Privacy Policy

1. Introduction & Scope

This Privacy Policy applies to the CreatorMitra mobile application (available on Android and iOS) and website (creatormitra.co.in) operated by AVM AUDIO VIDEO RECORDING STUDIO. By registering, installing, accessing, or utilizing our services, you acknowledge that you have read, understood, and agree to the data collection and processing practices described herein.

2. Information We Collect

To deliver a secure influencer collaboration marketplace, we collect the following categories of data:

A. Information You Provide Directly

• Authentication Data: Mobile phone number (verified via One-Time Password / OTP) and Email address.
• Profile Information: Full name, profile photo, bio, selected categories/niches, state, and city.
• Social Media Handles: Instagram profile handle, follower count, and featured video links provided by creators.
• Financial & Payout Data: Bank account numbers, IFSC codes, account holder names, and UPI IDs submitted by Influencers for receiving automated payouts via RazorpayX; Billing information/GSTIN submitted by Advertisers.
• Campaign Deliverables: Video drafts, photos, order requirement briefs, and live post URLs submitted during collaboration.

B. Information Collected Automatically & Device Permissions

• Device & Push Identifiers: Device UID, FCM device token, APNs token, operating system version (Android / iOS), and device model to deliver transactional push notifications regarding order acceptances, draft submissions, and payouts.
• Camera & Photo Gallery Permissions: Requested exclusively when you explicitly choose to take or upload profile photos or submit video draft deliverables for campaign review.
• Log & Network Information: IP address, timestamp, app crashes, and diagnostic logs for security and fraud prevention.

3. Purpose of Data Collection & Legal Basis

We process your data for the following strictly operational purposes:

1. User Account & Identity Verification: Ensuring authentic creator and brand profiles via mobile OTP.
2. Facilitating Collaborations: Allowing Advertisers to discover influencers, book deliverable packages, and track order milestones.
3. Payment & Payout Processing: Collecting order payments into escrow via Razorpay and disbursing earnings via RazorpayX.
4. Transactional Notifications: Sending critical order alerts (e.g. 48-hour order acceptance reminders, draft approvals, refund updates).
5. Legal & Tax Compliance: Generating GST-compliant tax invoices and adhering to Indian e-commerce statutory regulations.

4. Third-Party Service Providers & SDKs

We work with vetted third-party service providers under stringent data protection standards:

• Razorpay & RazorpayX (Payment Gateway & Payouts): To process secure payments, escrow holds, and instant bank payouts. Payment card data is processed in compliance with RBI guidelines and PCI-DSS Level 1 certification.
• Google Firebase Cloud Messaging (FCM) & Apple Push Notification Service (APNs): To dispatch real-time transactional push notifications to your device.
• Cloud Infrastructure & Storage: Secure cloud servers with SSL/TLS encryption for media file storage and database management.

5. Data Storage, Security & Encryption

We implement robust organizational and technical security measures. All communications between your device and our servers use 256-bit TLS/HTTPS encryption. Sensitive tokens and credentials are encrypted and stored in hashed form. We maintain strict access controls to prevent unauthorized access, alteration, or disclosure.

6. Data Retention Policy

We retain your data as long as your account is active. Financial transaction records and invoices are retained for the statutory period required by Indian tax and accounting laws (e.g., GST laws).

7. User Rights & Account / Data Deletion (Google & Apple Compliance)

In compliance with Apple App Store Guideline 5.1.1(v) and Google Play Store User Data Policy, you have the full right to:

• Access and update your profile information inside the app.
• Request the complete deletion of your account, device tokens, bank information, and associated personal records.

8. Children's Privacy

CreatorMitra is intended strictly for individuals aged 18 years or older. We do not knowingly collect personal information from children under 18. If we discover that a minor has created an account, we will promptly delete all associated data.

9. Grievance Officer & Contact Information

In accordance with the Information Technology Act, 2000 and the Consumer Protection (E-Commerce) Rules, 2020, the contact details of the Grievance Officer are provided below:

10. Updates to This Policy

We may periodically update this Privacy Policy to reflect changes in our legal obligations or application enhancements. Any material revisions will be reflected with an updated "Effective Date" at the top of this page.