Privacy Policy

The short version

• We collect only what's needed to run the marketplace.
• Creator profiles are public by design. WhatsApp and email are optional, and shown only if you add them.
• Chats are private between the two people in them.
• We never sell your data and don't use advertising trackers.
• You can delete your account and data anytime.

What we collect

When you log in

Your email address (we send you a one-time login link). If we offer Google or SMS login and you use it, your name, email and profile picture from Google, or your phone number.

If you're a creator

Your profile: name, photo, Instagram handle (and optional YouTube or Facebook link), city and area, niches, languages, Instagram and Facebook follower counts, average views, rates, sample post links and bio; and, only if you add them, your WhatsApp number and contact email. Also your listing and Blue Tick plan and status, and pitches you send to businesses.

If you're a business

Offers you send (business name and type, dates, message, budget, and a phone or email only if you add one), creators you save, reports you file, your replies to pitches, and, if you create one, your public business profile (name, logo, category, city, Instagram, website and description).

Chats

Messages you send and receive in the app. Only the two people in a chat can read it. Our team may review a chat only to investigate a report, fraud or abuse, or when the law requires it.

Automatically

Counts of profile views and contact-button clicks per profile (to show creators simple stats), and standard server logs such as IP address and browser type, kept briefly for security and to prevent abuse.

Payments

On our website you pay by UPI from your own UPI app, and give us the 12-digit UPI reference number (UTR) so we can match your payment. We keep the reference, plan and amount, and see the payer name your bank shows us. In the Android app, payments go through Google Play. We never receive your card details, UPI PIN or bank password.

Why we use it

• To create and secure your account and log you in.
• To show creator profiles to businesses, show business profiles to Blue Tick creators, and deliver offers, pitches and chat messages.
• To run subscriptions and tell you about payments and renewals.
• To review profiles, prevent fraud, spam and abuse, and respond to reports.
• To meet legal obligations, such as tax records or lawful requests from authorities.

We process your data on the basis of your consent, which you give when you sign up, and for the legitimate uses allowed under the DPDP Act.

Who we share it with

Only service providers who help us run MySheher, under contracts that require them to protect it:

• Supabase: database, login and photo storage (servers in Mumbai, India).
• Netlify: website hosting and delivery (requests may be served from servers outside India).
• Your bank and UPI app (payments go directly from you to us), and Google Play for in-app payments.
• Google: “Continue with Google” login.
• Hostinger and Supabase: sending login links and account emails.

We may also disclose data if Indian law requires it. We never sell personal data.

How long we keep it

While your account is active. When you delete your account, we remove your profile, photos, saved creators, offers, pitches, business profile and chats right away (backups are cleared within 30 days). Payment records are kept for as long as tax and accounting laws require.

Your rights

You can:

• see and correct your data (most of it from your profile settings);
• delete your account and data on the Delete account page;
• withdraw consent (by deleting your account);
• nominate someone to exercise these rights on your behalf;
• complain to our Grievance Officer and, if unresolved, to the Data Protection Board of India.

Children

MySheher is only for people aged 18 or over. If we learn an account belongs to someone younger, we delete it.

Cookies and storage

We use only essential cookies to keep you logged in, and your browser's storage to remember things on your device: dark or light mode, your unfinished signup answers, and creators you passed while swiping. No advertising or cross-site tracking cookies.

Security

Data is encrypted in transit, access is restricted by strict database rules (for example, nobody can edit someone else's profile), and payment details never reach our servers. No system is perfect: if a breach affects you, we'll inform you and the authorities as the law requires.

Contact and Grievance Officer

Salinur Alom, Bongaigaon, Assam, India. Email: info@mysheher.com. We acknowledge requests within 24 hours and aim to resolve them within 15 days.

Changes

We'll update the date at the top when this policy changes, and tell you by email or on the site if the change is significant.