Legal scaffold

Privacy notice

This launch draft describes intended data handling. India’s digital personal-data framework has staged commencement, so applicability and final wording require professional review.

Data fiduciary contact

What we process

  • submitted URLs or public X handles and publicly fetched metadata;
  • payment order, provider reference, amount, status, and timestamps;
  • a random browser claim secret, stored as an HTTP-only cookie, and its one-way server-side digest;
  • security, moderation, request, and operational records.

We do not need card details from the payment provider to rank a listing.

Purposes

We use this data to inspect destination safety, create and verify payments, apply ranking changes, recognize a browser claim, prevent fraud and abuse, moderate the board, answer requests, and meet legal obligations.

Sharing and transfers

Necessary data may be shared with payment, hosting, security, and support providers, or with authorities when law requires it. Final vendor names, processing locations, contracts, and transfer safeguards must be confirmed before production.

Retention

Intended retention: [Configure NEXT_PUBLIC_LEGAL_PRIVACY_RETENTION_PERIOD]. Payment and moderation records may need longer retention for accounting, fraud prevention, disputes, or legal obligations. The browser claim cookie is designed to last up to one year unless deleted earlier.

Your requests

Depending on applicable law, you may ask for access, correction, erasure, grievance handling, or withdrawal where processing relies on consent. Contact the configured privacy contact or grievance officer. We may need information to verify and safely complete a request.

Review basis

This scaffold was grounded in the official Digital Personal Data Protection Act, 2023 and MeitY’s Digital Personal Data Protection Rules, 2025 materials. Provisions and rules have staged commencement; this page does not state that every provision currently applies to this service.