CollabMart

Privacy Policy

What we collect, why we collect it, how long we keep it and what you can make us do with it. Written against the Digital Personal Data Protection Act, 2023.

Last updated 28 October 2026

This page is not finished.Still to be supplied by the operator: the registered business name, the registered address, the grievance officer’s name, the grievance officer’s email. Until then this document is a draft and should not be relied on.

Data fiduciary: [registered business name — not yet supplied]
Registered address: [registered address — not yet supplied]
Grievance Officer: [officer’s name — not yet supplied]
Officer’s email: [officer’s email — not yet supplied]

1. What we collect, and why

When you create an account

Your name, email address and a password, which we store only as a hash and cannot read. Needed to have an account at all.

When you set up a creator profile

The city and state you are in, the languages you post in, a short description, the categories you create in, your social handles and follower counts, the rough split of your audience by gender and age, and any photos you upload. All of it is matching data: it is how a brand searching for someone like you finds you, and leaving it out means not appearing.

When you set up a brand

A contact name, phone number, optional WhatsApp number, the address the business trades from, a description, and optionally a website, Instagram handle and GST number. Your phone number is never shown to a creator until you accept them.

When you pay

The amount, the reference code we issued and the UTR you give us so we can match the payment. We never see or store your card, UPI PIN or bank credentials — payment happens in your own banking app, not here.

Automatically

A device identifier for each browser you sign in from, so that sessions can be limited to three devices and signed out individually. Administrative actions are written to an audit log.

2. What we never do

We do not sell your personal data. There is no version of this where we would.
We do not share your contact details with another user until both sides have agreed.
We do not post anything to your social accounts. We only read what is already public.
We do not ask for your social media password, and you should refuse anyone who does.

3. Who else sees it

Only where the service cannot run otherwise:

Our hosting and database provider, which stores the data on our behalf
Our email provider, to send you a verification code or a notification
Platform APIs such as YouTube, to confirm a follower count you have claimed — we send the handle you gave us, nothing else
A court or regulator, where we are legally required to

4. How long we keep it

Your account data — until you delete the account.
Listings — marked stale after 90 days without being seen again, and archived at 180 days.
Rejected search results — deleted after 30 days.
Payment records and the credit ledger — kept as long as tax and accounting law requires, even after deletion.

5. Your rights

Under the DPDP Act you may:

See what we hold about you. Most of it is on your own profile screen; for the rest, ask.
Correct it. Editable from your profile, or ask us.
Have it erased. Settings → Delete this account does it immediately and without asking us. You do not need our permission and we do not get to talk you out of it.
Withdraw consent for anything you gave us optionally.
Nominate someone to exercise these rights if you cannot.
Complain — to our Grievance Officer first, and to the Data Protection Board of India if we fail you.

6. Security

Passwords are hashed, never stored in a readable form. Sessions expire and can be revoked per device. Administrator accounts are required to use two-factor authentication. Contact details sit in a separate table that ordinary listing queries never read, so an unlock is the only way they are served.

If a breach affects your data, we will tell you and the Data Protection Board as the Act requires.

7. Children

This service is for people aged 18 and over. We do not knowingly keep data about a child, and will delete it if we learn we have.

8. Listings we gathered from public pages

Our agent reads pages that are already public and extracts business contact information only — never an individual’s personal mobile number. Every listing shows the page it came from. A business that wants its listing removed can write to hello@collabmart.co.in; removal is permanent and a later pass by the agent will not re-add it.

9. Complaints

Write to our Grievance Officer. They must respond within 30 days. If you are not satisfied, you may escalate to the Data Protection Board of India.