PRIVACY POLICY

1. Introduction

We respect your privacy and process all personal data strictly in accordance with local regulations, including the DPDP Act 2023, facilitating transparent business workflows.

2. Data We Collect

3. How We Use Your Data

• Create and manage your account.
• Display your profile to relevant brands or creators.
• Enable search, discovery, messaging, and campaign features.
• Process subscription payments.
• Send transactional emails: account verification, billing, and security alerts.
• Display ASCI compliance reminders and TDS notices.
• Improve platform features and user experience.
• Detect and prevent fraud, fake accounts, and platform abuse.
• Comply with legal obligations under Indian law.

We do not use your data for automated decision-making that produces legal or significant effects on you without human oversight.

4. What We Never Do With Your Data

• We never sell your personal data to any third party.
• We never share your data with advertisers.
• We never use your data to display targeted third-party advertisements.
• We never share your private messages outside your conversation.
• We never store passwords in plain text.

5. Data Minimisation

Elvexa collects only the data that is strictly necessary for the operation of the platform. We do not collect data speculatively or beyond what is needed to provide our services. If you believe we are collecting unnecessary data, contact us at privacy@elvexa.in.

6. Data Sharing

We share your data only in these limited circumstances:

• With other users: your public profile is visible to brands or creators as intended by the platform.
• With service providers: payment gateways and hosting providers who process data under strict confidentiality obligations.
• Legal requirements: if required by law, court order, or government authority.
• Business transfer: in the event of a merger or acquisition, users will be notified in advance.

7. Data Security

We implement the following security measures to protect your data:

• All passwords are stored using strong one-way encryption.
• All data transmission uses HTTPS/TLS encryption.
• Access to user data is restricted to authorised personnel only.
• Regular security reviews of platform infrastructure.

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users within 72 hours of becoming aware of the breach, in accordance with the DPDP Act 2023.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services.

• Account data: deleted within 30 days of account deletion request.
• Message data: retained for 90 days after account deletion for dispute resolution purposes.
• Billing records: retained for 7 years as required under Indian tax law.
• Legal hold data: retained as long as required by applicable law.

9. Your Rights Under DPDP Act 2023

As a data principal under the Digital Personal Data Protection Act 2023, you have the following rights:

• Right to access: request a summary of personal data we hold about you.
• Right to correction: request correction of inaccurate or incomplete data.
• Right to erasure: request deletion of your personal data subject to legal retention requirements.
• Right to withdraw consent: withdraw consent for data processing at any time.
• Right to grievance redressal: raise a complaint and receive a response within 30 days.
• Right to nominate: nominate another person to exercise your rights in the event of your death or incapacity.

To exercise any right, contact: privacy@elvexa.in

10. Cookies

Elvexa uses essential cookies to keep you logged in and remember your preferences. We do not use third-party advertising cookies or tracking cookies. You can control cookie settings through your browser. Disabling essential cookies may prevent you from using certain platform features.

11. Children's Privacy

Elvexa is strictly not intended for users under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a minor has created an account, we will delete it and all associated data immediately. If you believe a minor has registered, please contact us at privacy@elvexa.in.

12. Third-Party Links

Elvexa may contain links to external websites including creator social profiles and brand websites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies independently.

13. Changes to This Policy

We may update this Privacy Policy to reflect changes in law or platform practices. Material changes will be communicated via email or in-app notification at least 14 days before taking effect. Continued use after changes constitutes acceptance.

14. Grievance Officer