Privacy Policy

1. What we collect when you sign up

• Your name, email address and/or mobile number, and how you signed in (email, Google, Apple or phone code). Sign-in is handled by Google Firebase Authentication.
• Your role (brand or creator) and the profile you fill in: handle, city, niches, languages, platforms, brand name, category and website.
• For creators who get paid: UPI ID or the last 4 digits of a bank account, and PAN when the law needs it for tax.

2. What we read when a creator connects Instagram

Only if you press “Connect Instagram” and agree on Instagram’s screen. It works with Instagram business and creator accounts. We ask for two permissions:

• instagram_basic / instagram_business_basic: your username, name, account type, profile picture, follower count, number of posts, and your recent posts (caption, type, link, time, likes and comments).
• instagram_manage_insights / instagram_business_manage_insights: reach, views, interactions, saves and shares for your recent posts, and account totals for the last 28 days.

We use this to show brands your real numbers on your Creator Profile and in search, so you do not have to type or prove them. We never post, comment, message or change anything on your account. We do not read your DMs or your followers’ personal details.

3. What we read when a creator connects YouTube

Only if you press “Connect YouTube” and agree on Google’s screen. We ask for read-only access:

• youtube.readonly: your channel name, link, picture, subscriber count, total views, video count, and your recent videos with their views, likes and comments.
• yt-analytics.readonly: channel totals for the last 28 days (views, watch time, average view time, likes, comments, shares, new subscribers).

We use this only to show your real numbers to brands. We cannot upload, edit or delete anything on your channel. FyFluencer’s use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. We do not use this data for ads and we do not sell it.

4. How often we refresh connected numbers

We refresh connected accounts about twice a day and show “Last synced” next to them. To keep access working we store the access tokens the platform gives us, encrypted (AES-256-GCM) in our database. Staff cannot see them in the app.

5. Work, payments and messages

• Campaign briefs, offers, chats and the files you upload for a collab.
• Payments are processed by Razorpay. We store the order and payment reference and status, not your card or bank login details.
• Basic device and usage data (pages visited, errors, browser type) to keep the service safe and fix problems. If you allow notifications, we store a device token from Firebase Cloud Messaging to send alerts.

6. Who we share data with

We do not sell your data. We share it only to run FyFluencer:

• Brands see a creator’s public profile and connected numbers. Creators see the brand profile and campaign brief.
• Service providers who work for us: Google Firebase (sign-in and notifications), Razorpay (payments), our hosting and storage providers, and email/SMS senders.
• Authorities, when the law requires it.

7. How long we keep data

• Connected account data: until you disconnect, delete your account, or remove FyFluencer from the platform. Then we delete it right away.
• Account and collab records: while your account is open. Payment and tax records may be kept for up to 8 years where Indian law requires it.
• Logs: up to 90 days.

8. Your choices and rights

• Disconnect Instagram or YouTube any time in Settings → Connected accounts. We revoke access where the platform allows it and delete what we stored from that account.
• Remove FyFluencer from Instagram (Settings → Apps and websites) or from your Google account (myaccount.google.com/permissions). We delete the connected data when the platform tells us.
• Ask to see, correct or delete your data: see the Data deletion page or email privacy@fyfluencer.com.

9. Security

We use HTTPS everywhere, encrypt platform tokens, limit staff access, and keep sign-in with Firebase. No system is perfect; if something goes wrong we will tell affected users quickly.

10. Children

FyFluencer is for people aged 18 or older.

11. Changes and contact

If we change this policy we will update the date above and tell you in the app for big changes. Questions: privacy@fyfluencer.com.