Privacy Policy
What we collect, why, and the choices you have. We collect only what the platform needs to work, and we never sell your data.
1. Scope
This policy explains how Indie UGC Technologies Pvt. Ltd. handles personal data when you use indie.ugc, in line with India's Digital Personal Data Protection Act, 2023. It applies to brands, creators, and applicants.
2. What we collect
- Application & account details — name, email, and the information you submit when applying as a brand or creator.
- Profile & content — creator profile, tags, sample and delivered content, and brief details you post.
- Transaction data — briefs, applications, deliveries, and payout records. Card/UPI details are handled by Razorpay; we do not store them.
- Usage & device data — logs, approximate location, and basic device information needed to run and secure the service.
3. How we use it
- to operate the marketplace — matching briefs, running escrow, and processing payouts;
- to send transactional email (verification, magic-link sign-in, application status, password reset);
- to review applications, enforce our Trust & Safety Policy, and resolve disputes; and
- to keep the platform secure and comply with legal obligations.
We do not send marketing or bulk email, and we do not use purchased or rented lists.
4. Who we share it with
We share data only with service providers who help us run the platform, including:
- Razorpay — payments and escrow;
- Amazon Web Services — hosting, file storage (S3), and transactional email (SES); and
- counterparties to your transactions — brands and creators see the information needed to complete a brief.
We may disclose data where required by law. We do not sell personal data.
5. Retention
We keep personal data for as long as your account is active and as needed for transactions, legal, tax, and dispute-resolution purposes, after which it is deleted or anonymised.
6. Your rights
Subject to the DPDP Act, you may access, correct, or request deletion of your personal data, withdraw consent, and nominate a representative. To exercise these rights, email hello@indieugc.com.
7. Security
Our sending domain is authenticated with SPF, DKIM, and DMARC, data in transit is encrypted, and access to personal data is limited to what our team needs. No system is perfectly secure, but we work to protect your information and will notify you of a breach as required by law.
8. Children
The platform is not intended for anyone under 18, and we do not knowingly collect their data.
9. Changes
We may update this policy; material changes will be notified in-app or by email. The "last updated" date above always reflects the current version.
10. Contact
For any privacy question or request, contact hello@indieugc.com.