Privacy Policy

1. Who We Are and Scope

Sixsense Media Private Limited (“we”, “us”) operates PRLinkUp. For the personal data described here, we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and its Rules, as they come into force. We also comply with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. This policy applies to Brands, Creators and visitors who use the Platform, and serves as the notice we give you before asking for your consent.

2. Personal Data We Collect

Data you give us

• Identity and contact: name, business or page name, mobile number, email, city and state, profile photo, and date of birth or age confirmation.
• Business data (Brands): company name, GSTIN, address, brand details and authorised representative.
• Creator profile: social media handles and links, niche, audience details, rate card, portfolio and content you upload.
• Tax and payout data (Creators): PAN, name as per PAN, bank account number and IFSC, UPI ID, GST details if registered and, where required by law or our Payment Partner, Aadhaar-based or other KYC documents.
• Communications: in-app chats, Campaign briefs, dispute evidence, support tickets and feedback.

Data collected automatically

• Device and technical data: device model, operating system, app version, IP address, language, crash logs, and advertising or device ID.
• Usage data: pages viewed, features used, Campaign activity, timestamps and referral source.
• Approximate location derived from your IP address; precise location only if you allow it.
• Cookies and similar technologies on our website and app (see section 9).

Data from other sources

• Public or API-based social media data (follower count, engagement, audience demographics and post links) that you authorise us to fetch through your social login or by sharing analytics.
• Verification results from KYC, PAN-validation and bank-verification providers.
• Payment status from Razorpay or other Payment Partners. We do not store your full card number, CVV, UPI PIN or net-banking credentials; these are handled by the Payment Partner under PCI-DSS and RBI rules.

3. Why We Use Your Data (Purposes)

• To create and manage your account, verify your identity and prevent fake or duplicate accounts.
• To match Brands and Creators, show profiles and run Campaigns.
• To collect payments, calculate fees and taxes, deduct TDS, issue invoices and pay Creators.
• To meet legal duties: tax filings, TDS returns and certificates, GST invoicing, accounting, KYC and anti-money-laundering requests from authorities.
• To resolve disputes, and to detect and prevent fraud, abuse and security incidents.
• To send service messages (OTPs, payment and Campaign alerts) and, with your consent, offers and product updates.
• To analyse and improve the Platform, and to provide customer support.
• To enforce our Terms and protect our rights.

We will not use your data for any purpose not stated here without fresh consent or a legal basis.

4. Consent and Lawful Basis

We process your data based on your free, specific, informed and unambiguous consent, given by ticking a box or by a clear action in the app, and for “legitimate uses” permitted by the DPDP Act, such as performing legal obligations, responding to a court or authority, and preventing fraud.

You may withdraw your consent at any time by writing to us or by using the in-app settings. Withdrawal does not affect processing done before it, and it may stop us from providing services that need that data (for example, we cannot pay you without your PAN and bank details). Where required by law, we will keep the data needed for tax, accounting and legal compliance even after withdrawal.

5. Who We Share Data With

We do not sell your personal data. We share it only as needed with:

• Other Users. Brands see a Creator’s public profile, social links, analytics and Campaign Deliverables. Creators see a Brand’s business name, brief and the contact details needed for the Campaign. PAN, bank and KYC details are never shown to other Users.
• Payment Partners and banks (such as Razorpay), to process payments, verify accounts and pay out funds.
• Service providers acting on our instructions: cloud hosting, SMS and email, analytics, customer support, KYC and verification, fraud prevention, and chartered accountants or auditors, all bound by confidentiality and data-protection terms.
• Government and regulators, including the Income-tax Department, GST authorities, the RBI, law enforcement and courts, where required by law or valid legal process.
• Business transfers: in a merger, acquisition or restructuring, subject to this policy continuing to apply.
• Others, with your explicit consent.

6. Storage, Transfers and Retention

Your data is stored on secure servers located in India. If we transfer data outside India, we do so only to countries or providers permitted under the DPDP Act and with suitable safeguards.

We keep personal data only as long as needed for the purposes above. As a general rule:

• account data, while your account is active and for 3 years after closure;
• transaction, invoice and tax records, for up to 8 years (or longer if the law requires);
• KYC records, as required by RBI and PMLA norms;
• dispute records, for 3 years after resolution; and
• logs, for 12 months.

After that, we delete or anonymise the data.

7. Security

We use encryption in transit (TLS) and encryption at rest for sensitive fields such as PAN and bank details, role-based access, audit logs, regular security testing and staff confidentiality obligations. No system is completely secure. If a personal data breach occurs, we will inform affected Users and the Data Protection Board of India as required by law.

8. Your Rights

Under the DPDP Act, you may:

• access a summary of the personal data we process and the parties we have shared it with;
• correct, complete or update inaccurate or incomplete data;
• erase your data when it is no longer needed, subject to legal retention duties;
• withdraw your consent at any time;
• nominate another person to exercise your rights in the event of your death or incapacity; and
• seek grievance redress from us and, if it is not resolved, complain to the Data Protection Board of India.

To exercise any right, write to our Data Protection / Grievance Officer (section 12). We may ask you to verify your identity first, and will respond within the time prescribed by law (we aim for 30 days).

9. Cookies and Tracking

We use essential cookies and SDKs for login and security, and analytics cookies to understand usage. Non-essential cookies and marketing SDKs are used only with your consent, which you can manage in the app or your browser settings.

10. Children

The Platform is for persons aged 18 and above. We do not knowingly collect data from children. If we learn that we hold a child’s data, we will delete the account and the data unless the law requires otherwise.

11. Third-Party Links and Social Platforms

The Platform links to Instagram, YouTube, Facebook, X, Snapchat, Telegram, WhatsApp and other third parties. Their use of your data is governed by their own policies, which we do not control.

12. Data Protection Officer / Grievance Officer and Changes

For privacy questions or to exercise your rights, contact our Grievance / Data Protection Officer using the details below.

We may update this policy from time to time. We will notify you of material changes in the app or by email. The effective date at the top of this page shows the latest version.