PPuzzle Media
PrivacyTerms

Privacy Policy

Last updated: 1 June 2026

Draft for review. This document is a template prepared to help you launch and is not legal advice. Replace every [bracketed]placeholder with your real details and have a qualified lawyer review it before you rely on it.

This Privacy Policy explains how [Company Legal Name] (“Puzzle Media”, “we”, “us”) collects, uses, shares and protects your personal data when you use our influencer-marketing platform — the Puzzle Media website, brand dashboard and creator mobile app (together, the “Platform”). We act as a Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”).

1. Who we are

[Company Legal Name], a company registered in India at [Registered Address], GSTIN [GSTIN]. Contact: vidyut@thepuzzlemedia.com.

2. The data we collect

  • Account data: name, email, phone number, password (stored hashed), and role (brand or creator).
  • Brand data: business name, category, city, and campaign details you create.
  • Creator data: username, bio, city, social handles (Instagram/TikTok), follower counts and estimated local reach.
  • Location data: the campaign location you set (brands) and the area used to find nearby offers (creators).
  • Content & performance: links to your posts and associated metrics (reach, impressions, engagement) used to verify collaborations.
  • Payment data: subscription and transaction records. Card/UPI details are processed directly by our payment processor (Razorpay) — we do not store full card numbers.
  • Device & usage data: device push tokens, log data, and analytics about how you use the Platform.

3. How we use your data & our legal basis

We process your data on the basis of your consent and to provide the service you request, in order to:

  • create and manage your account and authenticate you (including phone/OTP login);
  • match brands with nearby creators and run campaigns, vouchers and verification;
  • process subscriptions and payments and send transactional messages;
  • provide analytics, support, security, fraud prevention, and to comply with law.

4. Sharing your data

We share data only as needed to run the Platform:

  • Between users: a creator’s public profile and post metrics are shown to the brand whose campaign they join; a brand’s active campaign details are shown to nearby creators.
  • Service providers (processors): Razorpay (payments), cloud hosting, email/SMS providers, mapping, analytics and error-monitoring tools, and Meta/TikTok APIs (to verify posts) — each only for the purposes above.
  • Legal: where required by law or to protect rights and safety.

We do not sell your personal data.

5. International transfers

Some service providers may process data outside India. Where they do, we take steps so your data remains protected consistent with the DPDP Act and applicable law.

6. Data retention

We keep personal data only as long as needed for the purposes above or as required by law (for example, tax and accounting records). When no longer needed, we delete or anonymise it.

7. Your rights

Subject to applicable law, you may:

  • access and request a summary of the personal data we hold about you;
  • correct or update inaccurate data;
  • request erasure of your data;
  • withdraw consent at any time (this won’t affect prior lawful processing);
  • nominate another person to exercise your rights in case of death or incapacity;
  • raise a grievance with our Grievance Officer (below).

8. Grievance Officer

In accordance with the DPDP Act and the Information Technology Act, our Grievance Officer is:
[Grievance Officer Name], grievance@thepuzzlemedia.com, [Registered Address]. We aim to acknowledge grievances promptly and resolve them within the timelines required by law.

9. Children

The Platform is intended for users aged 18 and over. We do not knowingly process the personal data of children without verifiable parental/guardian consent as required by the DPDP Act.

10. Security

We use reasonable technical and organisational safeguards — including encryption in transit, hashed passwords and one-time codes, access controls and rate limiting — to protect your data. No method of transmission or storage is completely secure, however.

11. Changes

We may update this Policy from time to time. Material changes will be notified through the Platform or by email, and the “Last updated” date above will change.

12. Contact

Questions about this Policy or your data? Email vidyut@thepuzzlemedia.com.