Privacy Policy

1. Data we collect

• Account data: name, email address, phone number, password (stored hashed) and account preferences.
• Transaction data: wallet top-ups, orders, invoices, payment status and payment-gateway references. We do not store full card numbers or CVV.
• Order content: the social media links and quantities you submit to fulfil an order.
• Technical data: IP address, device and browser type, pages viewed, and approximate location derived from IP.
• Support data: messages, emails and attachments you send to our support team.

2. How we use your data

• To create and manage your account and provide the services you request.
• To process payments, maintain your wallet and issue invoices.
• To dispatch orders to our fulfilment providers and track their progress.
• To provide customer support and respond to enquiries and disputes.
• To detect, prevent and investigate fraud, abuse and security incidents.
• To send service and transactional messages, and — where permitted — marketing you can opt out of at any time.
• To comply with legal, tax and regulatory obligations.

3. Legal bases

We process personal data on the basis of your consent, the performance of a contract with you, our legitimate interests in operating and securing our services, and compliance with legal obligations.

4. Cookies and similar technologies

We use strictly necessary cookies to keep you signed in and to secure the service, and analytics cookies to understand how the service is used. You can control cookies through your browser settings; disabling strictly necessary cookies may break core features.

5. Sharing your data

We share personal data only as needed with:

• Payment gateways (such as Razorpay and Cashfree) to process payments and refunds.
• Fulfilment providers who deliver the social media service you ordered.
• Infrastructure and communication providers (hosting, database, email) that process data on our instructions.
• Professional advisers and authorities where required by law or to protect our rights.

We do not sell your personal data. We share only the minimum necessary for each purpose.

6. Data retention

We retain personal data for as long as your account is active and for as long afterwards as needed to comply with legal, tax and accounting obligations, resolve disputes and enforce agreements. Order and financial records are typically retained for the period required by Indian law.

7. Security

We use administrative, technical and organisational measures to protect personal data, including encryption in transit, access controls, hashed passwords and encrypted storage of gateway credentials. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Your rights

Subject to applicable law, you may:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure of your data, where we are not required to keep it.
• Withdraw consent for processing based on consent.
• Nominate a person to exercise your rights in the event of death or incapacity.
• Lodge a complaint with us or with the Data Protection Board of India.

To exercise a right, email hello@paneladda.com. We may need to verify your identity before acting.

9. Children

Our services are not intended for children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

10. International transfers

Some of our service providers may process data outside India. Where we transfer personal data internationally, we take steps to ensure it receives an adequate level of protection consistent with applicable law.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted here with a revised “Last updated” date.

12. Contact

Privacy questions: hello@paneladda.com.