Privacy Policy
Abhinayo (“we”, “us”) is a platform at abhinayo.com that helps content creators plan, create, market, manage and monetize their work. This policy says what we collect, why, and what you can do about it. It is written to meet India’s Digital Personal Data Protection Act, 2023 and the platform rules of Meta and Google.
1. Who we are
Abhinayo is operated from India by Nikunj Kaushik, the data fiduciary for this service until a company is incorporated, at which point this page will name it. Contact: privacy@abhinayo.com.
2. What we collect
- Account data: your name, email or phone number, username, and a hashed password or one-time code. Needed to run your account.
- Creator profile: your handles, follower counts, niche, city and the rates you tell us. Used to price your work and plan your content.
- Content you upload: scripts, videos, voice and face samples for your digital twin, performance screenshots and CSV exports, contracts you ask us to review, and your income entries. Used only to deliver the feature you used them for.
- Connected platform data (only after you connect an account and approve the permissions): Instagram and YouTube profile, media, insights and, if you enable the inbox, your business messages. See sections 5 and 6.
- Your customers’ contact details (ads feature): emails and phone numbers you upload are hashed on arrival and sent to Meta or Google only in hashed form for audience matching. We cannot read them back.
- Usage and technical data: pages visited, errors, device and browser type, IP address, kept for security and to fix problems.
3. How we use it
- To run the features you asked for: ideas and scripts, your twin, posting plans, performance in plain language, deal and contract help, income tracking, ads.
- To send you service messages: one-time codes, invoices, deal alerts (by email or WhatsApp if you opt in).
- To keep the service secure and improve it. We look at aggregated, de-identified usage.
- We do not train AI models on your content, your messages or your customers’ data, and we do not sell personal data.
4. AI processing
Features such as script writing, hook grading, reply drafting and contract review send the relevant text to third-party AI providers (for example Anthropic, and other models routed through OpenRouter) under terms that forbid training on your data. Your digital twin, when enabled, is generated by a video provider from samples you upload and consent to; the samples remain yours and are deleted when you delete the twin.
5. Meta (Instagram and Facebook) data
If you connect an Instagram professional account we use Meta’s APIs to read what you permit: profile, media, insights, and, for the inbox, messages from brands. Instagram messages are kept for at most 90 days and are used only to show them to you and draft replies you approve. Replies are sent only when you tap send, except for intents you explicitly whitelist. We follow Meta’s Platform Terms and Developer Policies. You can disconnect at any time from Settings or from your Instagram account’s Apps and Websites page.
6. YouTube API Services
Abhinayo uses YouTube API Services. By connecting a YouTube channel you agree to be bound by the YouTube Terms of Service, and the Google Privacy Policy applies to Google’s handling of your data. We access and store your channel statistics and video analytics to show them to you and to tell you when you qualify for the YouTube Partner Program. Stored YouTube data is refreshed or deleted within 30 days. You can revoke our access at any time at Google security settings.
7. Who else sees your data
Only providers that run the service, under contract, and only what each needs: hosting (Google Cloud, Vercel or Cloudflare, Supabase), payments (Razorpay), email and WhatsApp delivery, error tracking, and the AI and video providers above. Meta and Google receive hashed customer lists for ads you choose to run. We disclose data to authorities only when the law requires it.
8. Where your data lives and how long
Data is stored in India where our providers offer it, otherwise in the provider’s nearest region. Account and profile data stay while your account is open. Instagram messages: 90 days. YouTube data: 30 days. Uploaded samples, videos and contracts: until you delete them or close your account. Invoices and payment records: as long as Indian tax law requires.
9. Your rights and how to delete your data
You can see, correct, download or erase your personal data, withdraw consent, and nominate someone to exercise these rights, as the DPDP Act provides. To delete everything: open Settings, choose Delete account, or email privacy@abhinayo.com from your registered address with the subject “Delete my data”. We confirm within 7 days and erase within 30, except records the law makes us keep. If you connected Instagram or YouTube, disconnecting from their side also triggers deletion of the data we hold from that platform. If you are not satisfied, you may complain to the Data Protection Board of India.
10. Children
Abhinayo is for people aged 18 and over. We do not knowingly collect data from children.
11. Security
Data is encrypted in transit and at rest. Customer contact lists are hashed on arrival. Access is limited to the people and systems that need it, and logged.
12. Changes
We will post changes here and, for material changes, tell you by email or in the app before they take effect.
13. Contact
privacy@abhinayo.com. Grievance Officer: Nikunj Kaushik, same address.