frame you saw. We never take a clip you did not choose. The app offers Clean up only on clips recorded in it, not on files from your gallery.
• Why, and on what basis: only with your consent, given each time you send a clip (a box you tick; it is never pre-ticked). We use the clip only to measure brightness, grain, shake and sound, and to fix only what needs it. The work is done by standard video software on a server Influora rents. No outside AI service sees the clip, and it is not used to identify anyone or to train any model.
• Where it is stored: in private Cloudflare R2 cloud storage that is not publicly reachable. Data location: the Asia-Pacific region. The bucket has no custom domain, no public URL and no browser access — every byte passes through Influora's own server.
• How long: the original, the result, the before/after previews and any temporary files are deleted within 24 hours. You can delete them sooner with Delete now. Withdrawing your Meera consent or deleting your account also deletes them.
• What we keep after that: for up to 12 months, a record without any video: the job's status and outcome, the measurement numbers and what we changed, which beat of your script the clip was for, when you sent it, when you gave consent and to which version of this notice, the original file's size and type, a fingerprint (SHA-256 hash) of the original file, and how long processing took. The fingerprint cannot be turned back into your video, but it can show that another copy of exactly the same file is the one you sent. We also keep a count of the free clean-ups you have used for as long as your account exists. The 12-month period above is the period we apply to that video-free record; the broader retention schedule in this section is still being confirmed.
• Metadata: the original is stored exactly as your phone sent it, including any location or device details the file carries, until it is deleted within 24 hours. We do not copy those details into any record we keep. The cleaned clip and the previews we make carry no such metadata. If we don't change your clip, we make no new file, and your original stays as it was.
• Other people in your video: if other people appear in your clip, make sure they are OK with it being processed.
• Age: you must be 18 or older to use this feature.

8. Security

We use industry-standard safeguards, including encryption of sensitive data at rest, to protect your personal data from unauthorized access, loss, or misuse. No system is 100% secure, and we continuously review our security practices.

9. Children's data

Influora is not intended for anyone under 18. We do not knowingly collect personal data from minors.

10. Cookies

We use cookies for login sessions, security, and analytics. See our Cookie Policy ([LINK — pending Wave 2 publish]) for details and your consent choices.

11. Grievances about your data

If you have concerns about how we handle your personal data, contact our Grievance Officer:

[GRIEVANCE OFFICER — NAME / EMAIL / ADDRESS — TBD]

We aim to acknowledge grievances within 48 hours and resolve them within 30 days. If unresolved, you may approach the Data Protection Board of India.

12. Changes to this policy

We may update this Privacy Policy as our practices or Indian law change. We'll post updates here with a new "Last updated" date.

13. Contact us

Registered office: [REGISTERED ADDRESS — TBD] Support: info@influora.in Grievance Officer: [GRIEVANCE OFFICER — NAME / EMAIL / ADDRESS — TBD]