Privacy notice

This notice explains what personal data [PLACEHOLDER: legal name of the business] ("DealFeed", "we") collects, why, how long we keep it and your rights, under India's Digital Personal Data Protection Act, 2023.

What we collect

• Account: your email address (from Google or the email code you sign in with), and your name if you give it or it comes from your Google profile. We don't ask for your phone number at launch.
• Preferences: the interests you pick, and the referral or invite code you joined with.
• Activity: the deals you view and tap, and the orders stores and affiliate networks report to us.
• Payouts: your UPI ID when you add one, and the payouts we send you.
• Security: one-way hashes of your network address and browser, used to stop fraud. We don't keep the raw values.

Why we use it

To link orders to you, work out and pay your cashback and rewards, prevent fraud and abuse, keep records the law requires, and show you deals you're interested in. We don't sell your data and don't use it for anything else without asking.

Consent

By creating an account you consent to this use. You can withdraw consent at any time by deleting your account (below). Some records must still be kept for legal reasons, as explained under "How long we keep it".

Who sees it

• Stores and affiliate networks see only an anonymous click ID, not who you are.
• At launch we send payouts ourselves by UPI from our bank account. Only our team sees your full UPI ID, only to pay you, and every view is logged.
• Our service providers process data for us: Supabase (database and sign-in), Vercel (hosting) and Google (if you sign in with Google).
• We may share data if the law requires it.

How it's protected

Your UPI ID is encrypted and shown only masked (like ra***@okaxis). Access to your records is limited by account-level security rules, and every admin action involving money or your UPI ID is logged.

Cookies and your device

A sign-in cookie keeps you logged in. If you arrived through an invite link, a cookie remembers the invite code for 30 days. Your theme and saved deals are kept on your device only.

How long we keep it

• Purchases, payouts and cashback records: 8 years (financial and tax records), then the link to you is removed.
• Clicks: 13 months. Fraud records: 3 years. Founding reel views: 6 months after the program ends.
• Backups are kept for up to 14 days (daily) and 3 months (monthly).

Your rights

You can ask us to: - give you a copy of your data; - correct it; - delete your account and personal data. We delete your name, email, UPI ID and activity within 30 days. Money records we must keep are kept without your name. Withdraw any Available balance first: pending cashback is lost when an account is deleted; - withdraw your consent; - name someone to use these rights for you if you're unable to.

Make a request by email to PLACEHOLDER: privacy email]. If you're not satisfied, contact our Grievance Officer on the [Grievance page, and then the Data Protection Board of India.

Changes

If we change this notice in a way that matters, we'll tell you in the app or by email before it applies.