Privacy Policy

1. Data We Collect

• Account data: Name, email address, and/or phone number when you register.
• Location data: City or approximate coordinates to show nearby offers. This is shared voluntarily; a default city feed is used if you decline.
• Content data: Reviews, ratings, comments, and watchlists you create.
• Merchant data: Store name, address, WhatsApp number, logo, and offer details submitted by merchant accounts.
• Payment data: Subscription transactions are processed by Razorpay. We do not store card numbers or UPI credentials. We retain subscription status and billing dates.
• Usage data: Pages visited, offers viewed, clicks, and engagement events to improve recommendations and platform performance.
• Technical data: IP address, browser type, and device information collected automatically.

2. How We Use Your Data

• To provide and personalise the discovery feed, movie recommendations, and nearby offers.
• To allow merchants to reach local customers and manage their listings.
• To process subscription payments via Razorpay.
• To send transactional notifications (offer expiry, new reviews on your content).
• To detect and prevent fraud, abuse, and security incidents.
• To comply with legal obligations under Indian law.

3. Legal Basis for Processing

We process your data on the basis of: (a) your consent at account creation; (b) contractual necessity to provide services you have requested; and (c) our legitimate interests in operating a safe, functional platform, to the extent these do not override your rights.

4. Data Sharing

• Razorpay: Payment processing. Governed by Razorpay's Privacy Policy.
• Cloudinary: Image storage and delivery for profile photos and offer banners.
• The Movie Database (TMDB): Movie metadata. No personal data is shared.
• Google Maps: Location display on offer pages. No personal data transmitted beyond your city name.
• We do not sell, rent, or trade your personal data to third parties for marketing purposes.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, personal data is removed within 30 days, except where retention is required by law (e.g., financial records for 7 years under Indian tax law). Anonymous usage aggregates may be retained indefinitely.

6. Your Rights (DPDP 2023)

• Access: Request a copy of the personal data we hold about you.
• Correction: Update inaccurate data from your account settings or by contacting us.
• Erasure: Request deletion of your account and associated personal data. Use the "Delete my account" option in your dashboard or email us.
• Nomination: Nominate another person to exercise these rights on your behalf.
• Grievance: Lodge a complaint with us. If unresolved, you may approach the Data Protection Board of India once constituted.

To exercise any right, email privacy@InDaily.in. We will respond within 30 days.

7. Cookies and Tracking

We use a single secure, HttpOnly session cookie for authentication. This cookie does not track you across third-party sites. If we add analytics or advertising cookies in the future, we will update this policy and request consent where required.

8. Security

Passwords are hashed using bcrypt. Auth tokens are stored in HttpOnly, Secure, SameSite=Strict cookies inaccessible to JavaScript. Payment data is handled exclusively by Razorpay's PCI-DSS-compliant infrastructure. We use HTTPS for all data in transit.

9. Children

InDaily is not directed at children under 18. If we become aware that a child has provided personal data without parental consent, we will delete it promptly.

10. Changes to This Policy

We may update this policy. Material changes will be announced via an in-app notification at least 7 days before they take effect. Continued use of InDaily after that date constitutes acceptance of the revised policy.

11. Contact

InDaily Privacy Team
Email: privacy@InDaily.in