Privacy Policy

• Account data — your name and email address, received from our sign-in provider (Clerk) when you log in with Google.
• Profile data — for Creators: username, display name, bio, profile picture, pricing, and an optional Instagram handle.
• Content — photos and posts that Creators upload.
• Transaction data — records of memberships and packages you buy or sell (amounts, dates, status, and a payment/order reference). We do not collect or store your full card number, UPI PIN, or bank credentials — those go directly to our payment partner.
• Package buyer data — when you buy a package you may provide an Instagram handle so the Creator can deliver it; this is shared with that Creator.
• Support data — the name, email and message you send through our Contact form.
• Technical data — basic log and device information and cookies strictly necessary to keep you signed in and operate the service.

• To create and operate your account and the Platform.
• To process payments and unlock the content you pay for.
• To let Creators fulfil packages and connect with buyers.
• To respond to your support requests.
• To detect fraud, enforce our Terms, and keep the service secure.
• To meet legal, tax and accounting obligations.

We do not sell your personal data, and we do not use it for third-party advertising.

We process your data to perform our contract with you (providing the service you signed up for), to comply with legal obligations, for our legitimate interests in running and securing the Platform, and, where required, on the basis of your consent (which you may withdraw at any time).

We share data only with service providers (“data processors”) that help us run inpass, under confidentiality and data-protection obligations:

• Razorpay — payment processing and Creator payouts.
• Clerk — sign-in and authentication.
• Supabase — database hosting for account and transaction records.
• Cloudflare — secure storage and delivery of uploaded content.
• Vercel — application hosting.

We also share data with Creators where you choose to interact with them (e.g. buying a package), and with authorities where required by law. Some of these providers may process data on servers outside India; where they do, we rely on appropriate safeguards.

We keep your data for as long as your account is active and as long as needed to provide the service. Transaction and tax records are retained for the period required by Indian law. When data is no longer needed we delete or anonymise it.

We use reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), access controls, time-limited signed URLs for private content, and restricting database access to server-side systems. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

Subject to applicable law, you may:

• access the personal data we hold about you,
• correct inaccurate or incomplete data,
• request deletion of your data and account,
• withdraw consent where processing relies on it, and
• raise a grievance about how we handle your data.

To exercise any right, email us at [SUPPORT EMAIL]. We respond within 2 business days.

We use only essential cookies needed to keep you signed in and to operate the Platform securely. We do not use advertising or cross-site tracking cookies.

inpass is not intended for anyone under 18. We do not knowingly collect data from minors. If you believe a minor has used the Platform, contact us and we will remove the data.

We may update this Policy from time to time. Material changes will be reflected by updating the “Last updated” date above. Continued use after a change constitutes acceptance of the revised Policy.

For any privacy question, data-rights request, or grievance, contact our Grievance Officer:

• Anandu N (inpass)
• Email: [SUPPORT EMAIL]
• Phone: [SUPPORT PHONE]
• Address: [STREET / AREA], [CITY], [STATE], [PIN], India